Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa
File: Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa (raw, json)
Hash identifier: gpvXxQg5tH99OjYIfkw0uUChypTbhupMYAjwAZjaKkk=
Subject key identifier: 22:39:FC:F8:FE:93:18:32:03:14:D9:50:07:C0:E6:9B:18:0F:2F:52
Certificate issuer: /CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
Certificate serial: 019E875EA4641A6377E865DC9FBD9632BA9E
Authority key identifier: EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa
Signing time: Tue 02 Jun 2026 08:06:26 +0000
ROA not before: Tue 02 Jun 2026 08:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 5.183.79.0/24 maxlen: 24
45.67.13.0/24 maxlen: 24
91.209.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:5e:a4:64:1a:63:77:e8:65:dc:9f:bd:96:32:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
Validity
Not Before: Jun 2 08:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2239fcf8fe9318320314d95007c0e69b180f2f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:12:41:d4:a4:9d:cd:f0:a1:28:12:86:f0:
a8:13:83:bd:42:01:7f:80:25:6c:e1:18:5e:9b:db:
44:5d:e3:47:25:42:6e:e7:f3:cf:4e:b8:62:04:54:
36:5a:b0:00:3c:58:d8:8c:76:73:d7:9f:c6:e0:38:
92:fc:ea:59:56:8d:e6:ba:98:3b:b0:89:70:25:dc:
c4:0b:25:84:80:db:e1:94:2d:73:f2:b2:b5:42:66:
54:68:d4:d0:bc:14:eb:a6:8f:a3:06:a8:ac:10:b1:
c4:c7:27:39:7c:6d:f1:b7:7f:1a:01:5a:36:66:7f:
4d:ab:da:83:30:7b:c0:a3:fd:1b:8e:44:01:df:44:
43:80:87:4e:71:f9:6d:b4:06:2f:04:d9:f6:c7:96:
d0:97:23:80:cd:33:3d:21:f1:d7:01:4f:7e:2d:05:
9e:eb:36:34:f1:f9:4b:82:ac:c1:de:a1:d3:e4:0c:
9d:26:ce:34:7d:b0:61:91:c1:9e:06:c2:57:b7:84:
ba:d6:86:cb:0c:31:a4:07:34:a6:8f:ce:0b:f6:3f:
67:bc:3c:81:63:51:a5:ec:dc:ba:70:7d:79:01:47:
99:d4:9f:be:b5:98:ac:60:58:ac:ab:ce:40:c8:8b:
f8:1f:8e:0b:b7:53:77:41:9b:d2:28:ab:a3:f8:ff:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:FC:F8:FE:93:18:32:03:14:D9:50:07:C0:E6:9B:18:0F:2F:52
X509v3 Authority Key Identifier:
keyid:EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.79.0/24
45.67.13.0/24
91.209.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2b:68:c4:3d:ab:08:0c:de:30:15:22:50:dc:1e:e5:a5:82:
f2:80:7b:74:80:e8:78:56:4d:57:8c:4e:2e:97:06:da:70:d4:
3c:16:eb:e9:5e:a6:5d:f6:4f:83:7e:5c:af:e8:87:41:91:ff:
63:3d:50:1d:ed:d5:e8:3b:b0:06:60:ef:e0:97:54:41:6f:f0:
c2:a2:b1:63:bc:e2:58:e1:c8:20:b9:48:db:f5:81:51:79:db:
25:06:a4:f7:9b:a5:90:d5:e3:be:74:f9:72:ce:85:e6:6e:76:
8c:6a:7b:9b:cf:08:b1:b6:ce:87:bd:08:3e:6a:f3:ff:b5:e5:
14:80:e2:c6:0e:b7:9f:8d:87:3b:09:0c:8d:ac:61:ef:62:24:
78:6b:a3:25:04:e9:32:63:03:37:de:69:a9:5c:18:b3:09:42:
01:b2:0f:c7:e0:ea:26:15:7b:a2:4d:cc:0e:70:12:d6:91:6f:
c8:73:f3:b2:40:96:19:b5:f4:a6:b3:2b:db:1b:d1:a0:3d:b1:
16:55:00:87:55:e1:6f:16:b0:17:3f:5c:d9:37:f8:07:2b:16:
04:9d:b1:fe:c0:77:b7:1f:93:27:92:61:e9:3f:c1:4e:67:32:
c0:79:23:81:62:eb:7b:9c:32:19:65:ff:bf:df:68:74:dd:3f:
15:7a:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:01 2026 by rpki-client