Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/igWvs9Sbp3ZPjfqQzF3w0lc-BKU.roa
File: igWvs9Sbp3ZPjfqQzF3w0lc-BKU.roa (raw, json)
Hash identifier: I6qWg4rV64JteDOt15J4llNv9aWR7+1Azo5FckmmhUA=
Subject key identifier: 8A:05:AF:B3:D4:9B:A7:76:4F:8D:FA:90:CC:5D:F0:D2:57:3E:04:A5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DA3112097C3BEE528472C0F1B103AE482
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/igWvs9Sbp3ZPjfqQzF3w0lc-BKU.roa
Signing time: Sun 19 Apr 2026 00:08:21 +0000
ROA not before: Sun 19 Apr 2026 00:08:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29066
IP address blocks: 88.218.76.0/22 maxlen: 24
92.119.124.0/22 maxlen: 24
93.123.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:11:20:97:c3:be:e5:28:47:2c:0f:1b:10:3a:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 00:08:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a05afb3d49ba7764f8dfa90cc5df0d2573e04a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:49:fa:41:f2:cf:9f:d2:37:56:50:02:c9:
2d:78:9f:02:d7:ce:11:5a:34:9d:42:36:de:78:b6:
26:54:6c:f8:4d:fd:ad:c2:06:6b:e6:f3:7c:82:2f:
b2:00:4e:43:bd:c9:c3:80:c0:e4:0f:18:d6:40:e1:
9d:10:0a:59:b0:e9:50:da:2c:3b:f3:aa:6a:d3:24:
bd:1a:39:df:a8:1f:6b:04:ef:94:77:d8:16:99:4b:
a3:7c:68:ea:dd:3a:56:c6:55:24:ca:cd:30:37:da:
5e:39:c3:7e:b3:3b:92:75:aa:2f:12:27:f9:09:95:
ca:d7:68:de:02:3c:d6:31:d5:f3:b2:fe:24:4f:c2:
09:24:05:86:3a:c9:b9:9e:a2:f9:57:08:63:75:6e:
be:53:93:ee:01:b3:bd:db:24:c8:49:42:d1:e4:b8:
b1:00:d5:2d:3b:33:3f:11:99:c1:c3:71:6f:01:8d:
b3:0f:4a:82:63:ff:03:e4:b9:e0:01:18:64:6c:45:
02:f0:49:02:32:24:90:d2:51:cd:cf:d1:fd:92:b4:
75:56:ac:9f:5e:0c:c9:c1:0e:b0:87:db:b3:63:ca:
e4:e8:b1:d5:6a:bf:d8:d0:45:d1:e1:47:a1:79:17:
47:41:c7:ec:fe:8f:a3:35:69:60:96:3f:d1:91:5f:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:05:AF:B3:D4:9B:A7:76:4F:8D:FA:90:CC:5D:F0:D2:57:3E:04:A5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/igWvs9Sbp3ZPjfqQzF3w0lc-BKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.76.0/22
92.119.124.0/22
93.123.100.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:cc:20:47:53:93:76:45:9a:e1:8e:5b:20:ac:27:53:f3:1e:
5f:4c:30:c9:8d:c7:79:e7:94:9a:9b:40:2e:e4:32:e6:58:1e:
8f:9c:98:44:15:4b:52:5e:b4:81:f3:a0:ae:d3:55:d0:05:b5:
21:67:bc:bd:cc:25:3f:e4:42:32:e5:e3:5f:c0:cc:58:a1:8a:
4b:f1:50:35:42:f1:10:a9:5b:76:78:b9:b8:c2:49:23:b6:20:
84:2f:01:ce:08:25:86:cb:84:02:73:c1:1b:9d:8f:58:5b:39:
8f:a2:6e:83:3b:46:5e:7b:59:99:cb:7f:02:a5:d3:ab:2d:00:
e6:2d:19:a7:90:ce:03:7e:67:2d:c6:3b:af:79:ec:c3:29:3b:
5b:c8:6f:79:f8:78:80:88:02:c4:61:1c:ac:8b:1c:03:0d:37:
a6:a6:dc:f2:cb:0c:04:58:63:5c:c1:14:7b:01:51:49:eb:8d:
6e:1f:19:51:3a:d2:01:92:b0:2d:33:88:61:9a:c0:e0:53:39:
6a:48:4b:6c:17:e1:f2:c8:f1:27:10:cb:ba:4e:66:7d:0a:8d:
ee:93:84:ed:53:b9:8c:22:21:71:e3:c9:63:aa:23:e6:2f:a6:
e7:e9:4f:0f:70:34:d4:81:fc:c4:ab:3a:02:e6:51:cf:3d:11:
e5:7f:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:22 2026 by rpki-client