Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/I9pkAH906nZBLjkKMj0A3qvNerA.roa
File: I9pkAH906nZBLjkKMj0A3qvNerA.roa (raw, json)
Hash identifier: kK+otvNovNpDkMGHU7hKnjBkL3H8kP1EQF/+FtQ9xQo=
Subject key identifier: 23:DA:64:00:7F:74:EA:76:41:2E:39:0A:32:3D:00:DE:AB:CD:7A:B0
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019E72700EB4719EA9FCA66BC518330B5B57
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/I9pkAH906nZBLjkKMj0A3qvNerA.roa
Signing time: Fri 29 May 2026 06:33:26 +0000
ROA not before: Fri 29 May 2026 06:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208368
IP address blocks: 82.158.160.0/20 maxlen: 20
2a01:90a1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:70:0e:b4:71:9e:a9:fc:a6:6b:c5:18:33:0b:5b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: May 29 06:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23da64007f74ea76412e390a323d00deabcd7ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:56:e7:13:30:0d:cc:02:20:34:b3:7f:66:
39:8e:e9:92:f8:5a:c2:5e:94:f4:91:4d:c2:1d:51:
01:a2:63:d6:65:39:74:0c:06:4a:3c:3b:94:65:74:
20:69:ec:f0:66:0d:d3:89:08:2c:d7:0b:e2:ed:55:
45:44:d5:74:2a:12:70:59:17:cc:6c:ea:90:66:d2:
81:80:b1:f6:5c:60:3b:c3:ef:3a:32:48:81:fc:24:
c2:ba:2f:f5:e6:1f:e7:d3:7d:4c:3d:c8:07:6f:03:
a8:b3:2a:de:f5:f9:8e:dd:51:3b:0c:25:dd:a0:af:
1c:40:6d:9f:24:5b:4f:7e:ad:72:5c:9b:0b:66:31:
6e:80:7c:5c:ef:0b:6c:b3:9c:60:98:36:85:4a:1a:
8c:25:d0:8d:08:b7:1f:9f:f5:b0:2d:f2:b5:89:08:
63:ce:fc:dd:da:52:f2:d8:bd:09:7f:a2:dd:23:3a:
ac:03:94:8a:d9:04:8c:e8:c7:47:ed:71:60:92:2b:
5b:0f:42:ed:66:12:56:69:fc:85:7a:cf:c8:be:37:
b4:68:8a:22:1e:0e:97:cb:9c:52:98:66:a0:22:2b:
f9:8a:5d:75:1e:78:e8:e9:f0:44:82:3b:5b:03:f5:
76:19:13:7d:69:09:e3:6b:a6:b9:5e:82:df:a0:ab:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:64:00:7F:74:EA:76:41:2E:39:0A:32:3D:00:DE:AB:CD:7A:B0
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/I9pkAH906nZBLjkKMj0A3qvNerA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.158.160.0/20
IPv6:
2a01:90a1::/32
Signature Algorithm: sha256WithRSAEncryption
12:be:2c:05:87:e6:db:a5:55:0b:dd:dd:6b:9e:9e:79:1b:2c:
91:b1:1e:2d:f4:a6:ab:f5:e6:c9:69:ed:d3:03:5a:3f:95:dc:
55:8a:f6:ea:eb:97:69:25:3f:69:92:b2:2f:cd:6d:74:81:52:
d8:d5:bf:0f:e9:a7:9e:3d:32:ac:15:87:b5:89:08:88:fa:5f:
b7:9a:33:28:53:6d:0d:79:2e:08:fa:cc:ff:74:6d:b6:9b:bb:
90:75:1e:b1:9e:da:97:d2:55:56:ec:c5:87:90:6e:76:0f:dd:
5d:3b:53:82:d9:35:f0:96:96:8e:7a:ac:0a:63:f5:6a:20:93:
a2:9d:d9:c7:33:c6:e9:a2:91:ef:48:1a:47:39:31:75:2a:7e:
df:da:bb:20:ef:39:53:95:34:f4:af:70:5d:a3:df:7c:89:7c:
1a:79:b5:b9:de:f1:3f:c0:d5:65:9a:94:1f:b1:15:4e:da:a2:
77:7f:c3:36:00:e5:64:4a:7c:12:84:65:44:0e:7b:88:01:6a:
3a:bb:74:bd:86:0d:2e:94:20:37:29:86:f6:73:2d:f1:ac:9f:
cf:54:bc:e2:24:9a:20:47:41:79:8a:4e:f3:96:4c:89:c2:e9:
1e:4f:66:e0:64:74:f7:ed:15:ad:ef:4d:ea:80:df:67:9c:a8:
04:c1:81:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:24 2026 by rpki-client