Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Il-I_QraKvZn9F3LshcILYbL6Hg.roa
File: Il-I_QraKvZn9F3LshcILYbL6Hg.roa (raw, json)
Hash identifier: jBPG9OSjW23p/4tSxkYDhOvf3qNw9HtJVamuxECSc1o=
Subject key identifier: 22:5F:88:FD:0A:DA:2A:F6:67:F4:5D:CB:B2:17:08:2D:86:CB:E8:78
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686AB728105DE9EB91E453F9A1C018
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Il-I_QraKvZn9F3LshcILYbL6Hg.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 189.74.112.0/24 maxlen: 24
189.74.119.0/24 maxlen: 24
189.74.122.0/24 maxlen: 24
189.74.123.0/24 maxlen: 24
189.74.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:b7:28:10:5d:e9:eb:91:e4:53:f9:a1:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=225f88fd0ada2af667f45dcbb217082d86cbe878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:78:38:77:c0:d8:f3:0f:7a:c4:5e:cd:d7:
d5:11:9d:c5:d4:2c:a1:8d:50:61:20:0a:78:e9:88:
cb:0e:39:7b:c7:14:25:55:38:8c:38:ea:fd:ae:ef:
1e:35:31:84:24:aa:40:c9:c8:57:32:71:7f:8f:cd:
f2:bc:ce:f2:c7:b6:d4:42:65:15:24:01:fd:e8:b1:
12:38:0c:ac:fd:b3:32:9a:5f:d7:95:59:da:6a:24:
ba:74:9f:08:e5:a9:25:bd:52:1e:ae:84:76:53:6a:
31:b1:9d:38:d2:55:34:ad:41:5e:df:8c:2a:e3:42:
11:cc:ec:89:e1:3e:9d:7e:1c:c2:ed:a0:5f:13:e8:
46:d4:e7:ab:86:b3:ef:74:db:b3:39:61:20:8a:f2:
9d:97:6e:11:8f:a6:32:7b:bb:94:c1:77:a4:6f:3a:
9c:77:a6:4e:55:1c:6f:67:c8:11:f2:74:ae:4d:ae:
f0:55:f7:81:0f:dd:8b:b6:a2:d5:b7:58:f4:63:ff:
31:f1:01:84:90:08:eb:dd:db:6b:0c:33:c1:75:fd:
f7:14:e0:81:78:ab:c8:cb:96:87:3a:14:0f:a0:c9:
06:8a:8b:5f:71:9e:dd:e8:dd:bf:ce:e5:f5:d4:5f:
de:59:af:6f:5d:66:5e:64:26:2b:a9:fa:34:85:fe:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5F:88:FD:0A:DA:2A:F6:67:F4:5D:CB:B2:17:08:2D:86:CB:E8:78
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Il-I_QraKvZn9F3LshcILYbL6Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.112.0/24
189.74.119.0/24
189.74.122.0/23
189.74.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a9:93:39:3f:67:84:59:c1:59:3b:01:39:71:d5:fb:bc:f4:
19:c4:a5:d4:3a:52:47:23:f9:34:85:e3:a6:5c:f3:29:59:7e:
78:ad:39:2d:0f:38:e4:6a:b0:c7:2b:55:5f:b7:2b:f4:12:7b:
d3:fe:6a:8c:8a:f0:74:6d:f5:9c:ad:1c:29:19:46:63:cc:72:
44:80:f0:43:00:b8:18:c4:10:32:e3:11:e6:2c:4c:69:41:3a:
46:1d:f4:c1:36:f9:eb:36:7a:5e:fc:88:22:f0:47:79:74:23:
f1:51:6f:9c:c4:5f:49:b3:9f:29:70:c8:ed:a2:48:a0:4f:54:
84:9e:30:ef:d9:9a:8a:68:6d:c3:2b:6c:11:27:92:4b:e7:7f:
c1:33:de:ff:74:0a:2d:ce:47:3f:fd:ef:bb:f2:c7:95:fa:7f:
82:30:ab:05:8b:56:88:36:85:f0:98:89:01:5c:c5:8f:59:21:
a6:97:96:85:73:5f:58:c6:d8:90:0f:9e:c3:29:c9:6c:aa:6b:
7e:f1:61:bb:ca:9a:ed:36:8c:27:12:65:bc:3e:ac:40:b8:9f:
b0:35:a7:8b:6c:00:76:b8:b5:f3:fd:20:a7:eb:32:9f:08:24:
7d:bd:c9:e0:4b:75:6c:bb:0e:46:28:7b:85:a2:3b:87:fb:41:
39:57:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:46 2026 by rpki-client