Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/iOIsGM1prEuZUKH2cM7CUq3g5Is.roa
File: iOIsGM1prEuZUKH2cM7CUq3g5Is.roa (raw, json)
Hash identifier: igmbQzjudKovyj6MAKOgXMXBnsmnwoI5fJogJVcvX14=
Subject key identifier: 88:E2:2C:18:CD:69:AC:4B:99:50:A1:F6:70:CE:C2:52:AD:E0:E4:8B
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01A1315B235C583956EAFEA92F44C7694AE0
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/iOIsGM1prEuZUKH2cM7CUq3g5Is.roa
Signing time: Mon 12 Oct 2026 18:23:38 +0000
ROA not before: Mon 12 Oct 2026 18:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57706
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
212.47.48.0/24 maxlen: 24
2a09:e240::/29 maxlen: 48
2a09:e240:10::/48 maxlen: 48
2a09:e240:40::/44 maxlen: 48
2a09:e244::/33 maxlen: 48
2a09:e244:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:5b:23:5c:58:39:56:ea:fe:a9:2f:44:c7:69:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Oct 12 18:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88e22c18cd69ac4b9950a1f670cec252ade0e48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:0d:bc:58:af:ca:ee:9c:96:0a:56:5d:16:
24:e2:b1:ef:6b:1b:d0:79:74:8e:2c:e9:9b:55:9d:
cf:ef:b0:ab:10:3c:42:c5:1b:7c:65:98:5e:c3:fa:
c1:3a:0b:06:5f:f5:66:82:99:8b:07:98:6c:89:19:
a7:a8:7a:5f:06:74:e3:c3:b3:7d:f9:98:e1:2e:e9:
9c:31:ce:90:11:16:a7:83:5b:ab:af:3b:3b:f4:71:
72:f0:9d:b5:99:dc:08:b5:96:4f:41:4d:8c:51:a5:
5a:59:df:9d:08:fa:bc:28:c3:8e:79:40:41:58:25:
37:0e:89:7e:64:ca:53:b9:40:a6:be:b6:f5:dc:14:
0b:42:28:95:d0:e3:60:51:9b:bb:03:c7:b7:27:dd:
e5:d3:2e:31:71:e5:4c:c9:5b:cf:3b:13:52:d6:f4:
61:50:42:a7:27:55:4a:02:61:ed:6f:90:5b:44:14:
c7:78:b5:86:35:77:ef:4b:12:94:ea:7b:7b:14:5c:
61:2f:ea:a9:a4:ac:fc:35:fa:1e:25:e7:fc:a7:7b:
68:d7:ef:09:1f:4a:4d:46:05:19:52:24:22:1c:99:
6e:e7:c4:23:1f:78:fa:f4:23:ce:bc:7e:cc:f7:2a:
b4:e2:c8:19:c9:04:4d:31:7c:af:42:da:5f:10:2b:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:2C:18:CD:69:AC:4B:99:50:A1:F6:70:CE:C2:52:AD:E0:E4:8B
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/iOIsGM1prEuZUKH2cM7CUq3g5Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0/24
2.58.59.0/24
212.47.48.0/24
IPv6:
2a09:e240::/29
Signature Algorithm: sha256WithRSAEncryption
24:e4:ec:58:31:25:18:6f:4b:0a:ac:95:b5:86:13:9e:bf:c9:
8c:12:e2:47:31:22:70:87:fc:9d:bf:7f:94:0f:74:a8:07:af:
58:de:51:9e:e4:62:6e:30:41:12:03:54:49:de:f1:ea:2e:5a:
08:c3:72:7d:65:99:2a:3f:f2:9a:04:92:31:2e:97:f8:27:a9:
ba:ca:13:1b:48:4b:bb:8f:1a:3e:75:94:4f:8f:94:4a:3e:8d:
17:ab:63:37:32:f5:db:9e:34:32:a5:b1:8f:8d:62:36:04:73:
8f:21:07:6c:6c:92:7a:a1:e1:6c:90:a2:80:11:2a:ea:88:a9:
f1:4d:3c:ce:44:9b:f9:a9:03:cf:d4:b8:42:88:70:61:61:60:
ab:a8:7e:55:6e:65:7b:25:6c:a1:2e:f2:23:a0:13:7e:4e:eb:
07:df:69:6d:8b:48:ea:c8:eb:ec:bc:46:60:5c:97:a8:ce:72:
ad:17:0a:70:36:6f:4f:a7:32:99:c2:3e:28:87:e3:8a:b8:fc:
d3:79:da:6b:3d:1a:f0:07:53:32:43:bc:f6:96:6a:15:25:aa:
d2:95:cb:f2:c0:e8:92:53:9b:57:f8:bf:72:07:b6:3a:6c:58:
bd:c2:e0:99:46:6f:65:7f:f2:e4:97:c9:61:64:f7:7d:04:72:
48:5f:fa:19
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaExWyNcWDlW6v6pL0THaUrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjYxMDEyMTgyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGUyMmMxOGNkNjlhYzRiOTk1MGExZjY3MGNlYzI1MmFkZTBlNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP4NvFivyu6clgpWXRYk4rHvaxvQ
eXSOLOmbVZ3P77CrEDxCxRt8ZZhew/rBOgsGX/VmgpmLB5hsiRmnqHpfBnTjw7N9
+ZjhLumcMc6QERang1urrzs79HFy8J21mdwItZZPQU2MUaVaWd+dCPq8KMOOeUBB
WCU3Dol+ZMpTuUCmvrb13BQLQiiV0ONgUZu7A8e3J93l0y4xceVMyVvPOxNS1vRh
UEKnJ1VKAmHtb5BbRBTHeLWGNXfvSxKU6nt7FFxhL+qppKz8NfoeJef8p3to1+8J
H0pNRgUZUiQiHJlu58QjH3j69CPOvH7M9yq04sgZyQRNMXyvQtpfECvlFwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFIjiLBjNaaxLmVCh9nDOwlKt4OSLMB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvaU9Jc0dNMXByRXVaVUtIMmNNN0NVcTNnNUlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAAjo5AwQA
Ajo7AwQA1C8wMA0EAgACMAcDBQMqCeJAMA0GCSqGSIb3DQEBCwUAA4IBAQAk5OxY
MSUYb0sKrJW1hhOev8mMEuJHMSJwh/ydv3+UD3SoB69Y3lGe5GJuMEESA1RJ3vHq
LloIw3J9ZZkqP/KaBJIxLpf4J6m6yhMbSEu7jxo+dZRPj5RKPo0Xq2M3MvXbnjQy
pbGPjWI2BHOPIQdsbJJ6oeFskKKAESrqiKnxTTzORJv5qQPP1LhCiHBhYWCrqH5V
bmV7JWyhLvIjoBN+TusH32lti0jqyOvsvEZgXJeoznKtFwpwNm9PpzKZwj4oh+OK
uPzTedprPRrwB1MyQ7z2lmoVJarSlcvywOiSU5tX+L9yB7Y6bFi9wuCZRm9lf/Lk
l8lhZPd9BHJIX/oZ
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:52:57 2026 by rpki-client