Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ia-5TDNVebE4oskcLkB0oGtEvIA.roa
File: ia-5TDNVebE4oskcLkB0oGtEvIA.roa (raw, json)
Hash identifier: V9m4PNpYQCk1UokFLaoHOag0EET27y+vIwJuFjAWgFM=
Subject key identifier: 89:AF:B9:4C:33:55:79:B1:38:A2:C9:1C:2E:40:74:A0:6B:44:BC:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CAE1E22DA9CFE8B5B06385D25D30F4547
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ia-5TDNVebE4oskcLkB0oGtEvIA.roa
Signing time: Mon 02 Mar 2026 10:35:36 +0000
ROA not before: Mon 02 Mar 2026 10:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 151.244.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:1e:22:da:9c:fe:8b:5b:06:38:5d:25:d3:0f:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 2 10:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89afb94c335579b138a2c91c2e4074a06b44bc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:7d:d6:ad:db:b7:87:1e:a7:9a:92:57:39:
99:3f:f4:b4:ef:87:e3:f7:fd:a0:e0:4b:09:6d:ff:
fd:20:de:3b:93:ce:f3:ef:45:24:90:be:c0:81:47:
6f:02:25:90:58:59:d1:53:51:13:04:bc:7c:6b:62:
5a:44:ef:eb:7b:fb:c0:51:ca:2a:71:74:e3:b3:8c:
a0:cf:60:08:1f:91:e3:fa:9b:63:54:6f:0b:66:7d:
05:45:4d:5f:22:d5:4a:7d:5b:d1:ae:af:ac:a3:cb:
9e:f5:2b:8a:bf:85:19:d7:0b:70:df:c5:4d:37:32:
b6:e4:ca:e4:70:22:29:41:17:3a:d7:d8:e0:96:e8:
3b:ec:86:e5:84:02:ce:26:af:4b:cf:f8:6e:cb:22:
52:1a:13:ed:1a:68:28:6a:d9:9a:af:ad:c1:1a:8e:
2a:8f:7f:20:72:89:c5:08:f3:39:ad:6d:4a:33:14:
22:d5:0f:e9:a5:d0:02:c7:43:b0:c0:46:85:e6:f7:
46:8e:94:ab:ba:19:83:ff:07:14:f4:a3:6e:fe:1c:
19:06:1e:41:79:d6:f9:fa:64:83:23:62:0e:46:5d:
20:11:dd:f1:2e:c1:cc:ca:27:db:ef:e5:d7:8d:34:
63:06:10:fc:f1:0f:df:f2:68:30:0d:40:fa:cc:78:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:B9:4C:33:55:79:B1:38:A2:C9:1C:2E:40:74:A0:6B:44:BC:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ia-5TDNVebE4oskcLkB0oGtEvIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:27:2c:cc:bf:a0:5f:12:33:f5:4d:1b:b0:e9:4b:ea:09:7c:
3e:73:df:3b:74:fb:1f:08:6d:22:02:c2:c5:c3:a7:a7:c3:a0:
c2:16:f4:96:24:b2:16:25:08:01:a9:5c:75:83:68:72:6f:00:
cd:cf:f1:d9:2c:7c:f2:83:f5:e7:c5:8c:30:6f:b2:74:66:8f:
04:d6:16:46:ef:76:7e:ac:85:63:d7:4a:42:22:79:ab:62:b0:
bd:fe:b3:22:fc:b4:55:df:ac:a6:eb:d9:a5:97:47:0e:6e:50:
0c:2c:3a:f2:d0:c6:17:ab:47:20:aa:0d:bc:b6:1e:9d:e6:f6:
9c:c8:54:69:3c:17:6b:a8:ee:94:37:6e:65:71:c9:ed:ea:97:
7e:6d:56:ac:9a:cd:f6:ed:d9:82:8e:62:d0:2e:15:49:fa:3a:
0a:79:21:af:d3:b4:b8:7e:53:05:55:05:10:51:60:10:f0:e1:
ed:ab:0d:12:98:85:20:26:25:86:dc:c6:49:f8:2b:f0:e8:af:
62:26:78:80:ac:84:1d:ee:54:23:d3:39:75:d3:0e:82:f5:0c:
8e:c6:73:9f:46:83:f1:55:01:88:09:fa:93:e3:65:ea:3f:c0:
5e:a3:cc:7e:36:69:c6:df:d0:4d:48:40:8a:48:b4:e6:e9:9a:
8c:68:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:03:44 2026 by rpki-client