Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1eR5bBQV_6E1BNcaxIgVIa5v0B0.roa
File: 1eR5bBQV_6E1BNcaxIgVIa5v0B0.roa (raw, json)
Hash identifier: Snf5CCF2NUi80dfU1Q/KA5I8R602vRrRG+CyAPZvg+k=
Subject key identifier: D5:E4:79:6C:14:15:FF:A1:35:04:D7:1A:C4:88:15:21:AE:6F:D0:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F9301C8CED7E1B09C90419C9FA017E076
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1eR5bBQV_6E1BNcaxIgVIa5v0B0.roa
Signing time: Fri 24 Jul 2026 07:23:15 +0000
ROA not before: Fri 24 Jul 2026 07:23:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:01:c8:ce:d7:e1:b0:9c:90:41:9c:9f:a0:17:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 07:23:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5e4796c1415ffa13504d71ac4881521ae6fd01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:35:47:f6:4d:7a:c1:77:f4:15:64:6e:45:
b7:40:98:13:27:f3:3c:17:23:f0:68:d3:c0:6d:2a:
61:60:7a:6a:28:54:cf:57:ed:80:57:97:c8:c3:bf:
1c:c8:0f:26:eb:4c:81:26:bf:da:da:82:03:1d:da:
9c:86:d5:fc:51:6b:64:57:1d:9a:db:c1:f3:55:4b:
89:6b:11:80:09:44:d5:56:9e:1c:ad:9a:45:dd:bf:
b2:07:c7:6f:40:c9:98:4f:06:3a:f0:81:c3:63:7e:
7a:cf:18:c7:d0:b0:2b:8c:e9:f7:36:7d:96:79:71:
80:ce:aa:4d:56:55:32:9e:c0:c7:66:f9:b1:ce:98:
63:64:62:be:e9:8c:5a:f3:c7:4b:77:b1:35:c5:f1:
95:38:5e:b7:cd:b8:87:c2:31:63:d4:54:08:2d:ac:
75:b3:8d:d1:a6:a5:e0:ac:d0:ec:69:4c:dc:c8:57:
83:44:91:79:c8:dc:b8:90:88:dd:56:ce:71:7e:18:
c1:b0:c5:a8:aa:42:36:2f:7d:b2:62:72:6b:c0:b5:
c8:c2:41:b6:81:05:ea:10:f6:26:8b:03:a1:49:32:
c3:00:96:fa:f1:ff:16:20:81:ad:42:f0:d2:b6:97:
70:47:05:91:72:36:67:93:36:50:f2:86:60:53:aa:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:79:6C:14:15:FF:A1:35:04:D7:1A:C4:88:15:21:AE:6F:D0:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1eR5bBQV_6E1BNcaxIgVIa5v0B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
87.121.86.0/24
87.121.221.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c4:cf:4b:d8:4c:47:ec:67:61:96:4c:fd:48:a4:9b:a0:80:
4d:07:53:46:c5:55:03:58:49:2e:68:78:81:fc:f5:7c:e6:49:
8a:13:43:f5:09:28:b3:3e:fb:e5:1a:8d:40:d2:c6:3d:62:57:
d4:26:d5:6a:03:b5:4f:e7:ec:f2:4c:87:72:e9:f4:a2:fe:ca:
0b:3f:95:e9:8d:a6:04:b5:ae:93:92:05:60:43:82:b6:3e:66:
ba:3a:56:43:9e:74:91:bc:f7:7f:72:6f:80:d0:e7:7d:f2:b9:
a9:c1:0b:f6:4c:84:3b:7f:2a:81:9b:f0:4c:bc:6f:db:dd:00:
6a:a2:b3:1e:83:1f:ba:f5:ee:82:77:b7:63:cf:8c:73:c9:32:
d1:50:67:4b:76:f3:45:42:27:db:e2:d3:2c:13:9c:0b:5f:2c:
d6:b8:f6:e3:5c:e4:87:ec:0e:41:f3:20:54:51:02:f6:c2:0d:
5e:8e:01:29:02:bc:42:fc:a4:22:11:da:e2:3d:82:e0:29:da:
f0:a0:86:93:fd:2f:e7:2d:a4:e4:5a:62:d1:62:29:08:11:6c:
21:e3:f0:a5:2e:39:bb:9c:ed:7a:28:7f:d2:0a:22:6c:6a:f9:
2d:5e:90:d0:c8:dd:5c:74:8d:32:76:dc:9c:08:64:ac:e5:d9:
14:bb:05:e3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ+TAcjO1+GwnJBBnJ+gF+B2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNzI0MDcyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWU0Nzk2YzE0MTVmZmExMzUwNGQ3MWFjNDg4MTUyMWFlNmZkMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDA1R/ZNesF39BVkbkW3QJgTJ/M8
FyPwaNPAbSphYHpqKFTPV+2AV5fIw78cyA8m60yBJr/a2oIDHdqchtX8UWtkVx2a
28HzVUuJaxGACUTVVp4crZpF3b+yB8dvQMmYTwY68IHDY356zxjH0LArjOn3Nn2W
eXGAzqpNVlUynsDHZvmxzphjZGK+6Yxa88dLd7E1xfGVOF63zbiHwjFj1FQILax1
s43RpqXgrNDsaUzcyFeDRJF5yNy4kIjdVs5xfhjBsMWoqkI2L32yYnJrwLXIwkG2
gQXqEPYmiwOhSTLDAJb68f8WIIGtQvDStpdwRwWRcjZnkzZQ8oZgU6osiQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNXkeWwUFf+hNQTXGsSIFSGub9AdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMWVSNWJCUVZfNkUxQk5jYXhJZ1ZJYTV2MEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVhYAwQA
V3lWAwQAV3ndAwQAsH3+AwQAufyxAwQAwjD6MA0GCSqGSIb3DQEBCwUAA4IBAQAL
xM9L2ExH7Gdhlkz9SKSboIBNB1NGxVUDWEkuaHiB/PV85kmKE0P1CSizPvvlGo1A
0sY9YlfUJtVqA7VP5+zyTIdy6fSi/soLP5XpjaYEta6TkgVgQ4K2Pma6OlZDnnSR
vPd/cm+A0Od98rmpwQv2TIQ7fyqBm/BMvG/b3QBqorMegx+69e6Cd7djz4xzyTLR
UGdLdvNFQifb4tMsE5wLXyzWuPbjXOSH7A5B8yBUUQL2wg1ejgEpArxC/KQiEdri
PYLgKdrwoIaT/S/nLaTkWmLRYikIEWwh4/ClLjm7nO16KH/SCiJsavktXpDQyN1c
dI0ydtycCGSs5dkUuwXj
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:45 2026 by rpki-client