Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/iyfIsG_zCzXslesxdnK347yeiF4.roa
File: iyfIsG_zCzXslesxdnK347yeiF4.roa (raw, json)
Hash identifier: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=
Subject key identifier: 8B:27:C8:B0:6F:F3:0B:35:EC:95:EB:31:76:72:B7:E3:BC:9E:88:5E
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019C983BE282FA5A4F36657A1F8A633C92D7
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/iyfIsG_zCzXslesxdnK347yeiF4.roa
Signing time: Thu 26 Feb 2026 04:36:27 +0000
ROA not before: Thu 26 Feb 2026 04:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55154
IP address blocks: 109.203.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:3b:e2:82:fa:5a:4f:36:65:7a:1f:8a:63:3c:92:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 26 04:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b27c8b06ff30b35ec95eb317672b7e3bc9e885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:a1:35:62:83:06:6f:7b:6e:3b:0d:bb:7b:
94:a8:cd:ad:2d:9e:ea:af:ac:f3:8d:46:f1:71:b7:
fb:7e:ca:e0:00:ec:e8:a8:c3:87:4c:0d:c3:3d:3d:
0b:71:7c:28:20:1a:e1:c2:2f:f7:37:1d:61:50:55:
46:66:34:54:47:80:22:89:95:ba:03:cf:f6:ea:d1:
19:3b:dd:e8:c1:4e:b1:7d:b1:22:fd:b7:27:9c:91:
de:78:39:0f:84:1e:4f:42:a5:65:02:91:55:f2:a8:
59:b2:c7:67:eb:c3:45:03:06:00:e2:54:e7:da:3c:
c9:fe:90:ee:18:43:9e:1f:05:22:5e:98:42:98:4a:
cb:fa:19:94:a7:bf:28:43:88:11:d3:1d:d0:45:cf:
83:a5:2d:a0:ee:d1:15:20:9f:e4:4d:b6:33:87:2e:
f2:6f:e6:a5:26:88:8d:55:28:26:73:fd:89:d1:b3:
98:f0:7c:2f:30:ee:5e:5b:25:ad:e9:5e:84:a7:0d:
3f:5f:ba:3d:c4:2c:04:c8:e3:60:f5:0a:79:6c:91:
c8:ab:82:03:be:42:59:df:0c:11:b9:a3:54:4a:83:
2d:4e:3f:52:0d:1a:9f:b1:39:8a:bd:ee:81:e9:1e:
92:01:0d:f1:0c:00:ab:f2:e3:ec:29:8c:dc:62:2d:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:C8:B0:6F:F3:0B:35:EC:95:EB:31:76:72:B7:E3:BC:9E:88:5E
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/iyfIsG_zCzXslesxdnK347yeiF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.203.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:6c:51:1b:00:5c:3e:08:89:ac:c1:ac:74:bf:88:33:f0:78:
91:9c:b3:07:1b:fc:f9:60:2e:da:89:6b:d5:cb:f6:42:90:02:
35:87:fc:db:c6:c2:db:2b:9a:70:17:a6:41:27:6c:1f:f6:f8:
64:ac:36:09:fb:c7:fc:7b:19:b6:fe:ec:f3:87:d9:80:6b:83:
57:af:78:5e:41:b3:50:b9:3a:a2:01:12:b2:93:8e:7e:79:18:
e0:77:6c:7e:98:89:93:66:38:76:29:fe:f8:21:28:e4:4b:f8:
ab:96:7b:3e:7e:a4:c0:8b:9d:22:f6:9d:59:41:ba:67:5a:ad:
fb:b8:23:e9:ff:7e:69:fc:3a:bf:65:d8:85:d8:9c:e3:2a:0a:
66:4b:ce:4b:29:06:8a:d7:de:91:f9:71:1b:80:81:34:e1:df:
1c:68:30:de:5f:7b:a8:40:87:3d:4e:67:6e:f3:ae:00:81:b7:
c4:06:c3:2c:0f:66:b7:c1:da:40:ba:1c:f8:b3:44:1b:1f:38:
b8:89:ab:09:ef:1f:dc:30:42:02:91:ff:8d:06:3c:ce:a3:50:
f0:f9:a3:43:fc:fe:97:37:be:51:64:82:8c:3e:8b:54:52:5b:
07:98:0d:57:62:e1:b3:64:b4:58:57:a1:70:40:28:6f:66:5f:
60:2b:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:26 2026 by rpki-client