Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8iibH9ILz45xVEOMvZ-aP1tVpzc.roa
File: 8iibH9ILz45xVEOMvZ-aP1tVpzc.roa (raw, json)
Hash identifier: 38WIDZCsmOPtTv8kwtlRbvWIgte/PRoMz7x3Y50bw3c=
Subject key identifier: F2:28:9B:1F:D2:0B:CF:8E:71:54:43:8C:BD:9F:9A:3F:5B:55:A7:37
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019CA180ED2485AF10EB65078F50C88335C8
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8iibH9ILz45xVEOMvZ-aP1tVpzc.roa
Signing time: Fri 27 Feb 2026 23:48:26 +0000
ROA not before: Fri 27 Feb 2026 23:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.144.179.0/24 maxlen: 24
31.192.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a1:80:ed:24:85:af:10:eb:65:07:8f:50:c8:83:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Feb 27 23:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2289b1fd20bcf8e7154438cbd9f9a3f5b55a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:ee:86:e9:c5:cb:63:06:6a:81:df:5a:99:
7d:84:97:97:fe:f7:93:44:19:67:eb:e1:ac:62:02:
61:a5:a3:fc:f0:3a:fa:1c:48:33:b3:ef:e1:7b:89:
01:1d:c4:e7:b7:65:ca:c6:6b:e4:99:ae:46:75:a0:
63:f3:38:6a:aa:93:65:82:81:60:ad:1d:15:62:d7:
6b:5f:76:f5:d9:81:13:6a:bd:9d:b2:2a:d6:34:57:
f9:4e:0a:1f:0a:9d:73:4a:c3:14:11:47:98:3f:8d:
48:55:51:ea:97:ea:9c:4c:81:a3:8a:b7:06:84:ab:
19:64:cc:c8:47:40:7a:ec:ae:42:91:e9:2c:e9:af:
c8:0c:59:3d:6f:61:99:4b:bc:15:05:d7:cb:53:02:
f0:e1:bd:31:55:09:bb:af:4b:b9:e3:cd:97:90:3a:
a7:60:d3:8b:25:f1:42:45:8d:50:ef:da:d7:07:4d:
43:70:5b:9c:81:7f:42:3a:50:36:19:92:11:0e:19:
54:16:79:0e:41:3e:f4:12:2c:55:2d:2f:b4:d3:3c:
c5:3a:32:40:a1:e9:12:83:65:21:a0:ca:1d:83:c0:
73:a6:9f:5a:45:c9:7d:27:ff:f8:af:0e:8a:48:3c:
56:dd:43:37:00:6e:15:ec:84:89:f4:aa:cc:80:e8:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:9B:1F:D2:0B:CF:8E:71:54:43:8C:BD:9F:9A:3F:5B:55:A7:37
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8iibH9ILz45xVEOMvZ-aP1tVpzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.179.0/24
31.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9c:04:53:b5:06:c8:8c:4f:4a:f9:5f:cf:c7:31:2a:3e:98:
85:9d:e9:b2:ae:e0:c4:f1:0a:e1:69:44:e2:e4:2e:3f:66:17:
f9:d8:82:43:6d:7a:de:51:18:e7:5a:d3:3b:e3:af:4d:c5:f2:
1b:f4:23:76:92:aa:84:68:82:1f:4c:b6:7d:6c:99:d8:7c:3e:
52:ac:64:f0:c8:05:cf:1a:00:ec:e1:d0:68:e3:1c:e0:84:1e:
60:61:42:3c:b4:7e:65:1e:31:b0:3f:0b:93:47:be:8d:87:3f:
ec:7e:71:2c:10:cc:48:d0:c7:43:bc:d4:d8:5b:75:af:1b:e6:
04:02:d3:48:35:f2:b1:bd:6e:5d:5a:45:cd:9d:1b:b6:0c:2d:
ab:04:bd:03:8c:2f:1c:60:74:7c:71:a1:68:47:09:15:b8:cf:
c1:19:9b:8a:7b:76:37:39:cb:c0:04:c6:31:ff:f4:a2:6e:8b:
f5:9b:e2:3e:05:be:b7:7c:8e:16:33:f6:96:ea:5c:d9:7c:fb:
9f:27:20:8f:44:45:4f:5c:8a:0f:b7:8a:e0:8c:d2:5d:96:02:
ef:62:99:65:f1:d5:50:ad:59:53:36:c0:9d:06:c1:e5:93:38:
e5:40:d9:7d:70:d2:5e:d8:16:ee:df:bb:50:64:5b:6d:98:c2:
36:c2:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:15 2026 by rpki-client