Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/IvprAxx_c2UjZf2WBM8cXAtm0as.roa
File: IvprAxx_c2UjZf2WBM8cXAtm0as.roa (raw, json)
Hash identifier: HPSABmDcUDJ1UGSA98h5euqUTAUGTO8o8nlMHzbPDeA=
Subject key identifier: 22:FA:6B:03:1C:7F:73:65:23:65:FD:96:04:CF:1C:5C:0B:66:D1:AB
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47F5E0FF42827F7ED95C4101B882832E
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/IvprAxx_c2UjZf2WBM8cXAtm0as.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:3c80::/29 maxlen: 29
2a12:b880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:ff:42:82:7f:7e:d9:5c:41:01:b8:82:83:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fa6b031c7f73652365fd9604cf1c5c0b66d1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:9c:55:e8:9e:6c:b0:77:1c:31:1a:31:f9:
4e:a1:94:46:d3:c4:7b:4c:47:e1:91:55:b5:26:fe:
43:df:ed:f3:5b:83:41:e9:1b:74:7a:97:88:42:9e:
a8:74:40:00:48:d4:07:f0:65:f6:9b:79:d9:d3:d9:
40:48:2d:69:db:3c:98:ac:06:3f:69:5d:63:84:ae:
ed:a8:a6:9c:90:a8:76:06:e8:7b:12:ab:24:00:97:
b8:f2:51:a9:f5:72:d4:7d:59:49:de:3e:a8:12:24:
13:e0:ed:9f:a9:ed:cb:e5:ce:48:af:4d:8f:ff:de:
81:91:dc:cf:b5:c8:2e:84:47:e3:dd:d1:c4:7d:b5:
45:48:05:fb:f0:9e:01:08:d6:21:64:7a:7d:b4:ce:
86:cf:52:6e:83:ab:25:bb:5b:a7:eb:7a:f9:53:fa:
aa:c2:27:ee:4d:b7:3a:12:e2:9b:e9:02:89:be:6c:
43:99:d4:4e:9d:c7:ec:6c:e6:cb:1d:aa:fb:d6:cf:
94:2e:2b:33:6f:a8:bd:13:bd:0a:93:aa:6d:32:42:
67:a9:d2:e1:b3:08:af:fc:dd:46:1f:29:21:fa:45:
ca:1b:f6:52:5a:a1:a3:6b:33:40:a0:7d:68:fe:2e:
d6:c8:51:e4:ec:00:71:33:fe:1a:78:61:41:83:04:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:6B:03:1C:7F:73:65:23:65:FD:96:04:CF:1C:5C:0B:66:D1:AB
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/IvprAxx_c2UjZf2WBM8cXAtm0as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c80::/29
2a12:b880::/29
Signature Algorithm: sha256WithRSAEncryption
95:05:ea:86:5e:a7:79:c1:8e:7c:ba:9b:56:bb:7c:1f:89:49:
ba:de:28:69:b5:30:55:59:ca:0a:49:54:01:3f:8c:e8:9e:bc:
e1:7d:8f:1c:02:4d:4f:09:24:f8:ad:36:6f:59:53:66:4f:08:
f7:4c:b9:d5:14:ab:1d:f2:1e:65:4d:46:9d:46:e8:13:b1:a5:
df:14:17:b6:53:22:50:81:fe:7b:7f:bf:19:8a:66:4b:43:7f:
85:07:d1:62:aa:3a:82:62:06:e1:95:1f:12:1a:72:67:2d:71:
c9:f3:df:14:31:fa:47:c9:c4:07:a8:23:01:c2:fd:71:d0:b9:
e3:8a:8f:b1:3f:0a:f8:62:98:a8:62:11:85:05:83:c4:ff:b6:
0a:ef:a2:fa:6f:48:78:52:59:94:f6:59:51:a6:a4:5d:15:25:
0b:92:90:a1:c9:4b:6d:bd:3c:2b:5c:4d:0c:83:60:6a:d3:e2:
91:ad:12:ad:3a:7d:f2:75:49:ac:9a:c6:4e:0c:af:4f:cc:8c:
73:c2:4d:bf:60:ca:02:a1:4f:45:74:e8:36:10:bf:63:ec:6a:
50:35:14:e9:8d:8b:f0:e8:fc:6f:d3:02:0a:cc:cb:03:fb:97:
aa:9b:37:ce:36:ba:c4:f0:f3:59:bc:2d:2e:73:bb:a2:17:cd:
18:c9:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 16:04:33 2026 by rpki-client