Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/Ig5_iQWFva6wEaZIrvBQREaV2rM.roa
File: Ig5_iQWFva6wEaZIrvBQREaV2rM.roa (raw, json)
Hash identifier: FNZtMMnZ+tjsd2FzsKX3m62nR2nsdipfzhoI6BMqglg=
Subject key identifier: 22:0E:7F:89:05:85:BD:AE:B0:11:A6:48:AE:F0:50:44:46:95:DA:B3
Certificate issuer: /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial: 019B791008860BBC889FF85077ADA5F3864B
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/Ig5_iQWFva6wEaZIrvBQREaV2rM.roa
Signing time: Thu 01 Jan 2026 10:17:32 +0000
ROA not before: Thu 01 Jan 2026 10:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212125
IP address blocks: 2001:67c:2904::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:08:86:0b:bc:88:9f:f8:50:77:ad:a5:f3:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Validity
Not Before: Jan 1 10:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=220e7f890585bdaeb011a648aef050444695dab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:79:68:9e:db:0a:77:20:49:b5:a8:15:0c:
f7:f7:21:5e:c7:a1:9b:dd:ed:c6:5e:7d:2b:e0:b7:
61:03:3c:23:8c:c3:76:d0:f0:6a:5d:ec:f3:12:80:
a1:ab:56:e9:5a:19:a7:0b:1f:5f:86:2f:1c:c6:3f:
6d:81:cb:27:06:f3:4b:89:a4:cf:26:1a:72:05:74:
0b:a5:08:0c:73:da:c5:44:e9:dc:5d:3e:c1:29:29:
ec:64:ff:08:0e:0d:02:0b:5d:47:12:1a:ac:83:04:
d7:d7:f2:6b:94:c2:25:33:77:4a:39:5d:e3:42:c7:
1c:25:b5:1c:3f:53:81:56:7e:a6:2e:b2:28:d5:0e:
5e:96:0c:57:cf:cd:a8:fd:03:3a:53:ee:82:62:b7:
a6:a4:1e:13:ce:9f:30:6b:c5:84:1a:f8:6c:90:09:
76:9d:6f:36:10:fe:83:38:2b:8d:ef:ea:5d:96:da:
fd:27:f6:03:ce:1a:d8:a7:43:cb:dd:d6:41:61:96:
b4:e1:08:23:7f:da:0b:57:fa:30:74:b7:77:c4:48:
a0:fe:5a:72:9c:df:50:3a:8f:58:76:25:1a:99:ea:
b0:20:69:60:ac:92:c0:64:35:66:dc:d8:d7:cf:76:
bd:d5:ac:10:8d:0d:25:34:ef:ce:77:53:4b:16:0a:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:7F:89:05:85:BD:AE:B0:11:A6:48:AE:F0:50:44:46:95:DA:B3
X509v3 Authority Key Identifier:
keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/Ig5_iQWFva6wEaZIrvBQREaV2rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2904::/48
Signature Algorithm: sha256WithRSAEncryption
63:e7:2d:d0:28:48:82:a6:00:e3:6b:8a:06:bc:35:1d:b8:0f:
10:df:b5:dd:85:06:bc:a4:7d:24:40:24:2f:06:dd:58:28:85:
17:8d:78:37:43:67:8b:10:42:ec:22:44:76:16:73:ef:81:d1:
f6:4a:1e:5e:4b:68:eb:d9:7a:bf:ee:a6:a4:ba:c8:43:75:43:
c4:fc:00:18:24:9a:95:d2:aa:44:ae:86:19:ff:91:96:c9:32:
8d:45:06:2b:25:55:e9:d1:fe:4e:33:6c:36:54:b9:79:11:98:
15:ec:38:9d:91:c5:69:8e:98:aa:66:0f:51:f7:d4:c6:eb:69:
79:36:d6:d9:96:bb:38:b0:e9:f2:85:9f:5e:bf:0c:ba:9f:c2:
14:0a:32:00:25:46:d4:47:36:ba:d7:bd:14:eb:1c:e8:6a:f9:
f9:8c:be:64:a9:05:69:f3:5a:8b:b5:32:12:fa:fa:b3:dc:3d:
4f:01:be:1e:b2:6e:79:41:c0:91:2f:22:c3:9e:77:b2:b7:0c:
f5:4f:05:e7:b1:29:2f:37:53:75:ad:72:6a:34:b8:42:43:b6:
a1:cf:52:f0:bc:9c:f4:dc:40:7c:6a:db:40:1a:af:27:3f:34:
99:9d:cf:d4:c1:8d:0b:35:2e:cc:c2:c2:36:8b:af:35:76:71:
55:e5:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:02 2026 by rpki-client