Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa
File: iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa (raw, json)
Hash identifier: A/Iygha2SGjwHmAbZm3zd/UIf3Y/PB7zRPxZUCvbMRc=
Subject key identifier: 88:83:97:33:B7:C3:9D:96:66:2E:A1:A4:6C:75:C7:5D:02:86:19:AE
Certificate issuer: /CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Certificate serial: 019C4E4FB6CB46D03629FBA80831F53BFC11
Authority key identifier: 69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa
Signing time: Wed 11 Feb 2026 20:06:12 +0000
ROA not before: Wed 11 Feb 2026 20:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61436
IP address blocks: 91.224.34.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4e:4f:b6:cb:46:d0:36:29:fb:a8:08:31:f5:3b:fc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Validity
Not Before: Feb 11 20:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88839733b7c39d96662ea1a46c75c75d028619ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:c1:9a:72:0d:0a:e7:35:ec:61:75:bf:c8:
5d:ea:50:08:06:75:3d:22:b4:8e:96:2a:14:20:1d:
4b:a5:e8:b4:4d:54:38:e7:34:30:b8:8a:7e:61:cb:
11:9f:69:71:a8:48:65:ca:f1:bb:9c:d7:f1:c8:d3:
c1:a7:be:44:8e:3d:28:5b:08:0c:d7:43:a1:fd:a5:
96:fb:23:bb:53:29:04:f6:ba:9d:5a:cc:7b:6c:17:
02:9d:bb:1e:b8:20:ac:d8:cf:d5:71:0d:90:28:62:
73:6c:75:75:3a:4d:f7:54:a3:14:37:0a:d2:1f:fb:
d9:84:c7:8b:84:c4:64:55:d4:04:fe:b8:73:eb:8f:
b3:d4:16:7d:37:55:da:9b:e0:ac:d3:4d:83:9d:76:
de:f7:70:87:4a:b5:b7:1d:d0:00:66:7e:9a:47:38:
d3:22:57:28:d8:35:c6:d1:85:0c:87:10:68:33:0a:
44:37:6f:9c:51:b7:62:b1:92:4c:f2:ac:04:18:b3:
bc:a8:9c:f3:93:0d:b0:ed:1e:2c:df:96:bc:0c:3b:
ec:ad:00:32:17:c0:a0:9b:cf:1a:53:d9:56:bc:ce:
a4:ca:f3:ac:ab:9d:bb:f0:04:ef:58:52:90:b2:18:
cc:24:93:98:de:15:aa:8d:eb:8c:98:4e:d5:24:18:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:97:33:B7:C3:9D:96:66:2E:A1:A4:6C:75:C7:5D:02:86:19:AE
X509v3 Authority Key Identifier:
keyid:69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.34.0/23
Signature Algorithm: sha256WithRSAEncryption
08:be:b6:9b:2c:9a:2b:a7:47:a5:c4:f2:e0:7d:ca:47:a5:01:
b9:38:50:d4:2e:ff:5c:3b:38:83:f4:da:8c:b2:08:29:56:d9:
ea:51:f5:cc:53:c7:b2:7e:12:77:a8:59:d0:80:9b:5a:97:eb:
01:15:ff:d8:79:4b:87:db:6d:b9:18:4b:ec:4a:a5:e1:29:d0:
2d:aa:63:ed:53:4f:13:4b:2c:ab:f2:16:1f:0c:f5:e7:df:65:
cf:15:87:ed:28:3c:66:22:73:2b:a4:83:01:14:b9:7b:43:4c:
0d:e0:39:03:54:6e:9e:b6:54:3b:b7:2c:2f:e0:a8:01:f2:c8:
b2:43:c5:88:1e:0a:a1:d2:9a:d9:18:28:62:8d:d2:77:58:14:
87:c2:41:10:2a:15:53:71:1e:d5:80:a9:b0:15:18:a2:51:7d:
24:c3:b9:d2:c6:4f:f2:a8:90:ff:34:51:20:55:6c:fd:95:be:
c9:7d:5b:50:9d:a6:b7:6b:96:b0:63:22:d5:6f:05:26:22:43:
46:7b:92:47:28:25:45:bb:18:40:b2:76:1f:8f:03:7c:51:66:
56:f9:db:1b:9a:43:3f:ea:ad:4c:4c:47:7e:12:c2:cf:be:14:
ce:ff:1c:0a:7e:57:76:73:f2:29:ca:7b:ea:31:65:ea:86:44:
0d:dd:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:02:48 2026 by rpki-client