Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1v_iWg3YMAx7hhUAW46GLb0uKD0.roa
File: 1v_iWg3YMAx7hhUAW46GLb0uKD0.roa (raw, json)
Hash identifier: 2Mxt6YymArjq45UUnAnylXG8/aKCAN19A+8aVgt0+1M=
Subject key identifier: D6:FF:E2:5A:0D:D8:30:0C:7B:86:15:00:5B:8E:86:2D:BD:2E:28:3D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01A0A94FC5AC151FDAA87244670A9D80378F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1v_iWg3YMAx7hhUAW46GLb0uKD0.roa
Signing time: Wed 16 Sep 2026 08:22:52 +0000
ROA not before: Wed 16 Sep 2026 08:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218660
IP address blocks: 83.228.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:4f:c5:ac:15:1f:da:a8:72:44:67:0a:9d:80:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Sep 16 08:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6ffe25a0dd8300c7b8615005b8e862dbd2e283d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:21:e1:25:75:dd:cd:e5:ef:42:52:f0:24:
0a:41:b6:cc:fb:29:13:25:3c:8e:43:f4:5c:26:a5:
0b:ed:82:97:b0:f0:02:94:9e:3c:42:c2:97:54:62:
59:b7:a6:36:12:ec:c7:d0:9c:eb:4b:49:c2:e0:32:
59:7b:23:68:18:0e:fb:e9:70:c9:95:e7:1a:e4:c6:
7a:18:ea:33:99:d1:7b:1f:4f:3f:81:b7:d3:dc:c4:
a6:37:12:c0:b6:7e:6b:b5:71:48:d0:f0:2e:80:bf:
04:cf:2a:26:9d:da:fa:48:22:19:9e:b0:03:2f:66:
65:c4:82:fa:05:df:e3:b5:af:a9:65:a1:14:1f:bf:
e7:8e:fb:3a:c6:f7:aa:c3:f2:b0:37:44:fc:5e:20:
08:9f:c8:ab:3e:d4:5e:02:fd:2c:54:1a:a4:50:18:
48:ea:8e:b5:08:0c:1d:29:5d:67:e9:c7:bf:aa:9a:
ae:7a:23:74:58:6b:96:95:63:c6:73:ec:27:82:0e:
45:ef:5c:bf:c4:e1:19:64:cd:17:1d:22:b6:78:a5:
26:8a:37:bb:a8:ce:f0:58:d2:9f:f9:24:cd:3f:23:
9d:5f:f2:29:8a:df:2f:c9:53:3a:64:6f:5f:1a:ea:
3d:c0:4a:ea:b9:bd:71:f2:0a:96:00:a5:99:f5:74:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:E2:5A:0D:D8:30:0C:7B:86:15:00:5B:8E:86:2D:BD:2E:28:3D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1v_iWg3YMAx7hhUAW46GLb0uKD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.103.0/24
Signature Algorithm: sha256WithRSAEncryption
99:29:34:ff:44:77:38:e3:c1:5d:50:df:47:7c:a7:45:51:a6:
99:29:a3:36:e1:77:fe:9d:b1:b1:b8:ef:d9:3d:af:90:2c:f3:
8e:c2:b4:20:34:86:2c:1d:4d:64:a9:5a:d6:3f:13:fc:cc:f0:
e7:7c:e9:6b:1c:c7:f0:1c:d2:ec:cf:1c:05:11:a3:79:8b:1e:
6b:f9:90:96:2c:8b:b1:50:38:0f:de:3f:b3:d1:b0:0c:d9:85:
f9:aa:7d:ba:0c:86:6b:92:09:2b:51:62:2a:43:28:46:95:c5:
1d:e7:c0:cc:67:02:d5:a0:b0:38:6b:6b:ac:8f:fb:a3:7d:8c:
c1:6d:d9:9d:e1:99:ef:05:5b:6e:ec:4d:7a:0f:72:77:4b:44:
28:7e:61:23:df:e9:19:a3:f1:ef:74:7f:1e:29:76:11:1c:41:
de:3e:fd:68:29:9c:4e:73:9b:e5:e6:6d:09:e0:02:cb:0a:ff:
40:3a:30:a6:39:b0:b0:28:c5:c3:9c:71:d6:60:e3:7d:2f:ec:
ea:f0:59:bf:64:e8:31:04:20:b5:aa:07:b0:3a:79:1a:6c:6c:
16:97:07:4e:27:4d:ae:37:6a:9e:67:ee:4e:cd:e9:7a:52:1e:
02:7f:3b:ca:87:70:c2:0f:45:1f:42:c2:64:c7:a2:97:b2:d9:
14:fd:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:49:03 2026 by rpki-client