Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iv5RT8ol4EuxjIT1cXM08dItows.roa
File: iv5RT8ol4EuxjIT1cXM08dItows.roa (raw, json)
Hash identifier: k4LdUwxJgoBsnubUecsjU2uIl+XOcnmng6dlNS0GMik=
Subject key identifier: 8A:FE:51:4F:CA:25:E0:4B:B1:8C:84:F5:71:73:34:F1:D2:2D:A3:0B
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E25F0B37A66ED74C4EFD2CB9A4D578FA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iv5RT8ol4EuxjIT1cXM08dItows.roa
Signing time: Sun 27 Sep 2026 10:17:54 +0000
ROA not before: Sun 27 Sep 2026 10:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 45.130.186.0/24 maxlen: 24
80.243.228.0/24 maxlen: 24
86.62.52.0/24 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:5f:0b:37:a6:6e:d7:4c:4e:fd:2c:b9:a4:d5:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 27 10:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8afe514fca25e04bb18c84f5717334f1d22da30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:45:76:5e:60:56:05:1a:55:a0:dc:39:52:
5e:17:fb:76:5e:a1:37:7f:86:f5:b5:7a:30:c3:3e:
a5:62:10:77:aa:79:59:0a:32:d9:8d:a2:de:4f:d4:
68:70:13:6b:09:36:c2:e9:f5:df:62:d9:e0:4c:44:
78:41:3d:2d:cb:66:62:b5:be:38:74:0f:41:d6:87:
04:d0:ab:5d:e7:d5:58:c5:48:6a:94:cd:b1:72:c2:
fa:25:b0:30:08:52:0b:45:a7:01:5f:ae:28:f1:a5:
f2:6f:bc:b3:0e:0f:92:36:be:81:76:7e:e3:09:bd:
e2:1f:3c:fa:ec:50:c4:93:29:45:b0:99:c2:2c:b0:
1d:59:d8:43:f3:83:8c:96:fc:61:1f:e3:b0:e0:3c:
7f:f7:4d:74:b6:e2:4c:b9:6a:69:e0:16:86:2d:c2:
21:56:4b:2c:62:15:2d:e8:dc:54:d8:d9:4a:61:1a:
a0:e6:74:53:d3:ec:86:6a:36:e2:02:43:21:b4:bd:
2c:be:1f:cd:eb:dd:a7:90:ae:9b:52:5b:e1:7f:a4:
77:7c:ff:e4:68:cb:0d:16:40:9c:1e:b9:6f:54:1d:
7f:05:86:41:fc:3b:d5:e4:3a:1d:bf:65:ac:ea:6e:
e7:bc:32:ce:d0:5d:4b:08:af:a2:d7:a6:bb:21:27:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:51:4F:CA:25:E0:4B:B1:8C:84:F5:71:73:34:F1:D2:2D:A3:0B
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iv5RT8ol4EuxjIT1cXM08dItows.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.186.0/24
80.243.228.0/24
86.62.52.0/24
88.218.80.0/24
88.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:eb:5d:29:02:28:2d:df:4e:b3:08:31:21:e0:19:4f:84:0d:
a9:0e:94:47:41:b6:17:59:16:92:77:aa:2a:dc:20:f2:b1:57:
66:b7:38:fc:23:05:e5:7d:60:c1:b7:15:8f:9a:07:79:5d:2a:
01:34:b0:73:21:52:06:11:bd:44:ac:1f:5e:e9:96:52:25:9d:
f9:74:28:46:f8:68:2a:1e:76:0c:88:f8:53:18:a5:17:bc:bc:
2a:06:59:5f:b7:db:aa:0c:67:78:52:c3:2b:e9:e8:6c:1b:d0:
17:4b:0f:8a:d1:e7:7a:71:8e:71:c9:30:f1:c8:1e:85:85:ef:
f2:dd:1b:62:8d:4b:e9:61:be:d7:12:bf:66:dd:31:8c:7c:cf:
c0:59:6e:93:98:9c:c7:15:cb:2a:64:14:36:ed:ef:f5:51:de:
22:c5:4d:6f:8a:7e:17:73:58:4e:87:d7:cf:c7:d7:fb:c4:45:
d5:46:24:c9:71:d0:2f:7a:9d:1f:6f:4e:ef:e0:01:09:ef:26:
7d:b6:b6:79:a8:6b:3e:94:59:3e:bf:4c:51:5a:37:d0:34:02:
fa:4d:a4:a5:3f:df:d7:33:8f:25:e1:90:25:ed:f3:08:84:56:
56:bb:af:53:93:38:12:d0:12:7d:3a:4d:41:e2:93:da:3a:f4:
29:39:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:18:11 2026 by rpki-client