Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iUtKIi1XJT_MCfUYV_w7IoGi_gQ.roa
File: iUtKIi1XJT_MCfUYV_w7IoGi_gQ.roa (raw, json)
Hash identifier: R4CqP9aCEI1fJh73njBMX77irUSoH6pyTxqvettEizQ=
Subject key identifier: 89:4B:4A:22:2D:57:25:3F:CC:09:F5:18:57:FC:3B:22:81:A2:FE:04
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E6B2BD5D88B3C60F6EAA249EA474166BD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iUtKIi1XJT_MCfUYV_w7IoGi_gQ.roa
Signing time: Wed 27 May 2026 20:41:35 +0000
ROA not before: Wed 27 May 2026 20:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:2b:d5:d8:8b:3c:60:f6:ea:a2:49:ea:47:41:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 27 20:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=894b4a222d57253fcc09f51857fc3b2281a2fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:95:30:ce:c7:a1:20:b9:7b:07:e0:77:6f:
cb:86:97:db:9a:7d:2c:dc:be:b0:bb:4c:6b:40:50:
97:e3:0a:45:13:5d:33:04:ee:6f:c8:eb:0c:17:29:
c3:ff:d9:cc:ff:84:19:1d:0c:a1:91:1b:b1:78:59:
5b:6a:10:0e:58:53:df:ae:35:2a:3c:80:ee:78:45:
38:ca:f4:94:89:ae:c6:00:6f:f8:64:ca:ed:cc:4e:
15:f5:c3:1b:48:20:24:f8:ef:f1:2b:ba:90:dd:06:
15:b5:54:bf:41:15:f9:36:a4:e9:36:4e:09:2e:ed:
92:6b:a8:57:43:a6:cf:bc:41:f5:1b:33:e5:8a:80:
97:5e:db:c7:65:6f:c6:d7:c9:21:00:94:e7:e0:cf:
95:da:d4:37:b1:71:2a:7f:a0:d9:c6:02:d3:f2:f2:
2d:92:60:2d:b0:6d:bf:8b:8f:88:a4:b7:65:36:db:
6b:13:82:8e:29:91:3e:f2:93:36:88:27:67:bc:94:
c0:1d:9a:a2:84:99:68:3d:14:42:29:03:2d:89:24:
86:41:b5:a2:9c:9b:89:8e:ed:67:b2:bf:75:d3:e8:
ec:f7:d9:6e:8e:9e:26:cb:60:2a:1c:be:4c:99:7a:
e7:74:2b:37:21:ee:12:f6:93:e0:64:4a:7b:05:e0:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:4A:22:2D:57:25:3F:CC:09:F5:18:57:FC:3B:22:81:A2:FE:04
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iUtKIi1XJT_MCfUYV_w7IoGi_gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
56:aa:92:fb:8d:c3:45:ed:64:66:7f:f3:29:02:79:bf:d7:84:
66:d3:5f:78:21:ee:df:e5:ed:60:c6:05:a8:b7:d6:86:79:c7:
00:5d:ae:5b:3e:c1:ba:62:f4:74:e4:18:1d:19:b0:43:cb:8e:
00:b7:6e:43:d1:6f:63:c1:ff:99:2e:2a:51:00:1e:59:44:f8:
ec:38:54:e5:d4:86:a0:8d:4e:e8:8e:ae:be:62:59:64:6b:f9:
ed:45:01:fb:3d:16:cd:7a:79:02:0d:ba:8b:ee:57:69:b5:01:
1c:1f:3d:43:80:63:f2:5a:3d:b0:95:bb:34:c2:2e:87:f6:45:
66:c5:c9:a8:f4:0c:aa:67:6d:1e:97:50:d7:6e:08:9b:44:ae:
10:80:42:bc:47:6d:51:74:f4:f2:e4:5c:c5:13:97:99:52:5a:
9b:c3:19:7b:36:bc:15:3d:83:9e:d2:f2:c6:a2:2d:93:4b:ba:
c7:88:ce:4d:23:73:42:1d:1a:67:23:f0:df:04:43:0c:25:4b:
93:16:b9:df:2a:0d:c5:cb:ec:38:07:58:f5:87:f7:f3:c6:84:
90:81:e9:a8:f7:d7:30:77:f0:8f:45:1a:af:81:98:45:6b:1b:
5b:ec:27:9c:9f:52:fa:4f:d1:e6:51:67:b4:b3:ba:4b:c6:39:
3e:47:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:51 2026 by rpki-client