Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/Iiwk2jKDW4IaNjmsgGUwYMpnKAM.roa
File: Iiwk2jKDW4IaNjmsgGUwYMpnKAM.roa (raw, json)
Hash identifier: wDkZJq8BzyqmEdB2P1wzL21xUqvQ8gUqXRFb8fOP5T0=
Subject key identifier: 22:2C:24:DA:32:83:5B:82:1A:36:39:AC:80:65:30:60:CA:67:28:03
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019B7BA5120988A1AEFA4CBE92185471F2D7
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/Iiwk2jKDW4IaNjmsgGUwYMpnKAM.roa
Signing time: Thu 01 Jan 2026 22:19:34 +0000
ROA not before: Thu 01 Jan 2026 22:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44452
IP address blocks: 185.177.8.0/22 maxlen: 22
2a0a:2b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:12:09:88:a1:ae:fa:4c:be:92:18:54:71:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Jan 1 22:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=222c24da32835b821a3639ac80653060ca672803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:c0:da:fa:3f:c3:a0:91:ad:98:b8:f2:61:
6b:ec:09:2b:5e:09:62:c2:12:02:02:f1:2f:6c:67:
b3:fa:da:b5:dd:dc:fd:be:9b:14:60:62:2a:ca:c4:
fc:5f:75:0a:12:20:bf:85:0a:24:ad:1f:9b:4c:8b:
21:17:8a:c0:87:af:39:65:ae:27:8f:9c:40:52:cd:
38:d9:65:16:7a:ee:fb:50:07:8f:99:04:5e:52:03:
21:46:a8:8f:6b:ca:a2:f0:d8:7e:cf:e9:cb:46:45:
bd:fd:11:34:a7:ea:00:1c:9e:0f:54:69:6c:65:70:
7c:78:cc:31:ef:9f:fd:ad:d4:f6:1b:ee:f8:de:33:
12:c5:2c:e4:b2:f7:67:1c:2c:58:18:d6:9c:20:df:
15:07:2e:92:03:5b:fa:ba:f1:6b:be:9e:90:a4:29:
80:52:80:39:9b:9d:4e:73:52:a0:55:67:54:4f:57:
25:98:22:7b:2e:4f:33:0c:b3:79:15:2c:93:a3:81:
18:d2:92:79:ea:f2:c5:e3:19:35:f0:16:de:b8:59:
23:73:6b:ff:e0:55:c1:bb:f3:0d:7b:87:ec:33:bb:
6a:26:a4:a0:23:fc:7c:97:ad:88:0f:0a:d0:6d:fe:
7f:2e:da:96:18:f4:41:ae:e4:cb:28:6e:ab:92:2d:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:24:DA:32:83:5B:82:1A:36:39:AC:80:65:30:60:CA:67:28:03
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/Iiwk2jKDW4IaNjmsgGUwYMpnKAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.8.0/22
IPv6:
2a0a:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
bc:83:f7:a8:81:e9:29:8f:e3:86:59:45:af:bd:80:aa:50:95:
2e:eb:cb:ec:a7:be:07:0a:4e:d3:3e:3c:9e:f3:c1:6a:d6:c5:
29:67:9c:ad:de:59:51:bb:32:47:92:5d:e1:03:e3:8e:3a:e6:
60:42:06:22:30:2d:7d:cb:3d:fe:cc:fd:d6:29:0a:96:ae:2b:
3f:fe:38:92:80:95:9a:ad:32:90:16:70:46:86:ce:bf:fc:ac:
05:1c:c4:3b:ce:6b:ad:f9:c5:47:0c:41:bd:9d:2a:6a:21:3a:
60:cb:7f:4d:9b:8c:df:fa:6c:96:b7:b5:31:17:1a:d1:89:ec:
c1:13:04:73:90:24:89:1d:16:21:90:44:f0:e4:1e:c3:cb:aa:
5e:74:db:01:de:2e:a5:a9:68:e9:4f:80:4f:dc:ff:30:94:04:
3f:14:84:e2:12:a6:36:28:45:fa:47:9c:78:1f:4d:f4:f5:f2:
e2:16:58:3b:ae:69:3c:61:de:a0:45:be:04:58:d4:f8:20:16:
6a:75:35:38:73:3f:b7:0e:16:d4:32:3f:21:05:91:59:a3:5a:
24:76:ad:75:30:5a:af:79:f1:b7:ec:fa:3c:6d:39:88:ef:74:
b0:5e:bc:90:97:58:29:7b:4e:ea:b2:ce:04:28:94:b5:9e:d8:
c5:ee:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:29 2026 by rpki-client