Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/iO87tVaqBHQbaJyf-L6RWAyKhsI.roa
File: iO87tVaqBHQbaJyf-L6RWAyKhsI.roa (raw, json)
Hash identifier: aX9KA5fEEcTue19WBEH78kPWB2BBeDX/IvXWW3HldXM=
Subject key identifier: 88:EF:3B:B5:56:AA:04:74:1B:68:9C:9F:F8:BE:91:58:0C:8A:86:C2
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FA7D3FA83782797E494B9837659BD9670
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/iO87tVaqBHQbaJyf-L6RWAyKhsI.roa
Signing time: Tue 28 Jul 2026 08:25:14 +0000
ROA not before: Tue 28 Jul 2026 08:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:d3:fa:83:78:27:97:e4:94:b9:83:76:59:bd:96:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 28 08:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88ef3bb556aa04741b689c9ff8be91580c8a86c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:3f:e6:41:66:fa:6c:e0:97:d6:a0:aa:6d:
54:8b:98:f8:a5:93:4b:75:c1:3c:0c:65:0d:d7:e5:
d5:28:71:7e:94:2a:01:64:69:52:17:fa:0c:bc:02:
3d:25:e3:c0:d7:f2:5a:89:11:1d:96:d3:78:7c:ab:
13:44:a8:ab:60:3a:c7:53:c6:27:58:74:16:ab:35:
09:0f:c0:f8:78:93:ce:fd:38:b6:93:1f:11:7b:91:
dd:64:b4:21:93:2e:58:44:14:d6:ef:d1:67:f6:fe:
7e:19:03:94:47:53:41:6b:b5:2e:fa:b1:96:f8:90:
f4:71:90:d2:76:76:ea:ce:57:3b:e2:26:f2:04:9f:
21:88:54:4a:64:12:dc:c1:33:c8:ba:5e:7c:a5:6d:
ee:5e:36:1f:2a:24:a5:91:56:ec:b8:0a:42:fc:cf:
48:04:46:8d:a6:d2:c1:b8:fa:45:ca:8d:6b:b6:03:
70:07:60:6e:45:e8:6b:50:36:20:92:2e:01:a1:52:
11:a1:6d:48:af:23:66:93:f8:fb:ea:f4:41:1c:27:
cb:96:2a:71:85:11:3c:06:0c:c2:a6:5f:bc:54:61:
77:2a:2e:8c:e3:da:ef:7d:ca:64:c7:38:bc:6b:da:
30:73:7e:14:39:00:65:ba:10:cd:5e:04:b1:71:9e:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:3B:B5:56:AA:04:74:1B:68:9C:9F:F8:BE:91:58:0C:8A:86:C2
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/iO87tVaqBHQbaJyf-L6RWAyKhsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a2:46:80:ce:fc:e3:7d:d1:d8:f3:ce:ea:68:f1:93:10:1b:
3d:63:0d:27:e3:d1:21:ed:ea:93:08:28:18:5a:42:d2:e1:57:
1d:fd:b0:56:0a:36:e2:a8:e5:ea:b5:ef:36:83:bc:23:2b:68:
e8:ff:1b:0f:55:6d:d0:a2:50:ba:c9:a3:54:24:9b:ef:e2:b4:
bf:0f:84:9e:db:bf:91:72:a0:ee:92:81:e7:6f:cf:7a:8f:11:
65:75:4a:17:6e:04:d0:33:8f:5c:4c:e8:c1:1d:df:81:64:9d:
69:29:8b:fe:3a:37:62:62:51:c1:02:d2:0d:e7:29:27:13:4f:
55:3f:83:e2:73:3e:00:33:6c:e5:48:03:d4:d9:5f:72:c6:36:
8e:ee:c6:6d:5d:6e:c2:1f:8d:b2:bf:4d:a7:49:81:a3:8b:c7:
8d:b5:ae:87:72:45:20:5b:97:97:ef:bc:da:db:c4:77:1d:a1:
77:e8:0c:f2:36:93:52:2b:24:52:9f:b8:02:c0:43:80:06:fb:
b6:81:d5:3b:ba:36:db:d2:6a:6f:e0:3d:1c:16:3c:d1:0d:5a:
b4:f8:4d:a4:88:98:02:b3:9d:66:98:ad:09:13:8f:9c:41:cb:
8f:06:12:a7:1e:9b:6d:1f:63:40:e6:53:60:4e:9c:90:9e:ce:
6c:ff:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:17 2026 by rpki-client