Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0iVrCCLP-XkCQjDZMTpJm6S9O7A.roa
File: 0iVrCCLP-XkCQjDZMTpJm6S9O7A.roa (raw, json)
Hash identifier: nHBAmhBSFEnm0sQLnofCWFkmLHbc64UJJWcc1VUFFJo=
Subject key identifier: D2:25:6B:08:22:CF:F9:79:02:42:30:D9:31:3A:49:9B:A4:BD:3B:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019ED1EE1A5C65A994B11E3D8C9807AF0837
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0iVrCCLP-XkCQjDZMTpJm6S9O7A.roa
Signing time: Tue 16 Jun 2026 19:35:02 +0000
ROA not before: Tue 16 Jun 2026 19:35:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219478
IP address blocks: 94.249.200.0/24 maxlen: 24
94.249.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:ee:1a:5c:65:a9:94:b1:1e:3d:8c:98:07:af:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 16 19:35:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2256b0822cff979024230d9313a499ba4bd3bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:7a:92:2c:2a:25:47:48:87:23:24:1d:02:
30:56:9e:3a:ff:40:f9:51:60:a0:09:3f:ce:99:4a:
09:a7:ce:ea:2b:e0:08:b2:f4:92:f5:c2:ef:2e:82:
cf:b7:57:f0:a1:83:ab:58:04:e0:14:7b:e0:25:ac:
b2:91:05:67:0c:3d:fd:d9:29:f7:60:05:f2:9d:78:
df:95:81:36:c4:55:d6:07:30:3b:a2:53:89:e9:c4:
d8:6e:95:f2:6e:ea:37:71:d8:e4:63:c6:12:1c:0e:
ed:b9:06:a3:ac:f8:49:a1:9b:cf:ba:97:64:72:98:
ee:a8:2e:9d:f8:a9:df:65:15:d0:5b:6b:c2:c4:aa:
8f:82:3d:3b:1b:a1:f0:b6:3e:c4:07:7e:76:60:85:
90:21:c6:32:47:1a:20:ff:cf:ee:a2:62:96:82:ac:
9e:2f:7c:2a:97:c7:64:9c:bb:6d:3c:bc:83:68:03:
2f:35:88:36:b8:09:2e:ec:d6:2f:0c:54:f8:5d:e4:
b5:16:01:c8:db:f1:ab:95:81:ca:36:fe:0e:fd:8d:
bd:0a:f7:06:e2:ad:d2:2e:d7:47:f7:4f:57:8b:ae:
ae:09:da:e8:15:fe:b8:a6:16:49:da:c0:b0:8a:05:
a1:19:c0:ef:be:26:08:ba:61:18:c0:a7:3a:b5:78:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:6B:08:22:CF:F9:79:02:42:30:D9:31:3A:49:9B:A4:BD:3B:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0iVrCCLP-XkCQjDZMTpJm6S9O7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.200.0/24
94.249.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:89:1a:d2:77:dd:2e:97:c4:c1:b6:62:8e:96:c7:0d:5d:bd:
e0:d7:fc:69:50:35:6b:5d:ad:90:db:eb:72:17:de:71:bd:80:
fe:56:30:b7:97:ee:1c:a7:b4:a6:dd:18:7c:17:df:49:a7:02:
9e:6f:54:90:a0:18:b4:92:7f:eb:c7:44:ba:a2:ea:6b:df:d7:
6e:7a:0f:c9:ed:0e:76:38:4b:42:0a:9b:24:a5:cc:83:60:ea:
8f:e9:2e:01:c8:47:b8:97:5c:3a:55:dc:ec:21:98:a1:82:68:
43:ef:53:ab:6a:48:b0:fc:a5:42:30:47:d1:81:18:a2:cb:1e:
57:b8:c5:53:4c:b1:1f:d5:59:2f:f5:9d:1b:3b:4d:59:bf:9e:
80:7f:27:a1:1e:49:13:9f:3c:54:70:71:d3:65:35:1f:e2:00:
cb:bd:5f:b5:ff:e8:18:a5:8d:38:7c:ad:26:59:6a:f6:ea:2b:
52:91:d4:69:e2:14:c0:a7:6d:cc:2b:99:b2:9f:a3:d4:d5:f0:
26:7a:fe:ff:50:f4:f5:f7:f9:4f:79:89:fe:34:46:02:41:6b:
ac:d6:95:84:8e:89:f8:b7:6b:96:73:9a:7f:31:df:4d:77:19:
27:99:cf:b3:24:18:95:55:40:0a:47:5c:3f:b8:59:9a:a6:31:
ea:70:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:48 2026 by rpki-client