Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/iQdg1bQOlXLuKluffHT5-2l3QwM.roa
File: iQdg1bQOlXLuKluffHT5-2l3QwM.roa (raw, json)
Hash identifier: VLHupAT/bCStlfIUhgEMjaFGylgBgR6vs2sLtbZvHGM=
Subject key identifier: 89:07:60:D5:B4:0E:95:72:EE:2A:5B:9F:7C:74:F9:FB:69:77:43:03
Certificate issuer: /CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Certificate serial: 019EA7689720C3C11CB06CBF512674C89F59
Authority key identifier: A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/iQdg1bQOlXLuKluffHT5-2l3QwM.roa
Signing time: Mon 08 Jun 2026 13:25:09 +0000
ROA not before: Mon 08 Jun 2026 13:25:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 130.75.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:68:97:20:c3:c1:1c:b0:6c:bf:51:26:74:c8:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Validity
Not Before: Jun 8 13:25:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=890760d5b40e9572ee2a5b9f7c74f9fb69774303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:ea:e1:09:bc:b5:b9:2e:36:10:fa:77:24:
f5:19:16:e6:37:24:d6:10:3b:dc:d6:9a:b8:cd:88:
0a:b2:6c:e7:34:00:44:52:da:a5:9d:ca:ca:b9:bf:
fe:b6:87:1a:92:a9:71:9f:72:02:d4:01:82:68:85:
52:89:b3:46:a3:c0:70:c6:e5:80:54:e7:be:12:57:
b6:96:fe:33:3b:b5:5a:86:02:08:df:0c:18:dc:66:
75:72:40:16:39:a9:a6:d0:8d:c8:dd:a4:42:ca:ae:
f1:eb:51:67:45:68:2c:0f:0e:17:6c:39:3f:d5:29:
93:f5:92:1b:b8:e0:c7:50:bf:f8:69:ef:3d:b3:c1:
72:e4:e2:28:d7:7f:be:c3:9e:ac:ba:40:fb:84:c9:
62:cc:d8:bf:a8:23:da:11:55:8d:0b:08:07:b2:16:
ee:d9:cf:84:2e:39:75:b0:7e:28:9b:24:a4:97:7a:
8c:c9:e5:05:4a:fd:51:a9:02:e4:76:7e:b0:7f:49:
a1:dd:a0:10:fe:3d:49:94:20:a1:35:54:12:24:03:
1c:9d:4c:7b:5f:e2:0f:73:5a:07:e9:5c:09:4a:2f:
23:01:70:e9:80:42:7e:1c:9f:ba:06:94:5a:bd:12:
cb:d8:fa:03:2b:c9:a0:e9:cf:01:f6:ff:de:95:c1:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:60:D5:B4:0E:95:72:EE:2A:5B:9F:7C:74:F9:FB:69:77:43:03
X509v3 Authority Key Identifier:
keyid:A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/iQdg1bQOlXLuKluffHT5-2l3QwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:95:f8:fa:fa:23:3d:96:9e:1b:46:74:fa:fe:a4:ac:75:c6:
0a:da:f3:f9:cf:91:57:85:b1:f0:57:56:2b:e7:19:24:08:73:
6d:ec:cc:53:a7:0a:4a:a1:8c:5d:72:43:45:ba:18:5f:fd:84:
42:9c:92:db:a7:92:dd:bd:14:fa:a8:71:15:f2:63:73:d3:ab:
e4:74:d8:ad:42:55:58:7e:55:7c:54:bd:c7:b9:c1:f6:d8:69:
79:c7:be:a9:53:64:a1:02:4c:a9:22:62:38:78:69:b8:04:3c:
73:75:66:2a:d0:10:cc:80:9b:21:90:82:26:d1:b9:2c:2a:c2:
5c:95:96:bf:73:c8:78:f7:40:63:9f:83:cd:76:43:a0:da:12:
d1:7e:48:b4:fd:ce:74:77:66:5b:7a:5a:53:18:32:93:56:ba:
58:2e:c7:12:17:83:64:bc:13:a9:91:a9:2f:df:6c:03:27:5a:
ed:44:1d:ab:cc:e1:87:c9:bf:98:24:a8:b1:58:e8:58:87:85:
a1:70:32:70:f4:ec:06:1a:cb:de:e3:9b:df:02:22:13:b0:3a:
79:44:0c:82:04:47:21:60:67:14:8e:0f:b5:10:ed:78:7e:6b:
74:39:96:60:79:e0:fb:60:cf:70:a1:09:49:77:87:47:24:4a:
15:03:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:20 2026 by rpki-client