Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/I-gYLpV-BBY25Tuh_tLWkflSCbE.roa
File: I-gYLpV-BBY25Tuh_tLWkflSCbE.roa (raw, json)
Hash identifier: bNMI/pphMMD6ofbgzIN/kdCqC5aENCj7lwxKpHYdvSs=
Subject key identifier: 23:E8:18:2E:95:7E:04:16:36:E5:3B:A1:FE:D2:D6:91:F9:52:09:B1
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0A550BEAE527ECB4DF2AD1C36448EBBBE
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/I-gYLpV-BBY25Tuh_tLWkflSCbE.roa
Signing time: Tue 15 Sep 2026 13:45:27 +0000
ROA not before: Tue 15 Sep 2026 13:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 80.86.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:50:be:ae:52:7e:cb:4d:f2:ad:1c:36:44:8e:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 15 13:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23e8182e957e041636e53ba1fed2d691f95209b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:b0:6e:e5:bf:cf:9f:3c:95:dd:9c:12:8e:
f6:a2:1f:ea:d3:10:96:eb:4c:ce:a0:45:66:f9:a6:
b9:71:d7:5f:e6:28:6c:1d:17:14:5e:aa:78:d4:70:
be:8a:e9:4e:e7:3f:cd:a9:25:48:72:2a:de:9a:a3:
55:34:bb:68:cb:ef:62:f3:23:d0:61:b4:94:c1:dd:
86:08:7e:53:e8:10:6b:91:0b:73:f1:90:17:17:32:
c0:b7:31:fd:b3:86:cc:02:a3:8e:c8:59:2d:ab:54:
50:00:31:e2:08:4f:47:00:75:0b:71:76:66:70:90:
4e:e2:76:f1:84:b2:5f:e8:8b:d4:a5:88:bd:51:25:
6a:3e:15:b8:c1:c5:65:02:0b:e2:a0:d4:8f:67:a0:
6a:72:13:1e:0c:26:15:84:02:8e:c9:d8:e9:a0:9a:
92:6a:4f:43:b7:e9:76:37:3f:f0:31:a4:c4:6e:a6:
78:1f:bd:d5:0f:6e:94:e3:bd:9c:2c:c7:3c:9a:b0:
f0:8f:f1:42:d1:0e:74:b1:5c:40:b9:10:6f:d3:16:
93:25:ad:74:68:8c:3b:9d:58:1c:06:5c:2c:2d:ec:
fd:e9:52:a5:e0:67:39:06:a8:fc:be:47:97:31:6a:
a4:02:fd:b0:9e:0a:75:64:68:f5:50:2f:4a:07:f0:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:18:2E:95:7E:04:16:36:E5:3B:A1:FE:D2:D6:91:F9:52:09:B1
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/I-gYLpV-BBY25Tuh_tLWkflSCbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.213.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2f:cf:d4:cd:ac:05:ac:29:a6:a3:32:ab:be:7b:ea:2a:58:
ab:b5:45:60:f1:bf:37:6b:14:b3:de:fa:72:51:84:0e:16:25:
e0:84:12:10:14:20:38:cc:75:1e:f8:db:6a:96:2e:7d:9a:fc:
c9:96:eb:88:b3:56:aa:a7:b5:85:7f:e2:b3:a6:7b:21:79:76:
96:4d:bb:c7:e4:63:9b:60:66:b1:0b:06:10:67:02:30:3d:98:
a1:3c:2b:87:5b:3b:e2:28:85:27:f8:db:05:13:c9:3e:81:c2:
00:e2:94:db:96:04:f7:9a:c0:18:f3:d6:85:f9:14:f0:9a:5a:
75:f6:84:f9:5f:6d:d3:53:8b:bc:df:e0:d4:ca:83:9d:5c:08:
97:93:c2:a5:fa:b8:e7:e0:15:f1:a8:4d:67:6c:39:ac:d5:31:
c0:4a:e1:f1:63:69:32:8f:aa:74:4f:db:6b:07:5a:3a:cb:26:
ef:14:82:2e:ad:49:98:81:6e:ac:5c:46:7c:ab:2c:bb:c1:d3:
c8:be:7f:e5:2c:85:28:c4:68:24:cb:33:96:34:70:e0:8e:cc:
9e:bf:37:9d:a2:4b:6c:10:f6:c5:bc:00:49:e6:1e:f2:0b:72:
b4:c1:af:71:35:88:f5:90:4a:f4:03:de:75:03:65:b0:d7:f2:
1d:11:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:30 2026 by rpki-client