Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/iNx82GZNWlZtsaP7l7VAkQ6gJEw.roa
File: iNx82GZNWlZtsaP7l7VAkQ6gJEw.roa (raw, json)
Hash identifier: SctiU9iAeW/Gq4wKZZ3r4nvOxosOCCwWL4xZWvbEhAE=
Subject key identifier: 88:DC:7C:D8:66:4D:5A:56:6D:B1:A3:FB:97:B5:40:91:0E:A0:24:4C
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019EFF210B6CF1127BC31D551FEBEEBBD068
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/iNx82GZNWlZtsaP7l7VAkQ6gJEw.roa
Signing time: Thu 25 Jun 2026 14:13:36 +0000
ROA not before: Thu 25 Jun 2026 14:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212582
IP address blocks: 31.14.183.0/24 maxlen: 24
195.138.55.0/24 maxlen: 24
212.47.63.0/24 maxlen: 24
2a14:9680::/29 maxlen: 48
2a14:9680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:21:0b:6c:f1:12:7b:c3:1d:55:1f:eb:ee:bb:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Jun 25 14:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88dc7cd8664d5a566db1a3fb97b540910ea0244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:06:2b:5f:fd:d8:5a:e8:89:24:e3:ca:70:
45:af:d7:18:68:18:39:87:7f:6a:87:96:31:0f:75:
89:3b:17:2d:94:ba:f1:e2:0b:9f:0c:eb:e1:c3:15:
6c:fd:7c:9f:c7:6a:b7:ec:52:76:b5:24:6a:4b:6b:
c1:3b:ec:b6:89:19:69:9b:66:6e:de:57:36:f7:a2:
d5:0e:a6:42:e0:fc:d7:bd:74:5c:3d:e5:94:2e:c0:
cf:00:18:7d:76:5e:85:1e:96:57:43:8c:4c:3f:b5:
ea:a4:da:d6:47:e9:f2:4a:0a:ef:48:85:af:de:cb:
38:e1:68:ff:59:36:12:5b:c7:c5:31:90:9d:ba:04:
0e:15:e5:4b:20:af:c1:14:c7:9a:fd:87:b3:ea:53:
b0:28:e9:d0:53:2d:0a:9f:2c:85:0b:98:8d:98:6b:
97:7e:45:85:c1:ee:9d:d7:42:33:26:15:38:73:d5:
45:37:57:20:6b:1a:33:7f:7e:28:14:7b:9b:ae:24:
29:42:81:ff:ff:53:2b:56:bf:7b:17:04:0f:d7:a8:
54:f3:40:0f:4e:91:c2:8c:5a:a8:1e:d9:49:09:b9:
30:7e:c1:80:11:e6:96:44:04:3c:b8:b0:4b:b5:c1:
d9:f5:07:5f:74:f0:e5:f0:a1:f7:1b:7e:df:8f:7e:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:7C:D8:66:4D:5A:56:6D:B1:A3:FB:97:B5:40:91:0E:A0:24:4C
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/iNx82GZNWlZtsaP7l7VAkQ6gJEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
195.138.55.0/24
212.47.63.0/24
IPv6:
2a14:9680::/29
Signature Algorithm: sha256WithRSAEncryption
a1:1f:36:77:c4:ee:19:cd:c8:08:7b:9d:69:8f:ba:b0:d8:37:
7a:b4:73:1a:2d:fa:d0:bd:01:a9:a0:25:22:ac:80:34:53:4b:
00:fc:91:7e:f4:56:cc:7a:0f:88:6e:72:ed:04:0a:14:6c:b8:
d3:a4:a5:01:eb:db:08:5f:d8:4c:81:38:ae:c5:a0:51:25:97:
02:6c:2b:58:24:51:8d:4e:f4:26:e4:df:a5:e2:be:ca:9d:d5:
ce:34:2b:bf:64:14:dd:85:7e:ef:93:14:e0:a8:4e:56:15:ae:
e0:26:22:8a:34:f1:95:68:0a:23:49:fe:f0:6c:5e:80:c8:8d:
04:a4:31:3b:72:6b:19:77:55:fb:10:a7:06:7a:56:d1:8e:9b:
ae:73:49:2d:a4:96:dd:43:25:77:36:63:77:fe:85:3d:91:5b:
fc:b5:2d:45:5c:5c:0f:68:04:09:cb:36:85:b8:fe:aa:07:cb:
c5:1c:0e:18:40:06:77:58:98:a1:03:48:0d:51:5a:c7:74:e0:
b1:2d:b0:9e:f8:d4:f7:1a:d2:c3:a5:65:34:df:e6:de:d1:28:
6e:e4:60:b3:44:d3:78:d2:e6:24:9c:6c:72:c7:f8:1b:4e:57:
7b:cb:28:d4:9e:ac:69:0c:ac:7b:d0:a4:a6:16:4a:60:ee:68:
d1:3c:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 11:01:54 2026 by rpki-client