Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/I0ycopSi6_q86tsS_2ZsGMaSE7E.roa
File: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (raw, json)
Hash identifier: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=
Subject key identifier: 23:4C:9C:A2:94:A2:EB:FA:BC:EA:DB:12:FF:66:6C:18:C6:92:13:B1
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019F338B20ADC88C85EA792CD267F00A4A0B
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/I0ycopSi6_q86tsS_2ZsGMaSE7E.roa
Signing time: Sun 05 Jul 2026 18:29:43 +0000
ROA not before: Sun 05 Jul 2026 18:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 5.182.103.0/24 maxlen: 24
45.157.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:8b:20:ad:c8:8c:85:ea:79:2c:d2:67:f0:0a:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jul 5 18:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=234c9ca294a2ebfabceadb12ff666c18c69213b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:52:47:8d:c7:f6:81:98:6f:ab:c0:9f:44:
fe:b8:bf:3a:8e:42:16:a8:25:99:b6:a8:8e:f3:a2:
15:79:7f:c3:93:56:59:ba:a6:08:76:ca:36:87:13:
15:0a:d4:e1:d5:85:ea:35:f7:6a:38:68:cd:b9:6c:
35:b0:dd:5d:f1:10:d0:45:7d:86:e9:61:0d:43:b9:
6a:eb:c0:fc:b0:91:b5:ad:03:6f:66:1f:d6:e0:18:
ce:87:ff:c8:f0:1c:02:b6:41:77:cd:83:50:0c:96:
f6:2d:c5:88:8d:37:b2:96:a0:c5:7e:0a:c6:9a:0c:
7c:35:d6:84:88:61:33:ba:e0:ec:b0:98:29:83:b9:
23:e5:44:6f:1e:1f:6d:b4:a3:93:d2:1b:d2:aa:48:
9d:83:02:15:64:83:a4:7f:e8:a0:90:8a:38:10:11:
bc:04:81:65:0c:1c:32:20:7a:0b:24:67:ad:6d:d4:
0f:75:20:f8:00:cf:3e:57:10:4a:4f:7d:43:c4:00:
a9:7e:f4:61:6a:54:df:0f:fb:05:34:40:95:af:fd:
5b:e4:dc:cb:11:de:53:0b:17:b8:32:ba:0c:79:f9:
28:9e:9d:a1:d0:c2:9c:53:23:c3:d7:f7:48:20:48:
ae:3f:cd:39:10:37:a7:cc:5b:08:6b:a1:51:37:44:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:9C:A2:94:A2:EB:FA:BC:EA:DB:12:FF:66:6C:18:C6:92:13:B1
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/I0ycopSi6_q86tsS_2ZsGMaSE7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.103.0/24
45.157.72.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:3a:dc:47:2f:00:72:27:92:4d:17:1e:0f:2d:4a:64:3c:f6:
c5:41:bf:68:03:75:f9:59:95:88:df:9c:00:17:c3:a9:72:a6:
23:0f:f9:e8:7b:b5:9c:c3:47:c6:f2:67:1c:a0:c9:75:0f:ee:
b6:6d:3b:ac:29:41:3d:23:61:a8:7a:a0:7d:b6:bc:1e:01:12:
d4:35:76:33:61:c5:9c:3e:6e:47:cf:24:ae:e3:f3:3a:db:11:
84:3b:fa:1b:ae:79:98:de:bf:d1:ce:83:99:b3:36:43:41:ab:
12:8a:6c:62:27:89:ce:51:1b:45:46:26:ad:07:51:12:bd:98:
25:bd:56:55:cb:cb:3a:0e:48:c6:bd:c0:a1:71:24:63:b0:30:
5e:02:01:ba:d1:9a:1b:38:86:7c:23:8d:a4:6e:d1:b1:60:8c:
c5:02:97:51:c1:10:f6:60:d1:c9:54:d7:10:cf:c0:82:2c:ab:
2f:82:6e:38:8d:35:ac:40:10:32:79:2c:5a:e0:5d:b5:1c:7b:
77:b1:d6:40:a8:1c:48:50:a0:17:19:4c:7c:78:16:71:3d:57:
8f:8c:b9:15:e1:79:27:d7:dd:ce:54:ef:b7:45:4c:b2:95:4c:
2c:a0:e0:99:4a:27:77:73:a8:b6:26:4a:db:af:3b:58:58:bf:
a0:f4:c4:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8ziyCtyIyF6nks0mfwCkoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjYwNzA1MTgyOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzRjOWNhMjk0YTJlYmZhYmNlYWRiMTJmZjY2NmMxOGM2OTIxM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J5SR43H9oGYb6vAn0T+uL86jkIW
qCWZtqiO86IVeX/Dk1ZZuqYIdso2hxMVCtTh1YXqNfdqOGjNuWw1sN1d8RDQRX2G
6WENQ7lq68D8sJG1rQNvZh/W4BjOh//I8BwCtkF3zYNQDJb2LcWIjTeylqDFfgrG
mgx8NdaEiGEzuuDssJgpg7kj5URvHh9ttKOT0hvSqkidgwIVZIOkf+igkIo4EBG8
BIFlDBwyIHoLJGetbdQPdSD4AM8+VxBKT31DxACpfvRhalTfD/sFNECVr/1b5NzL
Ed5TCxe4MroMefkonp2h0MKcUyPD1/dIIEiuP805EDenzFsIa6FRN0TuvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCNMnKKUouv6vOrbEv9mbBjGkhOxMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEvSTB5Y29wU2k2X3E4NnRzU18yWnNHTWFTRTdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbZnAwQB
LZ1IMA0GCSqGSIb3DQEBCwUAA4IBAQArOtxHLwByJ5JNFx4PLUpkPPbFQb9oA3X5
WZWI35wAF8OpcqYjD/noe7Wcw0fG8mccoMl1D+62bTusKUE9I2GoeqB9trweARLU
NXYzYcWcPm5HzySu4/M62xGEO/obrnmY3r/RzoOZszZDQasSimxiJ4nOURtFRiat
B1ESvZglvVZVy8s6DkjGvcChcSRjsDBeAgG60ZobOIZ8I42kbtGxYIzFApdRwRD2
YNHJVNcQz8CCLKsvgm44jTWsQBAyeSxa4F21HHt3sdZAqBxIUKAXGUx8eBZxPVeP
jLkV4Xkn193OVO+3RUyylUwsoOCZSid3c6i2JkrbrztYWL+g9MTV
-----END CERTIFICATE-----
Generated at Mon Jul 6 10:32:06 2026 by rpki-client