Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/IhLOm92HXnyakwrGk2b3G1y7Qh8.roa
File: IhLOm92HXnyakwrGk2b3G1y7Qh8.roa (raw, json)
Hash identifier: XGBsWtqTuRWJyVArj43ucXy3vxmDpsoMFLfVD7o3X1A=
Subject key identifier: 22:12:CE:9B:DD:87:5E:7C:9A:93:0A:C6:93:66:F7:1B:5C:BB:42:1F
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 01A02F499946D494B2091BF2C8469012CAFE
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/IhLOm92HXnyakwrGk2b3G1y7Qh8.roa
Signing time: Sun 23 Aug 2026 15:42:27 +0000
ROA not before: Sun 23 Aug 2026 15:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 62.182.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:49:99:46:d4:94:b2:09:1b:f2:c8:46:90:12:ca:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Aug 23 15:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2212ce9bdd875e7c9a930ac69366f71b5cbb421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:cb:87:b1:73:c2:34:18:6c:37:78:3b:cf:
d6:3b:5e:e3:38:ba:28:d7:e7:50:d7:7d:17:2f:7d:
e1:85:69:49:c7:ce:6a:9f:e4:cd:5e:5e:de:45:d6:
ac:f5:0c:e4:63:52:1f:61:3a:61:f1:46:4a:5f:8a:
c9:a1:03:5a:ce:e4:9e:c4:37:ac:3b:c9:d5:9a:cc:
0b:26:63:03:0d:2f:4c:9c:bc:44:8a:be:ea:09:13:
0c:3d:cb:20:39:5d:cf:99:4a:8e:f3:4f:9a:71:01:
d1:f3:69:96:47:90:b1:ce:31:e2:dd:4f:b5:5d:5c:
36:35:45:27:f4:e0:50:ae:eb:69:7d:31:a6:7e:cb:
93:ae:6e:55:98:44:a9:39:79:ff:4b:88:bf:f9:e7:
ff:e3:4a:e2:e2:1e:ab:ff:68:f5:9f:85:26:a3:d2:
8f:89:df:00:97:12:77:c2:36:71:2a:33:f9:cb:24:
ed:59:a4:83:c4:27:c2:52:ae:48:97:24:e2:b5:c0:
a6:f4:74:22:b4:f1:e5:f1:ad:25:d7:ca:4c:2d:8d:
86:dc:09:43:33:42:6f:7c:13:6c:4d:58:16:33:c0:
59:fd:ab:9d:2c:85:e6:86:c8:d4:06:29:2d:49:5a:
6a:a0:28:11:8b:e8:64:ce:f5:02:fa:e7:45:fe:bd:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:CE:9B:DD:87:5E:7C:9A:93:0A:C6:93:66:F7:1B:5C:BB:42:1F
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/IhLOm92HXnyakwrGk2b3G1y7Qh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.185.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c8:90:95:7b:d0:19:5a:fd:b4:f4:41:04:bf:b9:d0:43:5f:
ba:ed:3c:6d:4e:ea:88:44:f9:74:0a:a7:53:7c:bf:b4:ab:5c:
fe:54:47:bc:13:66:d3:55:b5:98:17:e6:b9:82:8a:13:4b:a6:
0b:45:36:23:fa:c3:bc:2f:42:aa:a6:09:c5:50:e4:bf:ca:ba:
f4:cd:ad:c7:3b:03:4d:f3:10:a8:f5:b2:13:6a:f4:36:da:cf:
de:d5:ac:1b:ec:51:03:f3:c0:62:01:e4:7d:33:1e:0c:a0:de:
c6:9b:a2:71:e1:43:db:97:0d:99:58:7d:f5:32:96:ea:1b:88:
f3:67:f7:78:f8:78:f6:c9:6a:4a:b6:d7:79:62:23:2e:b3:31:
7a:37:a7:e0:31:a1:9e:f4:94:90:1c:41:57:73:bf:ac:f8:85:
0b:6d:62:74:ba:d8:69:22:71:fa:41:ef:90:5c:4a:12:5a:41:
0f:e6:a4:7a:21:c3:99:60:d7:b6:1a:42:6d:9b:65:99:cb:04:
53:b7:0b:6d:b6:cc:e7:7f:25:c3:3b:08:69:a2:2c:b6:13:4f:
87:39:b8:60:51:a9:99:df:df:23:9f:1d:32:ec:66:13:b4:42:
df:b5:02:c3:ae:fa:09:4b:11:3e:1a:15:a6:28:48:c6:d6:37:
68:75:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:16:35 2026 by rpki-client