Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ikkeya1yJgRDS-xhPDlnuPLetJs.roa
File: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (raw, json)
Hash identifier: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=
Subject key identifier: 22:49:1E:C9:AD:72:26:04:43:4B:EC:61:3C:39:67:B8:F2:DE:B4:9B
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 019EA38829101D1035EB025A807E06020DDE
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ikkeya1yJgRDS-xhPDlnuPLetJs.roa
Signing time: Sun 07 Jun 2026 19:21:10 +0000
ROA not before: Sun 07 Jun 2026 19:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 45.140.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a3:88:29:10:1d:10:35:eb:02:5a:80:7e:06:02:0d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jun 7 19:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22491ec9ad722604434bec613c3967b8f2deb49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:0c:1f:59:df:6a:15:32:18:04:61:07:e1:
a6:90:62:ce:cb:8b:26:93:8c:f1:55:33:fd:21:2f:
94:58:0b:37:d9:c8:55:88:fd:e1:c9:6e:39:f9:87:
18:ab:1a:6e:d8:6b:c3:66:27:37:f6:ae:23:f2:60:
d3:a1:75:83:b6:26:f9:2e:20:61:ca:51:16:90:5c:
e1:cf:b0:d7:bd:29:b3:95:d2:f6:0c:6d:51:87:79:
c8:82:86:36:ab:92:18:2c:6b:6e:45:ec:ae:ec:39:
ca:c1:0c:b8:99:85:51:42:c3:97:de:d4:b6:32:ce:
ac:3d:28:75:3d:71:1f:e0:ae:27:ce:c6:18:11:d0:
55:df:fb:e2:69:e9:78:9d:7b:2f:e7:aa:84:d9:55:
f8:9b:49:08:c5:e3:45:a9:38:10:ce:72:e6:84:c1:
47:5a:f3:3e:cf:39:be:83:0a:a0:7a:38:16:74:f2:
f0:b8:5e:53:67:c2:6e:fd:5d:6c:42:32:f6:54:1f:
7a:de:6e:46:a7:1f:fd:55:93:57:bc:01:d7:d1:12:
ad:a9:ba:e3:74:67:18:a5:2c:2a:f0:c9:be:3a:4f:
0f:04:28:df:2a:53:4c:5f:f9:8a:ee:85:bd:54:56:
c6:2f:3c:80:fe:aa:01:af:f2:9b:44:bf:79:54:56:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:1E:C9:AD:72:26:04:43:4B:EC:61:3C:39:67:B8:F2:DE:B4:9B
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ikkeya1yJgRDS-xhPDlnuPLetJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
Signature Algorithm: sha256WithRSAEncryption
65:af:df:25:54:fa:32:e9:df:cb:92:5d:5a:19:41:d8:1e:8e:
73:78:18:c4:c6:20:56:32:b0:75:1c:f9:98:0e:6f:c4:0b:ba:
39:7c:2f:d8:9a:cd:22:ee:f7:3a:e5:37:91:93:9b:95:12:f9:
a6:c9:95:ad:6f:3e:2e:64:f3:6c:a8:4a:58:6c:be:76:6c:55:
69:63:0a:4b:c0:cf:53:d9:e7:c3:b7:62:01:7d:06:65:8f:45:
59:c0:ff:e6:84:75:f0:78:a4:95:a6:9c:76:08:32:a2:ee:50:
2c:b1:b2:34:bb:d8:81:67:0b:52:34:22:c8:40:6e:3c:9e:13:
ba:87:d3:06:6d:23:83:6e:05:55:8f:ef:1b:ee:a6:3d:99:75:
ec:36:70:e4:bc:0e:f3:a6:56:6c:31:be:29:57:d6:e1:ae:fb:
1c:0f:70:ac:93:66:0c:38:fe:a5:97:12:51:00:5a:01:03:ec:
d3:61:74:11:4e:58:90:21:30:5e:c9:70:ef:66:4b:3c:b1:39:
c6:ed:1e:8c:08:75:78:73:f3:9d:de:9a:27:96:dd:34:ca:ad:
34:71:fe:52:47:69:21:fd:ea:48:27:db:78:39:21:ff:a8:af:
ea:57:00:ad:94:a9:06:89:52:5f:cd:8e:e4:25:64:f1:93:fd:
e5:36:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:11 2026 by rpki-client