Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/IIymt_gIxj1wQiBNwoPBz_3n-qE.roa
File: IIymt_gIxj1wQiBNwoPBz_3n-qE.roa (raw, json)
Hash identifier: yR49/WGoG8+bW4KA9QnfHmFC2bKX29hGh6JWaLIVXdA=
Subject key identifier: 20:8C:A6:B7:F8:08:C6:3D:70:42:20:4D:C2:83:C1:CF:FD:E7:FA:A1
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019B790FF75248A4D85ECCE17B8B161BA1AB
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/IIymt_gIxj1wQiBNwoPBz_3n-qE.roa
Signing time: Thu 01 Jan 2026 10:17:28 +0000
ROA not before: Thu 01 Jan 2026 10:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207403
IP address blocks: 91.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:0f:f7:52:48:a4:d8:5e:cc:e1:7b:8b:16:1b:a1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Jan 1 10:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208ca6b7f808c63d7042204dc283c1cffde7faa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:c5:bb:37:b2:84:f6:90:63:62:2f:25:da:
04:61:52:ba:cb:37:e8:5f:24:9f:cc:0e:97:79:58:
07:cb:c6:4d:3d:e1:9b:37:0f:8b:5a:bd:bc:d4:2b:
aa:7b:36:36:68:3b:4a:1d:28:b5:9d:04:8d:a0:17:
82:91:80:c6:f6:43:11:9a:25:46:0b:07:f8:10:76:
e3:ad:50:59:53:58:aa:cb:df:fd:30:18:0c:80:b0:
30:f9:8d:26:0a:ef:94:1a:68:d6:c4:01:37:f3:5a:
76:a9:d1:9b:47:8e:2a:8f:a0:c3:e9:c5:bd:c5:9b:
34:ae:c3:37:0a:b1:df:f3:3d:47:22:7f:47:28:87:
87:b9:ec:32:f3:6f:3f:21:d9:7f:ad:1f:c4:55:89:
97:a1:2b:93:10:4d:80:0b:2e:1e:c7:00:79:b5:a0:
fb:ef:b5:2e:6d:3b:3c:01:1b:16:73:35:fb:05:8c:
0f:33:87:dd:b3:1d:59:b4:6d:2a:43:73:01:35:58:
de:69:0c:24:0a:79:3d:90:ec:9b:d8:c0:ec:5a:0f:
d9:43:81:31:3a:84:9c:7b:0a:30:98:d6:f2:cd:67:
ea:bc:d4:6e:bc:18:18:ac:b3:c3:00:2c:53:76:e1:
e8:58:77:da:76:15:35:1a:29:31:05:e1:4b:2f:6c:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:A6:B7:F8:08:C6:3D:70:42:20:4D:C2:83:C1:CF:FD:E7:FA:A1
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/IIymt_gIxj1wQiBNwoPBz_3n-qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0d:a9:36:1b:a3:84:6b:94:28:87:76:25:bc:f6:d1:e8:b7:
62:e9:f0:7c:ca:1b:9b:11:57:e9:9f:55:61:a7:1c:86:c2:45:
3c:90:3f:9f:12:26:a1:8a:87:bb:90:59:32:d3:35:02:e2:b4:
38:0a:a9:06:82:03:c0:b9:d6:83:8a:db:a4:89:74:2e:e7:c8:
2f:1e:34:36:c4:07:35:e7:35:c8:aa:da:dd:77:24:71:26:4e:
20:e5:76:d7:0d:1d:e8:4c:24:01:a1:71:4f:43:f7:8f:08:0c:
ca:af:f8:bd:26:14:6c:35:b4:b7:22:0e:4d:37:1c:79:32:27:
c0:e2:15:c8:1a:1c:b2:3e:f0:38:b9:7c:d4:fa:f5:d1:84:22:
d3:17:82:ec:fc:18:96:98:51:8e:9c:d3:c5:aa:6d:3f:6f:e7:
65:1e:55:c8:d3:53:03:70:f1:d4:ae:99:f0:98:2e:de:69:68:
3b:cb:b1:35:89:6a:52:18:9f:cb:4e:1c:bf:96:39:ee:43:39:
f8:22:01:0b:da:cf:95:fe:c2:0b:61:c2:b8:ea:52:0a:0f:66:
4f:78:24:9d:d2:66:f0:ae:5f:d9:b7:4f:a0:c2:a8:e8:35:56:
92:4f:ba:0e:09:db:5f:83:ed:16:11:54:cf:63:72:4d:8d:0e:
e9:70:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:35 2026 by rpki-client