Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/kIboR4QgmfAIaRZxJyA4OskOO_4.roa
File: kIboR4QgmfAIaRZxJyA4OskOO_4.roa (raw, json)
Hash identifier: hv6Xi3tRRRD+BBRVihVt2befifvoeUqJAbapAtcXzA0=
Subject key identifier: 90:86:E8:47:84:20:99:F0:08:69:16:71:27:20:38:3A:C9:0E:3B:FE
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F488FAEF061B929E3E3F6F3A32F3BA241
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/kIboR4QgmfAIaRZxJyA4OskOO_4.roa
Signing time: Thu 09 Jul 2026 20:26:43 +0000
ROA not before: Thu 09 Jul 2026 20:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 201.50.114.0/24 maxlen: 24
201.50.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:8f:ae:f0:61:b9:29:e3:e3:f6:f3:a3:2f:3b:a2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 9 20:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9086e847842099f0086916712720383ac90e3bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:e0:e4:b5:8e:e7:e9:0f:4f:73:21:11:0b:
41:87:dc:14:09:be:6a:74:20:48:55:20:ca:d4:8b:
3e:7d:9a:01:9a:a2:5e:d8:b8:8c:cf:e5:8d:74:d2:
77:b9:67:28:6b:0b:09:82:5f:a5:db:07:1d:2c:1e:
b5:7c:d9:80:8a:f6:c8:4f:e6:ef:b4:05:b2:eb:28:
be:7d:9a:7f:0b:9b:7b:ef:ea:92:55:aa:af:43:9f:
29:6b:44:15:ff:5c:95:3c:ec:68:1e:3d:7c:d3:9d:
ed:75:95:9e:5f:21:7d:31:ab:eb:66:33:27:df:dd:
2c:26:97:ae:75:0b:6e:30:d4:41:e4:71:72:e5:39:
47:ab:8c:ba:8e:11:3c:9a:f0:ce:85:e1:7d:61:87:
1f:4f:7a:bd:66:10:e7:d2:7d:99:02:bf:cf:ec:e1:
14:9a:9d:38:b0:18:94:cd:58:70:fc:8a:80:c4:97:
39:9f:8e:d3:56:98:f3:e1:01:fc:ff:68:99:84:fd:
f0:23:80:b3:1a:cd:f0:ce:43:59:b3:d7:26:89:b6:
31:eb:e5:e7:c2:a2:81:a1:8b:ae:a9:33:92:da:37:
04:bb:a6:90:e6:fb:13:77:fb:a9:b2:48:5f:ee:73:
a7:c7:eb:b8:57:ee:c2:60:db:f1:ef:af:15:cc:19:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:E8:47:84:20:99:F0:08:69:16:71:27:20:38:3A:C9:0E:3B:FE
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/kIboR4QgmfAIaRZxJyA4OskOO_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.114.0/24
201.50.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:73:fd:8f:02:d9:72:70:e3:f2:1e:c8:ec:c2:10:91:c8:30:
96:09:e9:20:7e:3c:4b:f3:fd:2b:bc:d7:db:3b:c6:69:5b:37:
3b:d7:81:1b:e7:f7:65:8f:ed:30:32:ba:e3:fa:0a:d5:c2:2e:
18:f6:21:4c:5b:7b:b2:34:aa:ce:18:10:68:17:3c:70:9b:de:
6a:96:87:01:16:49:3b:03:c2:b2:29:7d:0f:4a:8d:83:f1:51:
ab:8e:31:2d:c3:b3:a4:56:d2:48:6f:99:6f:8f:14:88:8b:3d:
1c:8d:ce:68:4a:73:ee:af:43:93:10:22:5b:78:3e:b3:9c:27:
5a:8d:3a:37:c6:db:5e:3f:b8:2d:21:0a:ac:f8:46:d5:35:de:
9e:2d:e8:a0:a0:e7:83:32:1a:b5:74:a1:7e:41:dd:15:a0:5e:
37:74:6b:ca:c8:ed:c8:98:c8:47:b9:9e:69:66:b4:91:40:e1:
ab:30:7a:c2:ae:ef:3e:f9:d9:55:5e:0b:42:01:40:b7:bf:d3:
7e:f5:c9:58:53:84:fe:5c:43:0e:83:bc:2d:68:43:fb:a8:7f:
91:38:36:bb:7f:0b:a9:15:69:1a:f9:45:be:1b:bb:65:2c:57:
24:85:ab:96:00:fd:ea:62:e6:ba:b9:09:94:8b:8f:d1:19:b6:
1d:2f:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:01 2026 by rpki-client