Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa
File: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (raw, json)
Hash identifier: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=
Subject key identifier: 88:9D:D6:82:38:05:10:08:BC:BD:91:1C:7A:5B:F6:04:5A:25:48:C4
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019ECBA512FD560A3B8A685A13E2EF71832B
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa
Signing time: Mon 15 Jun 2026 14:17:33 +0000
ROA not before: Mon 15 Jun 2026 14:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6855
IP address blocks: 193.228.234.0/24 maxlen: 24
2001:67c:1314::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:a5:12:fd:56:0a:3b:8a:68:5a:13:e2:ef:71:83:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Jun 15 14:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889dd68238051008bcbd911c7a5bf6045a2548c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:24:7f:23:ea:c6:68:a4:86:60:08:f6:11:
4d:ac:3d:02:71:1e:b5:56:5e:6f:8e:e5:31:61:ed:
cc:ab:88:79:18:f7:d4:7b:90:bd:d4:d1:b2:56:b1:
eb:ee:94:73:f1:60:72:62:2b:c8:06:93:b5:b9:c7:
ae:1c:47:ea:eb:f2:4c:19:ea:78:74:d4:d8:93:bc:
36:41:3a:43:d6:27:f5:9d:32:c1:c9:da:3a:ca:e9:
8d:3a:be:34:18:ec:59:42:b6:45:24:e2:e4:a0:87:
eb:ce:8c:0c:10:76:af:dc:59:ae:b5:e2:6d:72:a8:
48:84:12:15:c0:78:42:85:3d:48:21:7f:ce:35:b0:
a6:cb:e9:c1:4e:37:0f:02:12:0e:a9:7b:56:d8:f5:
ca:63:c2:48:dc:b2:42:b8:ba:38:47:66:c0:6f:7d:
c8:9e:06:4c:51:e7:4f:e6:fc:a1:d1:50:da:1f:20:
29:8d:ef:fb:39:ae:f2:d1:43:73:14:ab:62:ce:6d:
d5:0c:1e:91:0f:56:0b:43:64:3c:5c:29:b4:09:21:
fd:fb:3e:15:b2:85:e5:3b:80:e7:74:8a:54:d4:31:
85:6a:33:03:ac:ea:27:cc:dd:07:76:12:b1:dd:22:
19:2e:61:b9:d3:60:e6:8f:c4:3c:66:8e:cd:1c:45:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:D6:82:38:05:10:08:BC:BD:91:1C:7A:5B:F6:04:5A:25:48:C4
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.234.0/24
IPv6:
2001:67c:1314::/48
Signature Algorithm: sha256WithRSAEncryption
19:bf:d4:c1:66:65:83:65:03:e5:b6:9d:93:b2:e5:53:fe:0b:
ea:c8:9e:6a:bd:44:14:29:0f:e0:78:f7:f1:2d:80:53:79:c5:
82:48:cd:36:4d:1a:21:43:38:28:15:56:ff:14:4c:21:2f:d0:
f2:b4:ed:f3:c8:c3:15:dc:34:bf:dc:7d:bc:48:31:79:37:d4:
2b:fe:ca:25:4e:c2:eb:f0:d2:a9:18:2d:fd:0e:1c:f0:95:db:
6e:db:01:e7:12:02:c5:0e:13:76:d9:f3:12:22:72:58:da:f5:
55:ed:82:8e:d3:7b:8f:02:43:e5:eb:d0:d8:1a:b1:cd:8e:f4:
a4:59:a4:61:41:29:4a:3b:2f:77:2a:a2:70:19:02:5b:cb:0f:
87:64:76:3f:3a:b4:7f:71:dc:07:c5:77:a9:7e:c7:35:61:61:
50:97:a6:3a:7f:2f:48:d6:60:8e:ae:96:af:32:d9:04:98:74:
32:d9:72:e5:c3:4b:94:10:ba:d9:83:83:31:dd:64:7f:b3:2d:
8c:e3:77:ac:2d:15:64:d7:b1:d5:30:ea:88:3c:24:15:34:33:
f5:90:7b:de:6a:b6:b8:e3:c4:3d:4f:39:5e:d5:00:91:24:6f:
e5:32:ec:b8:f7:22:41:34:6d:44:87:b5:fd:a9:9c:00:a1:42:
cd:81:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:45 2026 by rpki-client