Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa
File: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (raw, json)
Hash identifier: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=
Subject key identifier: 89:9B:86:03:DD:D9:65:63:77:5F:E7:17:C8:21:D0:92:84:BF:57:0D
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 019F2368C60F5636A67D7D7BB7D1A016E686
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60848
IP address blocks: 94.127.60.0/22 maxlen: 22
185.247.96.0/24 maxlen: 24
185.247.99.0/24 maxlen: 24
2a02:2188::/48 maxlen: 48
2a02:2188:2000::/36 maxlen: 36
2a02:2188:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c6:0f:56:36:a6:7d:7d:7b:b7:d1:a0:16:e6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=899b8603ddd96563775fe717c821d09284bf570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:30:72:02:86:24:a5:e7:92:ab:35:03:aa:
20:f9:27:46:22:7d:6a:91:3b:52:34:94:46:82:12:
ab:75:6b:db:67:cb:38:d7:b1:a4:f5:df:57:13:14:
2b:bc:19:fd:fb:0c:3d:fc:cb:ba:e0:c7:fd:a0:0c:
e0:ff:41:4d:9c:de:a9:b0:49:d5:75:25:79:5f:d6:
5b:12:6f:c2:99:80:1e:71:0e:bd:33:04:c5:1e:09:
18:5a:2a:48:b9:e3:5a:4f:2b:ff:82:4b:43:4d:59:
db:5d:76:1f:02:9f:54:20:b4:ea:2e:26:71:e1:65:
04:c2:61:da:86:cd:75:d9:6c:26:4f:62:f8:09:98:
79:57:20:a1:5e:ad:e2:16:ca:63:ab:60:c3:66:6c:
86:3f:e9:8f:07:74:a1:7c:78:46:88:fa:b1:24:e8:
64:99:19:77:7c:7b:13:75:4b:9b:b4:22:00:30:e6:
0b:9c:2b:2a:a8:4a:ab:91:7f:6e:b9:2e:dd:2b:82:
36:e3:45:b0:e9:27:74:08:59:ac:1c:69:20:2d:71:
71:a2:7a:e3:79:c2:7f:dc:e0:87:26:49:f3:70:aa:
9d:f0:ab:da:ba:b3:d4:d0:af:bb:d5:ec:ef:ae:de:
26:37:c4:f6:98:82:c0:10:71:9c:e9:6f:07:0f:60:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9B:86:03:DD:D9:65:63:77:5F:E7:17:C8:21:D0:92:84:BF:57:0D
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.60.0/22
185.247.96.0/24
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:2000::/36
2a02:2188:f000::/36
Signature Algorithm: sha256WithRSAEncryption
d5:52:6e:9c:fc:7a:5d:8d:f6:d0:e2:47:0b:2f:c9:d0:43:b6:
b4:da:dd:d6:2b:ae:ec:b0:dd:c9:2d:7c:59:3e:66:b1:44:ab:
11:2b:05:70:48:3f:d2:bd:c2:ad:c6:fc:d3:4a:20:1c:1d:ba:
3e:d5:35:63:b4:2f:c0:35:94:d3:43:b1:e6:5f:2b:0f:b5:32:
a5:ba:f3:3f:a2:c8:ba:3d:93:db:12:8b:f5:c5:b0:9b:7e:1a:
a2:d3:fc:63:dc:6c:2c:4f:95:91:59:4a:9f:af:68:2c:b7:55:
e2:95:71:b7:64:a6:12:9f:2e:4e:41:c4:6b:bf:3c:42:97:5d:
12:61:51:9d:cc:bb:0f:73:c7:67:c5:46:2c:5d:8a:8b:3d:81:
e4:4c:74:09:28:f8:f0:1c:8d:c9:a0:9a:05:13:42:e1:b6:ab:
9b:8a:05:1c:bc:ea:85:2f:eb:b5:88:ae:09:11:91:17:a5:c9:
bc:21:bc:4e:6d:13:25:db:d1:a1:71:ba:3c:79:96:92:3d:3f:
5f:1d:0a:4f:a1:54:2b:4b:c4:04:ea:40:ef:d1:2f:60:f3:93:
9e:17:bc:dc:fc:63:b1:d6:0d:e1:43:5b:52:c4:b4:85:bc:71:
4e:52:b1:dd:21:c5:61:e4:a6:89:48:7e:e8:bf:cb:44:4f:0e:
c6:0d:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:33 2026 by rpki-client