Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/igCk7oNrHtLfxuau9vPZGAQvZ_M.roa
File: igCk7oNrHtLfxuau9vPZGAQvZ_M.roa (raw, json)
Hash identifier: Ur8FR9IN0yI1c69evJkfyoGd+ghZTySnXPRPUeZRMAc=
Subject key identifier: 8A:00:A4:EE:83:6B:1E:D2:DF:C6:E6:AE:F6:F3:D9:18:04:2F:67:F3
Certificate issuer: /CN=240b32cd6b5797bba8de75710d2263858909f386
Certificate serial: 019ED5E35D7BADBCE8D682A65592F2074EE4
Authority key identifier: 24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/igCk7oNrHtLfxuau9vPZGAQvZ_M.roa
Signing time: Wed 17 Jun 2026 14:01:48 +0000
ROA not before: Wed 17 Jun 2026 14:01:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51031
IP address blocks: 2001:678:12ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 13:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:e3:5d:7b:ad:bc:e8:d6:82:a6:55:92:f2:07:4e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240b32cd6b5797bba8de75710d2263858909f386
Validity
Not Before: Jun 17 14:01:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a00a4ee836b1ed2dfc6e6aef6f3d918042f67f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:49:48:10:3d:65:9d:d4:55:fe:71:76:57:
f0:c2:19:e1:31:d3:80:84:4e:8e:d7:76:9a:ac:96:
91:f4:a0:3d:97:ba:fb:32:b7:01:97:3c:8b:ab:fa:
61:e6:3f:0d:c1:68:46:3d:62:3c:51:ef:06:b5:57:
81:92:df:5b:c5:81:9e:86:3c:19:46:7f:a9:2e:ee:
5c:4a:01:e1:7f:95:3b:fa:71:9a:20:79:bb:77:0f:
29:2f:88:0f:ba:0e:63:97:41:23:32:7d:79:89:0a:
71:9e:b5:42:18:34:3b:43:1b:7d:14:ed:26:79:36:
2c:dc:e8:b6:45:19:59:8f:e2:34:78:c2:9d:8d:f7:
ff:8d:9a:65:bd:c3:bd:61:1d:79:a3:57:44:65:5a:
85:8b:86:95:66:d4:c2:ae:b6:2e:55:d2:08:56:fd:
81:75:09:80:f9:59:8a:4a:ed:dc:fd:5c:98:6f:68:
67:71:08:87:51:d4:38:73:21:5f:75:44:99:0f:e2:
2e:fd:2d:63:be:4c:71:5e:c5:a3:9f:4d:21:c9:40:
d1:cd:15:47:94:7e:49:16:9b:24:a6:dc:94:4f:70:
d1:68:85:4d:72:4c:ee:6e:b9:be:ef:c4:96:6e:7a:
bd:78:b8:55:67:4c:f8:83:7e:83:27:f7:a4:83:44:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:A4:EE:83:6B:1E:D2:DF:C6:E6:AE:F6:F3:D9:18:04:2F:67:F3
X509v3 Authority Key Identifier:
keyid:24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/igCk7oNrHtLfxuau9vPZGAQvZ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12ac::/48
Signature Algorithm: sha256WithRSAEncryption
40:0b:b3:76:85:76:2f:30:62:59:25:42:34:9b:9b:d5:c1:0f:
af:79:60:39:7d:4e:d7:73:f5:6d:b6:be:b8:14:f1:ac:4f:c2:
57:fc:5c:72:f0:d7:c8:74:53:fd:66:6b:46:78:bd:3d:25:bc:
cb:32:c8:fb:32:87:be:25:e5:6f:59:78:c4:bd:e6:89:f9:02:
3f:84:3f:07:7f:c3:e3:2a:c7:24:3f:6a:6e:b6:5a:d7:5f:e1:
43:2c:d9:24:de:35:e4:4e:4b:f9:4c:67:7e:25:d6:64:7b:3f:
81:1f:7a:aa:5d:09:28:61:ae:0d:11:dd:98:0e:bc:cb:d1:38:
8e:b0:75:d9:9d:38:56:50:f8:c8:bf:5d:8f:81:1e:99:39:e9:
f2:8d:46:38:a1:ed:c4:89:a8:c8:31:7c:5c:03:5a:2c:8c:22:
66:ca:90:2b:b3:1c:de:be:c8:ec:40:cd:85:63:99:ce:a1:f8:
9d:a0:c7:bc:ca:26:b5:42:c7:bd:f2:7d:1f:50:6d:c1:1b:77:
e2:b7:96:b7:87:1c:65:46:bb:a2:72:a1:12:f9:af:ba:ec:df:
a1:7d:3e:94:fa:2f:3c:46:84:21:8b:9f:8b:49:d7:7d:41:f5:
b1:0c:d3:52:d5:c2:3f:8c:e9:c6:c1:39:66:7f:e8:6a:96:4d:
72:e2:87:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ7V4117rbzo1oKmVZLyB07kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGIzMmNkNmI1Nzk3YmJhOGRlNzU3MTBkMjI2Mzg1ODkw
OWYzODYwHhcNMjYwNjE3MTQwMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTAwYTRlZTgzNmIxZWQyZGZjNmU2YWVmNmYzZDkxODA0MmY2N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTBJSBA9ZZ3UVf5xdlfwwhnhMdOA
hE6O13aarJaR9KA9l7r7MrcBlzyLq/ph5j8NwWhGPWI8Ue8GtVeBkt9bxYGehjwZ
Rn+pLu5cSgHhf5U7+nGaIHm7dw8pL4gPug5jl0EjMn15iQpxnrVCGDQ7Qxt9FO0m
eTYs3Oi2RRlZj+I0eMKdjff/jZplvcO9YR15o1dEZVqFi4aVZtTCrrYuVdIIVv2B
dQmA+VmKSu3c/VyYb2hncQiHUdQ4cyFfdUSZD+Iu/S1jvkxxXsWjn00hyUDRzRVH
lH5JFpskptyUT3DRaIVNckzubrm+78SWbnq9eLhVZ0z4g36DJ/ekg0TUjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIoApO6Dax7S38bmrvbz2RgEL2fzMB8GA1UdIwQY
MBaAFCQLMs1rV5e7qN51cQ0iY4WJCfOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFzeXpXdFhsN3VvM25WeERTSmpoWWtKODRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wMzMyNWYtMjM0ZS00MmQ4LWJjY2Mt
YWU2NWYwZTZkODY2LzEvaWdDazdvTnJIdExmeHVhdTl2UFpHQVF2Wl9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wMzMyNWYtMjM0ZS00MmQ4LWJjY2MtYWU2NWYwZTZkODY2
LzEvSkFzeXpXdFhsN3VvM25WeERTSmpoWWtKODRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBKs
MA0GCSqGSIb3DQEBCwUAA4IBAQBAC7N2hXYvMGJZJUI0m5vVwQ+veWA5fU7Xc/Vt
tr64FPGsT8JX/Fxy8NfIdFP9ZmtGeL09JbzLMsj7Moe+JeVvWXjEveaJ+QI/hD8H
f8PjKsckP2putlrXX+FDLNkk3jXkTkv5TGd+JdZkez+BH3qqXQkoYa4NEd2YDrzL
0TiOsHXZnThWUPjIv12PgR6ZOenyjUY4oe3EiajIMXxcA1osjCJmypArsxzevsjs
QM2FY5nOofidoMe8yia1Qse98n0fUG3BG3fit5a3hxxlRruicqES+a+67N+hfT6U
+i88RoQhi5+LSdd9QfWxDNNS1cI/jOnGwTlmf+hqlk1y4ocP
-----END CERTIFICATE-----
Generated at Tue Jun 23 18:49:31 2026 by rpki-client