Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iCvG4p2QaTydD8b84J_nnzVlKvI.roa
File: iCvG4p2QaTydD8b84J_nnzVlKvI.roa (raw, json)
Hash identifier: xqa+whns2NrmkgIeSClWzUrNsZIzDnw7vlvDjgURIVc=
Subject key identifier: 88:2B:C6:E2:9D:90:69:3C:9D:0F:C6:FC:E0:9F:E7:9F:35:65:2A:F2
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A0448915BE44B0DDA2B4DD778D542C5B30
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iCvG4p2QaTydD8b84J_nnzVlKvI.roa
Signing time: Thu 27 Aug 2026 18:43:49 +0000
ROA not before: Thu 27 Aug 2026 18:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a13:bd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:89:15:be:44:b0:dd:a2:b4:dd:77:8d:54:2c:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 27 18:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=882bc6e29d90693c9d0fc6fce09fe79f35652af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:2c:82:98:ba:c4:8f:b3:a6:e7:d6:ee:62:
62:73:5a:29:d3:c4:14:27:86:28:e4:40:ea:a4:54:
6d:f8:1b:bc:e0:c6:18:87:93:69:33:24:ce:9b:c6:
28:57:41:f4:71:23:0d:bd:90:1e:7f:e9:32:ce:13:
cb:0c:c4:b0:a0:4c:91:42:c6:3f:a5:e7:35:12:fc:
aa:ea:62:23:bb:ff:68:23:d4:34:61:35:3a:e1:e6:
3a:02:ae:6a:c2:08:df:55:bd:c1:21:d2:a6:0b:98:
30:44:73:2a:56:2a:5e:ef:bc:58:21:df:48:ff:69:
0e:84:24:6a:47:fa:4b:b5:42:c4:5c:80:f0:c9:89:
ac:29:a6:09:4c:8d:11:24:bf:be:ce:52:d5:fd:8b:
d8:e4:05:1a:89:67:af:69:1b:a5:bb:61:7b:e5:4d:
22:fa:8b:31:4f:5e:02:10:e7:45:11:d3:6e:51:7e:
e5:ac:d8:28:30:e2:e1:02:3c:b4:64:74:d3:5c:48:
b2:96:4d:a6:cd:94:1a:bc:18:3a:7f:ba:1f:95:ee:
99:82:0b:ec:c8:05:1a:74:2c:3a:36:a7:17:7d:fe:
d3:fc:12:26:af:f7:26:67:81:21:4a:31:2d:7a:a6:
79:8e:16:7f:f8:05:69:00:1b:9a:ee:4a:37:72:ea:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:C6:E2:9D:90:69:3C:9D:0F:C6:FC:E0:9F:E7:9F:35:65:2A:F2
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iCvG4p2QaTydD8b84J_nnzVlKvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
38:21:c9:53:b0:65:7d:8b:e7:a1:e9:7b:cf:63:24:3e:48:ec:
cc:70:e0:c3:a4:cd:27:73:f4:01:5f:58:f4:d1:69:9d:3f:6f:
8b:29:00:a7:2d:6e:5b:08:5a:64:70:83:b5:55:46:c4:05:d7:
c6:5a:58:30:5e:1a:d7:70:5d:9c:0d:a1:f7:49:ae:04:34:66:
ab:5b:8e:e1:8a:c9:31:7f:2a:e1:54:14:6a:10:90:dc:81:90:
5f:9d:64:98:40:98:db:5a:39:46:9a:cc:e8:ab:fe:81:bd:6a:
46:17:d1:be:80:89:13:5c:d0:60:e7:80:08:a4:92:98:1e:41:
f9:cf:c1:6b:b9:6d:ed:f4:e5:ee:7c:68:ad:5f:38:91:70:6b:
ef:cd:e3:47:0e:94:ed:ea:45:7b:78:07:ec:c6:0e:d4:6b:55:
b8:7c:46:2a:94:e4:82:dc:3f:00:37:fd:7e:3c:dd:b1:55:e4:
d6:98:82:a1:38:0c:b5:f8:77:58:04:d5:b5:e6:5a:54:fe:b0:
c8:c2:f5:3f:dc:aa:f3:4d:86:d1:4f:d0:32:27:0a:82:31:c9:
83:ee:9c:bc:7f:1d:63:bc:7b:ae:ce:a6:00:40:72:07:36:f7:
56:e7:ac:32:f2:00:29:bb:ec:8a:e1:bf:b4:d2:1f:c0:c6:65:
d2:97:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:16:18 2026 by rpki-client