Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/i5fkngAAKgBj_vhNrDZG5uuNWcA.roa
File: i5fkngAAKgBj_vhNrDZG5uuNWcA.roa (raw, json)
Hash identifier: piquHzoYmBADn7k1KkMSgdokbEnmq4PUaGcG0vO/mwg=
Subject key identifier: 8B:97:E4:9E:00:00:2A:00:63:FE:F8:4D:AC:36:46:E6:EB:8D:59:C0
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0578A8B3694B977E679F19AE1561790F3
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/i5fkngAAKgBj_vhNrDZG5uuNWcA.roa
Signing time: Mon 31 Aug 2026 11:18:12 +0000
ROA not before: Mon 31 Aug 2026 11:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 45.149.24.0/24 maxlen: 24
89.251.21.0/24 maxlen: 24
193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:8a:8b:36:94:b9:77:e6:79:f1:9a:e1:56:17:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 31 11:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b97e49e00002a0063fef84dac3646e6eb8d59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:64:05:89:35:47:b4:5c:08:d4:77:94:f5:
6f:b0:7e:3a:29:f3:0e:1a:7c:01:03:60:62:ba:74:
c9:e5:34:c4:2d:60:02:1f:93:68:cf:4c:84:21:29:
e4:52:24:8d:b6:3d:7e:2e:fc:c1:fd:57:f6:98:b3:
0d:df:56:c1:67:a4:c8:58:10:a8:3a:a1:e5:93:50:
34:a3:9e:34:5e:74:16:9c:23:11:de:79:1b:c4:e5:
0a:e6:7a:1a:46:e2:fe:82:ca:2d:23:2c:9a:e2:1e:
46:80:73:a3:a7:a7:b9:98:d9:28:2f:6a:1e:53:80:
74:13:15:67:49:06:02:1b:26:99:9f:c7:65:76:2b:
95:bd:96:08:81:ca:c6:9d:d1:27:b0:af:28:73:4f:
e0:f4:1e:e8:bd:45:c0:9b:e7:c8:0c:5b:af:48:f7:
40:97:c2:7f:e0:f5:fa:97:ee:50:a5:5e:dd:19:10:
ea:6d:24:cf:c6:84:00:5a:7e:44:bd:31:bc:66:a3:
8a:85:62:eb:16:d2:ca:45:b6:39:15:ca:c5:34:b0:
be:b1:92:0a:f8:7a:25:da:99:e0:99:a8:2c:9b:93:
4e:b4:0f:d3:56:ca:54:a0:c3:2b:14:79:8e:28:fa:
cd:f3:c0:80:27:2f:0a:12:02:c7:3b:13:63:e1:42:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:E4:9E:00:00:2A:00:63:FE:F8:4D:AC:36:46:E6:EB:8D:59:C0
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/i5fkngAAKgBj_vhNrDZG5uuNWcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/24
89.251.21.0/24
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b5:78:d8:0a:b3:56:53:39:41:17:30:48:e2:93:12:af:cc:
96:94:85:60:49:66:9e:68:a4:2d:7a:a9:58:7d:5f:52:f7:93:
54:88:5e:ac:1a:19:5c:08:dc:c3:03:14:ec:51:80:d5:93:d6:
ad:b5:a8:16:2b:69:02:63:d8:80:f9:6e:76:a7:b9:3e:92:35:
b1:f4:da:b7:74:5d:be:22:c4:30:61:eb:36:46:58:2d:1a:04:
05:0e:00:f2:5d:48:1f:2d:ba:df:0d:b2:6a:26:6a:3e:d6:5f:
13:27:6d:bf:67:a9:30:bf:0d:fb:c4:a1:a9:53:9a:63:d0:46:
60:da:05:57:cc:b8:c3:c1:d4:a9:8b:43:62:03:fe:ae:37:7d:
3a:a2:c8:eb:96:60:94:03:d3:5f:4b:a9:72:25:e8:a1:4b:41:
44:94:7d:66:d5:bd:a6:83:10:ca:e8:5b:7f:b6:13:48:ec:6f:
c1:08:f8:47:46:e5:0b:a0:5e:c1:eb:92:3c:7f:6f:2c:51:7f:
3f:76:11:ca:bf:57:8d:57:f5:bd:cf:9e:ec:9f:a8:e3:7c:32:
72:58:a8:e9:78:7b:61:f2:a5:fa:6d:e7:a6:38:09:46:ec:23:
e9:33:f0:29:2f:cb:ac:b7:72:98:3e:bc:b6:48:10:7c:a2:ed:
cc:ad:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:05 2026 by rpki-client