Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/iBO_j6pKSpYKVcCdMkVJVOJ_JTY.roa
File: iBO_j6pKSpYKVcCdMkVJVOJ_JTY.roa (raw, json)
Hash identifier: qxgq3JwzbwI8zhrLamZ8/4Yht0hbiq2iSV5E/icFwWM=
Subject key identifier: 88:13:BF:8F:AA:4A:4A:96:0A:55:C0:9D:32:45:49:54:E2:7F:25:36
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019F00233AAED9176B12E1992CB549B58326
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/iBO_j6pKSpYKVcCdMkVJVOJ_JTY.roa
Signing time: Thu 25 Jun 2026 18:55:36 +0000
ROA not before: Thu 25 Jun 2026 18:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 87.58.218.0/24 maxlen: 24
150.251.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:23:3a:ae:d9:17:6b:12:e1:99:2c:b5:49:b5:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jun 25 18:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8813bf8faa4a4a960a55c09d32454954e27f2536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:3d:66:0c:38:c3:64:c5:78:3a:31:8e:1d:
f1:f0:ae:9e:cc:30:8e:ef:28:d1:1c:1c:e5:75:e9:
05:0f:84:d0:5c:7f:94:a6:58:0b:8c:ea:33:f4:5d:
0a:0a:5b:dc:9b:a7:07:d9:9d:5b:97:70:6d:a5:10:
d4:1f:1d:25:99:aa:a0:cc:fa:5a:f5:a1:42:ac:59:
4c:80:22:3b:5a:3b:19:70:79:1e:34:77:11:34:1f:
24:49:45:16:d3:f0:34:50:79:fc:55:56:dd:93:73:
8b:c2:f0:52:92:89:f3:3e:7e:9a:09:0e:77:d7:83:
d4:3c:fe:dc:9c:7c:1e:03:5b:1f:2b:e1:1e:aa:91:
a4:4e:8e:b0:1b:6c:40:66:53:f2:b9:f4:95:34:54:
b8:d1:b5:67:b8:a5:a0:02:be:e0:52:3b:d5:c1:70:
5d:6c:9c:59:56:79:75:38:a2:f4:4a:6b:cb:67:c9:
07:fc:30:db:f7:a9:03:0a:c3:2b:be:fc:08:6b:04:
5d:c8:ad:13:be:16:a7:c8:5b:0a:7d:bf:53:95:11:
08:17:72:fb:7b:60:78:51:d2:f4:ab:96:66:b4:54:
21:ba:ff:17:ad:6c:89:6a:b1:85:43:dc:f1:68:c7:
e6:70:c9:5d:ca:2a:b7:11:de:50:57:d9:60:68:ff:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:13:BF:8F:AA:4A:4A:96:0A:55:C0:9D:32:45:49:54:E2:7F:25:36
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/iBO_j6pKSpYKVcCdMkVJVOJ_JTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.218.0/24
150.251.140.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6a:48:5c:8f:21:a2:4b:64:5e:38:5d:83:74:34:e9:6f:78:
b0:ff:a7:c1:21:35:2f:c5:fb:1d:5a:23:39:8f:bf:2c:00:c2:
1b:9a:a3:46:c3:eb:6d:ba:e0:09:16:02:bb:cb:3a:f0:54:e8:
33:28:eb:7e:31:1c:b6:3c:1b:83:5c:fa:8c:60:6f:50:71:90:
5f:2d:51:f2:0d:a4:8a:75:7b:01:af:ee:d6:22:72:bd:bc:ef:
aa:28:10:9f:e5:3b:55:88:34:16:52:fa:a0:8c:ba:b9:2a:67:
a1:df:ac:5c:5f:bb:d4:4f:e1:60:16:95:cb:2e:5c:99:cc:ba:
1e:ea:ab:3d:27:fe:36:d5:22:dd:b3:7a:60:ef:de:22:ae:b4:
a4:b6:fb:12:d9:64:04:0e:1c:02:57:2c:02:09:63:72:50:3b:
bd:31:d4:35:06:09:c0:f8:54:8a:23:ba:61:51:7b:ec:70:c0:
e7:69:fe:c3:1c:90:bb:83:42:59:34:c0:20:c8:2e:ac:fb:98:
63:d0:fa:be:66:a1:08:44:1e:1f:e2:34:e8:f5:76:fe:0d:ad:
4a:c9:f5:8e:4d:a7:8e:4c:79:77:6b:71:79:d5:31:c9:e1:55:
98:a7:49:9b:f0:2c:81:6b:1b:b8:38:72:3e:15:e3:58:cf:b4:
eb:43:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client