Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/IhYDqIMxKtO7NNEjmKMPwILeVPw.roa
File: IhYDqIMxKtO7NNEjmKMPwILeVPw.roa (raw, json)
Hash identifier: v467YqVQnkaSARNPU8Mn/aeG5+jEglVclNF+/m6Yifw=
Subject key identifier: 22:16:03:A8:83:31:2A:D3:BB:34:D1:23:98:A3:0F:C0:82:DE:54:FC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019ECB338EEDBD916DEF6A5EE24764CFE917
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/IhYDqIMxKtO7NNEjmKMPwILeVPw.roa
Signing time: Mon 15 Jun 2026 12:13:34 +0000
ROA not before: Mon 15 Jun 2026 12:13:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8796
IP address blocks: 89.42.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:33:8e:ed:bd:91:6d:ef:6a:5e:e2:47:64:cf:e9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 15 12:13:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=221603a883312ad3bb34d12398a30fc082de54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:4b:19:3e:a2:29:87:6a:29:74:85:41:c4:
d1:67:25:9b:cc:79:bd:53:1b:51:a6:60:c7:12:1a:
e3:f1:62:e9:cb:ff:3c:f4:3e:ec:c5:0d:91:78:b0:
1c:e2:a0:80:31:0a:5d:dc:94:dc:69:ec:c5:31:fe:
a6:1b:08:9f:12:a9:69:63:cf:cd:66:46:85:38:66:
9e:49:71:18:a3:e2:8f:d6:be:7c:17:1f:ee:ea:41:
8a:a8:a4:3f:a3:d3:f7:f2:69:cd:33:77:79:07:60:
64:32:1f:76:fd:4c:95:61:1a:a6:d0:b0:62:3a:bd:
ac:6f:73:da:7c:24:f6:d3:11:a5:70:aa:a2:c2:00:
33:a1:c1:09:b6:6e:d4:66:91:e4:00:1d:71:1d:8e:
be:99:f9:e4:a6:f8:c4:c6:46:2d:77:c9:1b:a2:a7:
cb:78:18:5b:59:be:0c:07:d0:45:99:00:f2:2b:82:
c1:7d:91:5a:90:e7:6b:69:2b:ba:d2:98:02:88:73:
69:17:53:36:6b:dd:8a:91:1a:09:fa:d7:a4:33:47:
5f:90:b9:26:51:85:e7:34:47:fe:99:39:e1:ba:1b:
f7:d7:33:be:83:96:6f:f2:8d:37:6e:8c:55:24:64:
a4:cc:4a:67:38:2a:dd:85:53:d3:fb:40:15:02:56:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:03:A8:83:31:2A:D3:BB:34:D1:23:98:A3:0F:C0:82:DE:54:FC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/IhYDqIMxKtO7NNEjmKMPwILeVPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0f:c9:97:78:ec:de:84:a1:94:24:09:00:71:24:7f:9c:a4:
49:af:ce:d4:ba:0e:e2:2e:bd:b2:6a:5a:3d:7c:e5:22:42:2f:
3d:5d:48:41:1a:aa:f4:fc:62:f6:ff:00:3b:4e:f8:a6:f9:7d:
9e:9b:8b:9a:f2:99:96:b4:fb:ce:eb:db:27:4b:15:9d:4a:5d:
e4:f6:f9:20:e5:08:e1:df:e9:4c:bf:af:48:5e:07:bb:32:b2:
e4:a7:e6:c0:a3:5d:3f:71:78:ce:33:2d:97:c2:25:86:25:4f:
20:9d:df:ab:f9:c1:aa:51:e0:f5:58:fb:4f:b9:17:29:75:3f:
13:ef:07:98:ac:b7:0c:14:75:57:61:32:25:38:88:33:6b:84:
a9:f1:4e:35:a5:27:85:c4:e7:d8:98:4b:3d:8c:4b:1b:45:58:
9b:3e:7c:eb:ab:d3:14:13:2f:9f:fa:a9:94:cb:cc:ed:7f:a4:
82:33:98:d1:aa:c9:d0:e9:83:ff:4f:32:db:94:df:d0:5d:45:
f3:e6:be:39:63:57:ae:b7:5e:1a:35:0a:05:53:4a:df:70:2e:
6a:aa:17:8c:af:ad:51:60:25:ee:1c:be:6a:22:f8:6d:53:ff:
6a:22:42:06:12:3f:27:21:64:97:f0:bb:0b:f5:85:75:75:0f:
b0:69:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client