Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iZzvOnH6dsdnUKjxMUDyC3YIGzY.roa
File: iZzvOnH6dsdnUKjxMUDyC3YIGzY.roa (raw, json)
Hash identifier: /6cT72karU2O2FFQfB3iw7UUykAgwjOIz3DsdE5bPl0=
Subject key identifier: 89:9C:EF:3A:71:FA:76:C7:67:50:A8:F1:31:40:F2:0B:76:08:1B:36
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A153E2DD31377B354914E1AADA135DF56D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iZzvOnH6dsdnUKjxMUDyC3YIGzY.roa
Signing time: Mon 19 Oct 2026 11:18:58 +0000
ROA not before: Mon 19 Oct 2026 11:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199527
IP address blocks: 83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
85.254.12.0/24 maxlen: 24
85.254.13.0/24 maxlen: 24
85.254.15.0/24 maxlen: 24
85.254.63.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
159.148.143.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
188.64.176.0/24 maxlen: 24
188.64.177.0/24 maxlen: 24
188.64.178.0/24 maxlen: 24
188.64.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:e2:dd:31:37:7b:35:49:14:e1:aa:da:13:5d:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 19 11:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=899cef3a71fa76c76750a8f13140f20b76081b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:1b:b6:a7:3f:2a:92:bc:29:58:f2:76:37:
10:5f:6f:74:74:b0:c7:0e:fb:13:d7:c4:98:f8:e0:
5a:02:26:6b:eb:3f:1a:1e:50:68:77:2c:bf:fc:fe:
bc:ae:ce:76:d4:47:2a:01:0e:ee:db:76:fb:80:eb:
0c:1d:75:32:25:2e:55:6c:4c:91:92:85:7f:68:25:
c0:91:86:28:5e:bf:3d:e8:41:60:b3:26:c4:5e:10:
03:92:f6:76:f5:ff:ad:e9:4d:f9:2d:f7:9f:fa:fe:
0c:e9:16:99:1e:eb:6f:02:8b:f3:fe:66:6d:15:94:
a4:3c:7a:7a:9c:8c:0c:b6:b7:12:5e:3c:e3:b0:36:
f0:ec:87:be:72:07:d4:07:b1:5b:37:2b:bc:bb:f4:
23:ba:af:95:f3:91:f2:28:6b:2b:0c:6a:65:d6:fe:
3c:aa:c4:2a:ca:8c:32:5a:c4:00:d1:49:55:60:a8:
0f:d4:03:86:3a:07:7c:7d:e1:f0:17:09:be:c2:03:
6e:eb:7e:80:70:83:ed:ab:12:76:f7:cb:a8:fe:bb:
e5:6e:1a:e9:48:08:a9:0d:59:cf:dc:e0:8a:06:1c:
a4:d9:f1:ec:d3:22:98:3d:5c:5d:65:00:8a:e9:a1:
e5:04:9a:75:56:31:46:f3:b7:9b:7c:36:55:48:ee:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:EF:3A:71:FA:76:C7:67:50:A8:F1:31:40:F2:0B:76:08:1B:36
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iZzvOnH6dsdnUKjxMUDyC3YIGzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.134.0/23
83.223.157.0/24
85.254.12.0/23
85.254.15.0/24
85.254.63.0/24
91.190.61.0/24
159.148.143.0/24
159.148.149.0/24
159.148.181.0/24
159.148.240.0/24
188.64.176.0/22
Signature Algorithm: sha256WithRSAEncryption
84:9f:82:35:b5:c2:53:f0:34:60:76:fb:fa:1d:e8:b1:1b:1b:
fe:f3:04:4e:19:22:f7:6e:e2:0b:b0:fe:07:86:b2:d8:55:80:
76:18:40:c0:8f:09:9c:59:52:a0:a0:06:b4:5b:66:7b:03:0d:
56:7f:3a:e3:c2:4f:0b:73:ca:65:54:7a:cf:5a:37:ce:60:c9:
71:e9:f0:1b:b1:0d:59:55:34:4b:99:d9:b0:63:a7:49:43:01:
bf:93:02:d1:5f:51:c5:a8:c5:d1:8e:9d:38:ab:ca:63:69:28:
3f:3d:a0:f7:90:da:8b:93:6f:7b:72:92:9a:32:30:a3:cb:68:
77:39:a1:02:dc:d4:00:c0:6e:af:ff:72:ad:43:f2:fa:24:97:
b7:82:1b:51:42:9f:9d:ef:c1:5d:97:8f:e2:af:10:ac:9d:ae:
9d:26:ba:c2:b8:34:30:eb:30:12:ba:d1:e6:93:55:8d:6e:18:
7a:10:b9:3a:90:fc:59:9a:3c:77:cb:82:45:9d:e0:85:08:e2:
e9:a4:4b:06:12:8f:49:20:1d:3f:88:b6:af:e7:3e:16:53:1f:
1b:ec:cf:85:08:00:ab:ad:2d:04:33:4c:9a:f0:9c:50:54:d4:
d0:ca:b8:bc:a2:d0:97:ae:d0:e8:b2:59:57:b6:57:c2:4a:7c:
b5:22:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:49:26 2026 by rpki-client