Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/I9bUjs_WyDHQNZpk7Nuatvrcz0I.roa
File: I9bUjs_WyDHQNZpk7Nuatvrcz0I.roa (raw, json)
Hash identifier: k05gbe5peZwSMmhQKob6xOpxfqygYsGePFzjNLbY8GY=
Subject key identifier: 23:D6:D4:8E:CF:D6:C8:31:D0:35:9A:64:EC:DB:9A:B6:FA:DC:CF:42
Certificate issuer: /CN=10fdbe14552f0c38ba833e638a3077aafba4e6db
Certificate serial: 019FA36FB2B33B30EF7E4A8810253F05C137
Authority key identifier: 10:FD:BE:14:55:2F:0C:38:BA:83:3E:63:8A:30:77:AA:FB:A4:E6:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/I9bUjs_WyDHQNZpk7Nuatvrcz0I.roa
Signing time: Mon 27 Jul 2026 11:57:14 +0000
ROA not before: Mon 27 Jul 2026 11:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212932
IP address blocks: 91.233.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:6f:b2:b3:3b:30:ef:7e:4a:88:10:25:3f:05:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fdbe14552f0c38ba833e638a3077aafba4e6db
Validity
Not Before: Jul 27 11:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23d6d48ecfd6c831d0359a64ecdb9ab6fadccf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:4d:ce:05:78:22:59:29:8c:15:3e:13:ff:
97:c8:48:d2:5b:40:ec:e4:36:53:71:18:c9:d3:a9:
7e:6e:18:e1:7f:77:d4:6f:5b:07:f0:1a:95:5a:bc:
eb:41:46:82:03:69:04:cf:ae:3d:91:b2:fc:57:eb:
9f:75:7f:47:80:65:5b:a5:3c:d1:df:84:69:5d:67:
28:f5:db:8c:43:eb:e8:0e:22:a9:b7:88:1c:7c:1b:
be:8d:06:dc:0c:b6:89:3a:cc:70:22:f4:16:ad:f4:
c8:08:40:e4:95:d8:c2:54:0f:83:60:3f:e0:e4:4c:
f2:a5:2e:fe:fc:e0:96:3d:3c:a0:7e:49:83:ac:16:
9e:74:91:b5:82:44:f8:e7:b9:52:6a:37:f8:42:c8:
63:ac:a6:72:93:4c:70:1e:4e:7e:f3:7d:9f:8f:f2:
ec:62:7c:49:11:e3:30:52:e1:d6:25:6e:78:9e:65:
d0:f3:9c:e0:bc:5f:44:e0:09:98:ad:22:1e:87:29:
4f:35:74:cc:1e:ea:8a:b3:fa:2f:ba:e5:c9:7f:31:
8f:24:2a:f2:dd:88:a7:38:d2:e5:51:9c:de:f3:16:
b2:9c:86:36:25:a5:f1:24:20:4c:05:ad:e4:2f:4f:
f1:58:ff:88:86:be:36:e1:ba:42:60:5d:75:d7:78:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D6:D4:8E:CF:D6:C8:31:D0:35:9A:64:EC:DB:9A:B6:FA:DC:CF:42
X509v3 Authority Key Identifier:
keyid:10:FD:BE:14:55:2F:0C:38:BA:83:3E:63:8A:30:77:AA:FB:A4:E6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/I9bUjs_WyDHQNZpk7Nuatvrcz0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.196.0/24
Signature Algorithm: sha256WithRSAEncryption
06:87:dc:fa:50:40:97:5f:cb:e6:34:c4:a8:19:55:e5:c4:4b:
30:55:4b:d7:f8:92:9c:45:69:89:0f:9f:9d:59:e6:71:27:53:
f8:1f:1f:b7:db:e6:6c:a4:b1:8d:12:71:16:10:ea:10:b1:e1:
4a:45:df:2d:cb:eb:35:a2:15:6c:ed:0b:cb:0a:f9:08:7a:d4:
91:fd:ef:27:e3:3e:a6:a9:97:6e:6e:98:4b:d7:76:c5:7f:db:
8d:7f:7c:17:e7:62:2b:4f:14:d9:35:23:cc:c4:94:82:e9:64:
a5:6f:53:a7:0c:85:1c:3b:f7:e0:70:65:54:1c:7f:ea:4b:50:
f3:76:79:55:20:32:63:1a:69:93:11:a1:0e:52:4e:c5:4b:24:
ae:65:61:e5:ca:31:43:a8:c3:db:29:72:53:1b:71:6a:41:62:
26:55:1a:35:70:e7:2c:d3:82:8c:d7:84:6b:d9:22:49:f2:c3:
e9:e5:ab:ea:c9:aa:78:05:26:43:3f:86:6f:db:bc:01:3e:ca:
21:fc:b2:df:95:28:e2:d4:41:d0:c5:8f:6a:b5:06:cf:e9:77:
6e:e7:8f:08:bc:b6:32:5f:37:d6:94:e5:7d:44:87:ac:69:72:
f4:f7:9b:66:7e:9b:12:ed:0d:22:5b:36:b2:af:4e:6b:37:e8:
3f:ee:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:42:05 2026 by rpki-client