Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iOpvEHAAk5pInprGwkYnCYauGdo.roa
File: iOpvEHAAk5pInprGwkYnCYauGdo.roa (raw, json)
Hash identifier: BG1azjAlyqbWgpKh98nf7dJt1ZcV6BUteHx+2NkBrO0=
Subject key identifier: 88:EA:6F:10:70:00:93:9A:48:9E:9A:C6:C2:46:27:09:86:AE:19:DA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FC3E20208A32F772796CB803B031E5FE5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iOpvEHAAk5pInprGwkYnCYauGdo.roa
Signing time: Sun 02 Aug 2026 19:09:56 +0000
ROA not before: Sun 02 Aug 2026 19:09:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 185.214.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:e2:02:08:a3:2f:77:27:96:cb:80:3b:03:1e:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 2 19:09:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88ea6f107000939a489e9ac6c246270986ae19da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:c1:7e:73:12:77:1a:c5:01:49:4c:1a:40:
22:63:7b:28:c2:aa:c0:d7:7b:8d:d4:25:46:3e:13:
d3:1d:4b:96:69:63:eb:3e:bd:22:9b:c7:a7:05:92:
b4:63:e2:dc:e3:4f:d2:83:f6:b4:c3:27:21:ec:7b:
44:ce:2e:89:f5:59:a1:1f:da:c5:51:c8:ca:7b:ce:
42:11:78:bb:37:1e:6f:64:79:35:56:ec:93:cc:62:
03:3e:dd:c1:67:24:b1:ae:5c:fa:d9:03:7a:2c:41:
c1:a1:97:b0:36:63:c3:08:1c:28:f7:9b:d8:55:e1:
69:ed:42:1c:69:f6:7f:56:ad:23:82:e4:d8:35:f0:
de:c6:ba:70:4c:1b:4c:51:29:92:87:0b:11:1f:88:
ff:6d:99:3f:ea:96:92:d0:60:7e:1b:3e:1c:d1:a2:
8b:96:50:61:d0:6d:6a:81:f4:0f:3c:93:76:80:79:
9c:cc:16:84:7f:05:e8:0e:78:09:00:26:c7:d4:1d:
34:85:db:17:10:f0:9e:2b:07:47:dc:90:b7:00:78:
9d:9e:cd:b5:72:10:54:c9:eb:9e:fb:f9:da:15:ed:
bd:eb:df:d8:cb:9e:34:dd:b1:ab:78:56:69:b6:12:
29:42:cd:ec:b2:c5:b8:52:01:5e:70:a9:60:c0:54:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:6F:10:70:00:93:9A:48:9E:9A:C6:C2:46:27:09:86:AE:19:DA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iOpvEHAAk5pInprGwkYnCYauGdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:23:df:9b:d8:ee:f9:32:94:da:15:89:99:99:ad:e2:43:28:
c9:e3:78:c0:6e:c6:2b:56:b8:f1:62:aa:87:fa:9c:a3:40:12:
53:55:4b:19:a8:d5:3f:c5:23:bc:77:d6:c7:a5:21:0d:8f:d6:
3c:48:d9:63:24:e5:6c:ae:ad:4b:14:4c:48:db:17:72:51:a3:
9b:3e:00:9b:39:e2:45:56:a3:a3:c9:a0:64:c5:a2:b5:c9:f3:
34:1d:25:6e:4c:8f:fc:35:8e:3b:b5:48:33:c3:ea:19:8a:1c:
3f:b5:4c:23:2b:5c:fc:55:de:92:4a:0d:4f:1c:f2:41:6a:73:
08:d2:eb:cb:4a:12:a6:ec:97:60:eb:8d:b6:66:45:2d:f1:9c:
7c:ca:ad:8c:48:8e:8e:73:fc:0f:f6:4d:37:40:73:b5:c5:b3:
cb:d1:df:d0:29:ac:81:20:fe:80:4a:d8:cd:6e:ae:33:cf:86:
b4:12:bf:9f:29:91:94:55:36:51:5e:72:aa:3c:08:38:c4:b4:
55:f8:23:53:45:76:14:14:6e:b4:ee:68:64:9a:08:1a:74:4c:
a4:d5:7d:5a:c5:c7:c3:55:4a:7f:66:b3:e8:19:0c:39:83:a3:
06:f2:70:8e:4c:00:52:e6:e6:58:52:35:f7:42:a3:97:3e:73:
21:6e:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:19:52 2026 by rpki-client