Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/iUhSLGCV_eO_BH43KRChrjNGyRk.roa
File: iUhSLGCV_eO_BH43KRChrjNGyRk.roa (raw, json)
Hash identifier: R6IoUn8eBqBbCTX7naHXrqSDJ3mXPThxwfCJyCuqo9Q=
Subject key identifier: 89:48:52:2C:60:95:FD:E3:BF:04:7E:37:29:10:A1:AE:33:46:C9:19
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019FD7D9E5F13527F1ADB55FDF700D8A5829
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/iUhSLGCV_eO_BH43KRChrjNGyRk.roa
Signing time: Thu 06 Aug 2026 16:13:29 +0000
ROA not before: Thu 06 Aug 2026 16:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:d9:e5:f1:35:27:f1:ad:b5:5f:df:70:0d:8a:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Aug 6 16:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8948522c6095fde3bf047e372910a1ae3346c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:33:fa:43:c6:c1:c5:be:29:0c:83:9b:a3:e6:
91:36:ae:54:e3:ae:d3:bc:64:6d:d9:38:21:5c:a0:
2d:21:35:64:30:ea:bd:d1:00:e9:77:fb:46:87:f6:
86:62:63:8b:2a:66:8a:ff:39:17:65:e6:ac:48:bc:
03:aa:0a:81:a2:28:82:93:63:13:a3:a1:7d:9a:46:
51:89:cb:1d:61:23:6f:e8:5f:ae:43:d5:71:12:d8:
df:c1:4a:b1:04:2d:d2:6c:ad:df:32:52:14:aa:38:
3f:82:3b:13:e2:dd:47:11:e3:52:76:48:87:53:a0:
a4:e9:ae:4e:c3:2b:e8:c5:d5:a2:2f:bc:9c:ab:9b:
58:2c:9b:9e:18:10:d7:f3:01:fa:49:0e:21:36:5b:
16:7c:ea:11:00:74:29:ea:f2:ba:cb:dd:49:aa:98:
79:60:71:5a:99:8b:60:2d:68:00:94:ee:84:d8:18:
5f:b2:de:f8:c4:6f:54:92:53:df:db:1e:dd:b5:15:
6f:83:0f:fc:d0:c5:e0:8e:f6:a3:fe:fc:41:29:fb:
f2:6b:87:96:df:05:d9:83:39:5c:f8:04:0a:fc:85:
98:c3:df:35:10:f2:cd:17:e5:48:ff:7f:17:52:6c:
bb:35:db:9c:db:8d:f1:42:ad:90:91:70:38:96:12:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:52:2C:60:95:FD:E3:BF:04:7E:37:29:10:A1:AE:33:46:C9:19
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/iUhSLGCV_eO_BH43KRChrjNGyRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4f:28:51:31:07:2e:6e:b4:70:87:0d:f6:51:95:3c:3e:96:
76:56:46:fd:dc:f8:8b:69:ff:54:7c:c5:e0:42:7f:3f:ac:76:
70:bf:2f:40:ff:a7:7c:32:03:30:d5:27:bd:95:73:c4:0f:36:
49:09:b0:f0:37:96:31:34:56:b0:2b:ec:ae:7d:56:e0:8e:15:
92:6c:46:ec:65:03:c7:b8:0d:c0:88:51:5b:d1:fb:63:8c:9d:
50:b6:0d:05:c6:f0:ed:aa:4f:95:4a:94:bd:d4:e2:e4:b9:ed:
80:e4:05:b3:9d:92:ee:07:41:ff:85:fd:56:1d:7a:d6:01:f0:
0e:c8:90:8a:c6:8d:c6:0b:29:15:4a:d2:ea:6a:04:59:de:da:
02:51:6d:25:18:80:dc:39:53:fa:bf:82:fd:e1:c9:ea:03:8e:
2c:61:7d:07:e7:66:f2:a2:4a:2c:fb:88:83:43:5c:23:53:22:
01:1e:ed:7b:27:35:13:63:0a:25:58:10:ef:e2:f5:b6:57:48:
c6:72:39:6c:2d:4b:44:9b:03:a6:de:5a:12:b7:6c:f0:fa:5d:
29:3e:b5:66:4e:d0:bc:68:46:a0:da:b3:22:bf:15:1a:2b:11:
5b:0d:68:67:e9:3f:0a:43:74:f7:95:49:86:93:43:c9:41:f6:
12:46:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:07 2026 by rpki-client