Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/iFr6HF7AcAIE7SL_xgtb9gghgjM.roa
File: iFr6HF7AcAIE7SL_xgtb9gghgjM.roa (raw, json)
Hash identifier: 1+PHdAJ98duf/VMqvgx7vNiRWzao2CXjvddd5jArPf8=
Subject key identifier: 88:5A:FA:1C:5E:C0:70:02:04:ED:22:FF:C6:0B:5B:F6:08:21:82:33
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 01A053D264A0E6EBA3748C545FE38BEAF8D8
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/iFr6HF7AcAIE7SL_xgtb9gghgjM.roa
Signing time: Sun 30 Aug 2026 17:58:12 +0000
ROA not before: Sun 30 Aug 2026 17:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 212.108.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 15:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:d2:64:a0:e6:eb:a3:74:8c:54:5f:e3:8b:ea:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Aug 30 17:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=885afa1c5ec0700204ed22ffc60b5bf608218233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:36:e8:00:05:70:5d:38:7a:2a:8a:ab:e9:
f0:b3:ae:4d:fb:12:d0:33:e5:9f:67:f7:44:5c:08:
d1:40:dc:85:86:90:e2:23:ac:b2:a8:11:f2:d9:26:
91:7d:6e:78:6e:00:74:eb:8f:56:0c:07:49:e6:82:
2e:07:cf:7d:c9:04:2a:7f:4a:2f:54:f1:84:f4:ad:
04:18:ea:07:76:c4:16:15:ed:26:4d:b3:19:bb:53:
fc:20:64:fd:bc:c6:a6:7f:01:49:45:10:ab:f9:45:
e9:9f:df:3a:82:ca:80:b0:df:dc:a6:f1:36:19:5d:
c4:4b:ec:57:b6:65:4d:d8:15:35:d1:a3:b7:c2:c3:
cd:03:e3:8d:5c:99:68:19:18:a0:ad:a5:ec:74:8f:
12:ae:d3:0c:6d:e7:8e:36:8f:21:a5:6f:e2:ed:57:
5e:02:4a:fe:ba:38:d7:79:fb:79:50:04:8c:68:56:
b5:ee:ba:cd:d7:7b:9d:4a:f2:b7:19:b2:05:d7:98:
ff:2b:4a:06:e2:2d:89:de:c8:0b:2c:b0:f9:9a:9c:
7b:08:bb:39:cb:b3:75:0e:33:73:90:93:37:e0:ab:
4b:12:d3:b5:18:4c:c0:fa:47:54:f9:e6:4b:a5:47:
94:ec:1f:80:6d:30:99:8e:0e:6d:75:a0:92:c9:3d:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:FA:1C:5E:C0:70:02:04:ED:22:FF:C6:0B:5B:F6:08:21:82:33
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/iFr6HF7AcAIE7SL_xgtb9gghgjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.98.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:fd:08:5f:c4:0d:71:1b:27:ae:09:d0:c8:69:56:3a:8c:38:
63:20:d8:71:2f:0d:41:19:7d:0c:32:4a:67:55:19:fb:bc:1d:
ba:28:5e:6b:7f:41:bd:08:15:8f:f2:a7:21:a0:e8:62:41:3e:
15:43:bb:c2:76:c0:20:d0:14:e8:56:ba:3c:bb:95:3a:65:12:
7f:4a:95:09:da:75:73:c8:ae:77:4c:04:0e:e8:22:c1:f0:44:
38:af:5c:ef:f5:ce:e2:1c:9c:97:f3:7c:85:ef:a7:23:9f:d5:
4f:3e:1b:48:2d:c9:57:5d:2d:3e:f5:fb:5a:c7:85:d2:03:25:
b1:0d:82:c5:fb:0b:94:ef:6e:04:c5:91:14:81:59:9b:45:23:
a7:54:ee:48:1e:05:61:3f:26:8c:be:5b:76:ab:e7:6f:93:5c:
39:2e:55:3d:d9:47:7b:15:34:7a:1f:ec:c9:88:5f:86:c6:74:
24:99:0f:60:c7:5b:af:de:27:cf:cf:2a:14:a4:52:56:8b:a7:
17:46:f9:dc:16:5d:d6:93:ab:72:7d:ce:6f:e1:b6:61:94:86:
7f:7c:5c:79:1e:bf:e0:52:e8:8a:8f:97:45:f4:b4:6b:e6:0b:
4b:a2:04:38:da:d3:e3:45:24:e4:48:52:60:ee:ea:78:ff:65:
2c:c7:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:10:28 2026 by rpki-client