Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/IBNLwjGhOGElhFamPSCMLTlr5tI.roa
File: IBNLwjGhOGElhFamPSCMLTlr5tI.roa (raw, json)
Hash identifier: oNzjprVPt2/BmbiYZeDtNNSvn4x6T1bNCGmR/DW5l7s=
Subject key identifier: 20:13:4B:C2:31:A1:38:61:25:84:56:A6:3D:20:8C:2D:39:6B:E6:D2
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019E2B9B467F7B59D60C363989B7BCA82912
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/IBNLwjGhOGElhFamPSCMLTlr5tI.roa
Signing time: Fri 15 May 2026 12:27:36 +0000
ROA not before: Fri 15 May 2026 12:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30870
IP address blocks: 83.98.136.0/23 maxlen: 23
83.98.148.0/24 maxlen: 24
83.98.154.0/23 maxlen: 23
83.98.167.0/24 maxlen: 24
83.98.209.0/24 maxlen: 24
83.98.216.0/24 maxlen: 24
83.98.217.0/24 maxlen: 24
83.98.218.0/23 maxlen: 23
83.98.220.0/23 maxlen: 23
89.30.150.0/23 maxlen: 23
89.30.154.0/23 maxlen: 23
89.30.156.0/24 maxlen: 24
89.30.157.0/24 maxlen: 24
213.247.55.0/24 maxlen: 24
213.247.57.0/24 maxlen: 24
213.247.62.0/23 maxlen: 23
2001:16f8:15::/48 maxlen: 48
2001:16f8:666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:9b:46:7f:7b:59:d6:0c:36:39:89:b7:bc:a8:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: May 15 12:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20134bc231a13861258456a63d208c2d396be6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:1c:55:89:5f:7e:a2:4c:c5:d8:59:52:e1:
67:22:01:27:61:e9:ab:51:ba:8a:73:12:2c:a7:31:
f1:d8:84:3d:99:3a:61:80:10:51:b2:86:6b:21:6a:
9d:2b:bf:72:65:bd:7e:62:33:00:51:2a:4a:f6:77:
d1:90:4c:50:15:0b:16:e3:ac:ef:ea:54:68:1c:5b:
61:cc:6c:07:d2:d6:59:1a:6b:47:20:a5:27:df:16:
77:bf:72:aa:09:d1:cd:fc:88:a6:b3:94:81:d0:12:
86:b9:00:a2:e8:58:e5:a6:fa:6e:98:39:ce:b1:cb:
bc:54:a8:a3:ef:54:f5:83:10:de:ba:c9:2a:2d:bd:
84:8d:5f:db:7a:5d:6d:15:7d:59:fb:c7:b2:2f:72:
5f:1e:e0:46:5c:09:39:1e:c2:40:ff:8c:9d:80:60:
a8:4d:7b:ed:69:f9:a3:65:53:f7:3e:a9:5c:64:0d:
23:ff:67:3b:9f:11:44:14:0b:c8:d6:89:fa:36:01:
fc:4c:89:c0:50:55:83:1f:6b:e3:7d:30:f0:70:c2:
21:42:0b:ec:61:92:a5:36:41:c2:a4:62:2b:64:51:
ea:42:64:e8:62:6a:3a:69:9b:2b:54:6c:ff:69:7c:
09:6a:da:72:23:a0:d1:39:53:1c:78:f1:63:7a:13:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:13:4B:C2:31:A1:38:61:25:84:56:A6:3D:20:8C:2D:39:6B:E6:D2
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/IBNLwjGhOGElhFamPSCMLTlr5tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.136.0/23
83.98.148.0/24
83.98.154.0/23
83.98.167.0/24
83.98.209.0/24
83.98.216.0-83.98.221.255
89.30.150.0/23
89.30.154.0-89.30.157.255
213.247.55.0/24
213.247.57.0/24
213.247.62.0/23
IPv6:
2001:16f8:15::/48
2001:16f8:666::/48
Signature Algorithm: sha256WithRSAEncryption
50:57:03:27:03:42:4a:48:fc:6b:18:ea:34:51:df:13:a2:9a:
d2:9c:b4:61:2e:34:c5:4d:72:27:51:98:11:c6:53:29:77:b6:
52:b1:9c:11:b6:91:b5:91:72:5e:ed:f5:c8:01:dc:09:71:bc:
5d:c4:c9:59:72:a4:25:57:39:ea:95:be:87:8f:97:9f:3e:d3:
65:80:6c:54:64:f6:02:7e:dc:9c:39:35:3b:c9:60:92:06:00:
91:b6:32:87:45:d5:ae:13:d5:7d:a0:db:f4:5f:a0:d5:2b:75:
8b:42:69:91:3a:18:f1:9e:b9:9d:7a:45:1e:82:b6:13:91:19:
4a:d6:1c:e5:a8:d6:31:74:68:f1:c1:95:fe:e5:37:2c:b8:c4:
de:25:8c:6e:2e:09:f7:cb:96:3e:2b:a3:ab:bf:ad:e8:14:86:
f4:7e:a3:41:1b:c8:c9:be:5d:1b:f7:22:df:d8:27:e2:ab:38:
15:a9:bb:b6:99:4b:c8:e0:bf:c4:72:d9:4d:18:84:43:99:d7:
d6:2d:07:9d:d6:b2:e2:1c:2a:7a:71:a6:a7:14:80:06:a1:90:
60:98:ef:fa:09:93:fd:38:38:64:10:9f:5d:a5:60:51:c4:18:
43:58:65:48:a9:cf:b9:d3:52:91:fc:e5:46:8a:4d:5f:30:ac:
17:70:dc:0a
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZ4rm0Z/e1nWDDY5ibe8qCkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNTE1MTIyNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDEzNGJjMjMxYTEzODYxMjU4NDU2YTYzZDIwOGMyZDM5NmJlNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs94cVYlffqJMxdhZUuFnIgEnYemr
UbqKcxIspzHx2IQ9mTphgBBRsoZrIWqdK79yZb1+YjMAUSpK9nfRkExQFQsW46zv
6lRoHFthzGwH0tZZGmtHIKUn3xZ3v3KqCdHN/Iims5SB0BKGuQCi6FjlpvpumDnO
scu8VKij71T1gxDeuskqLb2EjV/bel1tFX1Z+8eyL3JfHuBGXAk5HsJA/4ydgGCo
TXvtafmjZVP3PqlcZA0j/2c7nxFEFAvI1on6NgH8TInAUFWDH2vjfTDwcMIhQgvs
YZKlNkHCpGIrZFHqQmToYmo6aZsrVGz/aXwJatpyI6DROVMcePFjehOXOwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFCATS8IxoThhJYRWpj0gjC05a+bSMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvSUJOTHdqR2hPR0VsaEZhbVBTQ01MVGxyNXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwWAQCAAEwUgMEAVNiiAME
AFNilAMEAVNimgMEAFNipwMEAFNi0TAMAwQDU2LYAwQBU2LcAwQBWR6WMAwDBAFZ
HpoDBAFZHpwDBADV9zcDBADV9zkDBAHV9z4wGAQCAAIwEgMHACABFvgAFQMHACAB
FvgGZjANBgkqhkiG9w0BAQsFAAOCAQEAUFcDJwNCSkj8axjqNFHfE6Ka0py0YS40
xU1yJ1GYEcZTKXe2UrGcEbaRtZFyXu31yAHcCXG8XcTJWXKkJVc56pW+h4+Xnz7T
ZYBsVGT2An7cnDk1O8lgkgYAkbYyh0XVrhPVfaDb9F+g1St1i0JpkToY8Z65nXpF
HoK2E5EZStYc5ajWMXRo8cGV/uU3LLjE3iWMbi4J98uWPiujq7+t6BSG9H6jQRvI
yb5dG/ci39gn4qs4Fam7tplLyOC/xHLZTRiEQ5nX1i0Hnday4hwqenGmpxSABqGQ
YJjv+gmT/Tg4ZBCfXaVgUcQYQ1hlSKnPudNSkfzlRopNXzCsF3DcCg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:04:22 2026 by rpki-client