Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/ieC1NLLyKx5tco-VwoKH2BnT_8Q.roa
File: ieC1NLLyKx5tco-VwoKH2BnT_8Q.roa (raw, json)
Hash identifier: vvvqHH2JLJwMKnye94FrwZVCbXdl2s8tUEPcH0TbOBw=
Subject key identifier: 89:E0:B5:34:B2:F2:2B:1E:6D:72:8F:95:C2:82:87:D8:19:D3:FF:C4
Certificate issuer: /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial: 019B7CEDA3AA224D1263D502F3E3B3B2DDA5
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/ieC1NLLyKx5tco-VwoKH2BnT_8Q.roa
Signing time: Fri 02 Jan 2026 04:18:27 +0000
ROA not before: Fri 02 Jan 2026 04:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48653
IP address blocks: 91.209.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:a3:aa:22:4d:12:63:d5:02:f3:e3:b3:b2:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Validity
Not Before: Jan 2 04:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89e0b534b2f22b1e6d728f95c28287d819d3ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:fd:e0:28:05:4c:4c:4c:f6:ee:88:61:7e:
62:da:eb:d8:36:80:27:3d:55:8f:b3:c0:a6:91:ee:
12:b0:e7:5d:e6:c4:87:73:15:57:34:9f:4b:64:eb:
ec:76:3b:ad:d8:44:ca:ba:09:32:4a:dd:db:c2:0b:
b8:65:9b:9e:3c:71:bf:87:49:64:12:14:77:6d:e3:
d5:eb:a1:dd:9f:e0:27:22:23:6f:0e:6e:fb:83:e9:
4a:cb:7a:95:99:f4:b7:ff:d1:c1:2c:f1:d3:cc:54:
98:03:6e:a4:5c:c4:ea:5c:18:7e:53:ce:62:a3:e7:
80:b0:70:71:d4:54:e1:1e:1e:c5:07:f3:fd:ad:f3:
e6:d4:a9:c7:08:24:35:52:30:d2:67:a4:76:d9:7e:
0b:18:8c:c4:ad:49:b4:e5:a3:26:96:20:f1:4b:ae:
c9:eb:35:26:37:8b:fb:ba:f5:ef:63:4c:52:9a:a3:
cb:b3:aa:85:4b:11:fe:d0:76:f0:73:a0:0d:b8:77:
87:1b:08:49:0d:46:64:39:21:bc:a4:0b:08:a4:76:
db:08:2a:54:51:ce:f1:13:16:cb:8b:c4:2f:7c:8e:
f7:93:fb:fb:85:f5:0e:ac:33:1b:d6:09:2e:52:3a:
00:7b:4d:a0:0b:ce:bd:88:e4:5d:4c:13:f9:f1:67:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:B5:34:B2:F2:2B:1E:6D:72:8F:95:C2:82:87:D8:19:D3:FF:C4
X509v3 Authority Key Identifier:
keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/ieC1NLLyKx5tco-VwoKH2BnT_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.49.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:38:ec:05:d8:f7:05:50:0c:13:bf:90:74:8f:d7:71:c2:
0e:b4:59:45:9a:4b:91:f5:fe:98:3c:af:bd:8b:c7:5a:c2:e9:
06:bf:f6:1f:f9:e6:a1:31:7d:b7:5d:8a:89:74:02:37:c3:54:
ca:db:48:ac:85:64:8e:09:15:f0:41:c5:44:78:45:bf:6b:63:
62:22:aa:6a:8b:67:17:d8:63:5f:d0:3a:7c:07:77:69:fc:4f:
d1:11:69:8c:61:81:c3:23:39:3c:33:2f:a5:eb:d2:af:63:77:
61:55:67:2e:b4:fa:bf:e3:21:7b:c5:33:64:04:63:ee:28:da:
b5:4b:e6:22:12:6e:3b:bc:49:53:fa:7d:f6:d7:3f:f0:97:3c:
bb:bf:a4:35:19:da:90:12:39:f3:b8:7b:76:e5:4f:1c:31:48:
e6:6d:03:ec:14:20:f4:a9:17:57:fe:23:95:c3:c5:3d:36:fd:
56:15:bc:55:f9:8d:87:31:29:ec:09:bc:28:97:cb:7f:29:89:
39:98:09:c3:b2:fb:c9:42:0e:24:e0:c8:0a:06:9a:70:5d:73:
48:5b:74:9f:e6:77:a6:da:51:1c:13:f4:e5:ea:99:4e:d2:ba:
87:1d:2f:3b:19:a7:a4:77:98:56:8c:a2:4b:38:8c:c1:3d:ed:
c9:30:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:18:03 2026 by rpki-client