Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa
File: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (raw, json)
Hash identifier: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=
Subject key identifier: 88:4D:1C:4B:E8:23:19:0D:B0:1F:60:84:15:B5:17:67:39:42:94:4B
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0204D8AA45CB4FCD841AC9668BE73437C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa
Signing time: Thu 20 Aug 2026 17:52:27 +0000
ROA not before: Thu 20 Aug 2026 17:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201508
IP address blocks: 185.4.24.0/22 maxlen: 24
185.245.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:4d:8a:a4:5c:b4:fc:d8:41:ac:96:68:be:73:43:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 20 17:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=884d1c4be823190db01f608415b517673942944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:2b:4f:4a:45:b3:f5:08:a6:87:e9:1c:66:
4b:35:59:43:37:46:13:23:e3:56:d5:71:7e:5e:a6:
1c:b7:26:6b:57:99:cd:87:7a:f3:25:6f:4d:e7:04:
39:88:c3:13:4a:cd:c1:f6:85:6e:bf:48:be:af:a6:
41:89:ba:b9:6b:ca:a3:97:3e:0b:72:38:1e:7c:5e:
92:eb:7d:e9:d6:c6:e1:e6:98:01:2b:5a:e0:0c:ca:
e0:ed:94:d8:6f:d1:02:2b:e1:c1:64:d1:58:ce:ea:
2c:08:90:e8:36:24:47:10:d1:ef:94:aa:1d:74:ba:
49:a2:62:01:4c:db:99:68:d9:ad:23:75:57:c8:12:
f6:6d:8a:f7:78:f9:a2:5b:52:e7:a3:91:a8:d6:8d:
db:4a:fe:1d:d2:89:5e:4f:97:4c:0d:0e:e7:e3:e4:
ec:48:c2:d6:34:b3:8e:c8:45:26:aa:3d:ef:52:f4:
80:d4:43:d8:b6:ae:14:2e:f3:31:98:52:43:55:95:
ac:12:e8:03:c0:2f:06:cf:5a:a0:89:ed:43:6d:2d:
65:bc:90:8f:50:b0:43:d1:11:e3:6f:f9:f9:f5:7e:
b1:e4:1a:d8:e0:85:56:ec:65:d2:9a:53:9b:91:73:
31:e5:af:8b:ea:db:9d:cf:59:3d:10:8b:82:ae:be:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:1C:4B:E8:23:19:0D:B0:1F:60:84:15:B5:17:67:39:42:94:4B
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.24.0/22
185.245.212.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ed:71:85:50:2e:94:d1:c6:51:10:ff:1f:2d:f3:22:5a:4a:
f5:50:78:60:f3:a9:ad:75:0e:29:0a:47:42:76:dc:78:e6:c9:
9c:70:db:8f:d2:2e:1d:34:64:31:8d:4e:ef:84:0b:73:fd:45:
ac:a8:cb:a0:2e:b8:8a:7b:1e:bc:39:b5:ef:34:d7:8f:79:14:
6b:1d:d3:79:49:3e:8b:09:d4:bd:cf:a3:95:ca:96:91:9b:13:
c6:2e:16:5f:83:91:7b:88:9f:f7:3a:c6:d3:92:9e:ab:8d:81:
c9:ec:2d:44:33:f7:10:e1:3b:30:ca:42:63:03:8f:9e:5c:e5:
f8:80:95:1e:dc:11:8b:15:51:33:75:03:c9:69:4e:16:6e:4d:
07:2e:5d:b5:48:08:aa:d6:81:b0:fc:bb:c6:f7:e5:9f:6f:f7:
e3:63:c8:67:cf:e5:e1:f3:c2:db:c7:b6:22:b1:8b:78:76:f2:
57:35:c9:dc:a3:1f:c4:95:9a:a8:35:5e:54:26:d3:11:b1:44:
8d:70:62:f8:16:ca:c7:b6:7d:8d:e5:99:99:2f:54:a8:e2:9e:
8b:51:fe:dc:55:0b:d0:37:15:a0:dc:89:28:01:1f:76:8d:67:
25:f7:9d:ac:86:91:05:bd:cc:7e:60:9b:08:71:f8:f4:b8:38:
5e:83:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 15:27:00 2026 by rpki-client