Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IQbbBAGL5glWWx4e9Q8YqKX71ZQ.roa
File: IQbbBAGL5glWWx4e9Q8YqKX71ZQ.roa (raw, json)
Hash identifier: /+kw3Jf9c4NZPVPKVZtaPsjwVDlCedMX58zv/ArRkAE=
Subject key identifier: 21:06:DB:04:01:8B:E6:09:56:5B:1E:1E:F5:0F:18:A8:A5:FB:D5:94
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01A13E9E3B112B1A336DD0DD5EBFC2B6734B
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IQbbBAGL5glWWx4e9Q8YqKX71ZQ.roa
Signing time: Thu 15 Oct 2026 08:11:59 +0000
ROA not before: Thu 15 Oct 2026 08:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210751
IP address blocks: 85.28.59.0/24 maxlen: 24
109.238.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:9e:3b:11:2b:1a:33:6d:d0:dd:5e:bf:c2:b6:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Oct 15 08:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2106db04018be609565b1e1ef50f18a8a5fbd594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:ac:09:46:ea:a7:57:63:74:d7:00:a2:88:
ca:c8:90:f3:9a:d7:20:4c:df:2e:69:36:1a:12:78:
ea:88:7f:fe:af:b3:c8:dd:6b:1b:9c:7d:5a:27:b5:
ec:68:50:63:0c:88:16:42:8e:13:6d:b1:91:16:eb:
f5:60:0e:17:61:af:b9:e2:16:a8:6d:24:ae:57:52:
79:ce:d2:a4:28:12:fe:d7:76:a6:06:60:fe:3c:5f:
1d:51:5e:f9:6b:8e:27:12:1b:fd:fd:7b:f2:d7:7e:
ca:01:0f:39:33:54:e0:06:58:3e:d5:d1:8f:6b:ec:
4d:c9:f4:52:c1:af:c4:b8:69:5d:e9:9d:7f:39:71:
bb:c6:12:0e:70:c2:23:ec:a3:b4:aa:5b:c9:12:a9:
10:fa:84:9d:de:b0:b3:6d:93:44:cb:f7:88:31:46:
81:ea:00:56:d2:e6:85:8f:26:03:d2:c5:37:da:5e:
91:2f:7d:7e:3a:a3:b9:ed:f9:63:c9:17:49:b0:47:
66:49:1e:0f:b2:97:4d:1c:1a:16:54:32:70:41:79:
ba:5e:de:17:67:5e:ae:07:a6:e6:a7:c1:6e:d4:c3:
37:85:d7:f8:7f:ca:71:7d:99:f6:a0:db:d9:a9:76:
53:cf:e9:a8:2d:d7:16:b6:0b:52:72:2d:f3:4e:65:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:DB:04:01:8B:E6:09:56:5B:1E:1E:F5:0F:18:A8:A5:FB:D5:94
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IQbbBAGL5glWWx4e9Q8YqKX71ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.59.0/24
109.238.204.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:06:57:e6:f2:4b:91:1a:2f:be:79:a7:19:37:04:6e:8f:
90:59:bf:d2:2d:ff:7e:39:eb:f7:a3:7f:f0:05:9e:d7:d1:97:
68:5e:56:54:50:fd:64:53:04:7f:a7:5c:25:93:83:de:0c:37:
c3:4c:14:94:10:a1:eb:2b:ab:d3:db:7a:3b:e1:9a:f7:77:27:
9c:9f:9e:c6:5d:98:63:66:ea:e2:21:18:e9:0f:91:6b:77:20:
50:a9:e5:46:2f:17:f8:6c:d8:41:98:60:6d:87:24:c0:e4:87:
c9:ef:71:4a:6e:cd:61:76:17:3e:06:2a:49:fa:d4:bf:f7:08:
48:9b:c4:73:ce:7b:ec:9a:77:9d:2f:17:be:52:ce:c5:53:6b:
b0:69:24:8f:b5:b5:13:3f:f5:8a:e2:78:c2:f8:ad:27:da:c9:
f6:33:a6:7d:37:1f:4f:93:4e:0a:22:ff:49:a9:e1:d1:cd:ab:
52:9a:e1:27:4e:bf:3c:97:61:50:d4:09:11:cc:21:f2:6b:19:
5e:3a:23:cf:88:5a:d9:59:e2:6d:01:40:02:21:ff:57:7a:45:
12:e1:aa:63:56:44:f8:e0:72:a8:c8:97:13:ab:7b:d9:47:dc:
7b:a9:38:4a:8a:e7:86:25:ae:38:54:33:2a:85:72:7c:96:96:
4c:b1:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:56:34 2026 by rpki-client