Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ica9uCE38ojJotI7n-VMOuNzoog.roa
File: ica9uCE38ojJotI7n-VMOuNzoog.roa (raw, json)
Hash identifier: aclGjYE6DNQa13lxO0Fy1a5MSt2z7aDOF04ccUoU500=
Subject key identifier: 89:C6:BD:B8:21:37:F2:88:C9:A2:D2:3B:9F:E5:4C:3A:E3:73:A2:88
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A1A688B1DEAE31923B3EC4C76D995F52BA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ica9uCE38ojJotI7n-VMOuNzoog.roa
Signing time: Wed 04 Nov 2026 12:28:58 +0000
ROA not before: Wed 04 Nov 2026 12:28:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 2a12:bec5::/32 maxlen: 32
2a12:bec6::/32 maxlen: 32
2a12:bec7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:88:b1:de:ae:31:92:3b:3e:c4:c7:6d:99:5f:52:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 4 12:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89c6bdb82137f288c9a2d23b9fe54c3ae373a288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:3f:72:87:05:29:98:1d:ec:45:ab:80:24:
49:83:c3:9b:e1:38:ea:ab:55:17:a3:a3:03:7b:a7:
b6:18:23:55:7b:21:07:47:63:a1:1b:af:37:b7:22:
6a:1a:08:77:25:15:d0:41:ff:6a:70:c6:96:96:73:
3d:91:e4:af:6b:73:47:53:2b:99:7e:80:b3:46:24:
63:86:ed:59:11:46:8d:5d:f6:44:d2:74:4e:d9:cf:
f9:c9:1c:91:1c:92:ca:85:d1:db:6d:d9:92:dc:18:
7c:61:13:3a:d4:49:e4:e4:26:aa:52:ff:df:4f:90:
91:54:de:3d:ff:dd:19:57:51:85:f5:3d:6f:df:f0:
ec:56:0e:ae:83:6e:ca:eb:f9:09:7a:c8:31:a2:4b:
0c:6e:40:42:03:5a:84:b3:a1:4c:b3:da:84:66:8e:
63:0e:86:50:f4:fc:eb:62:58:a9:6f:db:70:5b:ba:
f4:85:1f:ab:56:ea:39:4a:83:93:88:7a:02:d7:ab:
f8:f0:56:9a:b9:b6:62:65:34:a5:6f:2f:03:f0:2e:
5c:b9:83:31:44:dc:a7:ab:42:e0:71:52:a1:71:3b:
03:66:24:94:5a:2f:65:96:3e:03:3b:9b:5f:26:1c:
ca:69:fb:96:cd:ea:ea:55:e0:95:97:ba:fd:67:85:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:BD:B8:21:37:F2:88:C9:A2:D2:3B:9F:E5:4C:3A:E3:73:A2:88
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ica9uCE38ojJotI7n-VMOuNzoog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec5::-2a12:bec7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b7:78:dd:35:24:e0:6d:13:19:06:7c:fd:61:10:2f:35:9d:e9:
f5:2d:c2:cd:a3:db:e5:af:94:26:b8:45:2d:08:83:ec:7a:9a:
24:6c:46:91:00:26:eb:aa:15:fd:97:44:62:28:56:0a:53:f8:
64:50:9b:4e:10:f2:61:6c:95:45:d8:e0:57:70:21:22:78:f2:
9c:78:90:d4:e0:01:55:50:76:dc:53:5e:99:4c:ea:72:2f:4c:
08:f4:da:af:a4:8b:fb:dc:21:23:d0:9a:f6:7a:c1:32:bc:e8:
ba:53:3e:f8:67:2c:23:b6:00:5b:bb:7e:92:a7:d2:d4:af:54:
5f:7f:bd:41:16:fd:a8:ea:6f:03:db:23:71:c1:8b:63:a6:ca:
21:34:2d:2e:d5:2c:17:0c:d0:45:67:2f:e2:6b:b8:03:7f:12:
85:cb:5c:a6:1e:45:f9:bd:23:72:c0:4f:96:04:31:45:99:fd:
38:b3:1e:33:82:ba:6b:8f:7b:cd:ba:af:65:b3:e2:22:be:4c:
3b:e0:3c:af:d5:81:5f:63:ce:02:f3:2f:f2:1f:50:f5:df:e5:
72:56:ad:7c:4c:93:03:76:f5:74:46:53:6f:d5:46:b3:0c:4e:
38:37:eb:b0:9f:c3:e6:5c:be:00:e0:b0:23:10:a0:8c:44:79:
e5:a7:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:58:24 2026 by rpki-client