Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/I5ohKLBmaxUTevQzWj4-q9pt2AE.roa
File: I5ohKLBmaxUTevQzWj4-q9pt2AE.roa (raw, json)
Hash identifier: vsHj8OGuxxJT7n23kvdJawzwXXsXNMGYAz3VXPfMYE8=
Subject key identifier: 23:9A:21:28:B0:66:6B:15:13:7A:F4:33:5A:3E:3E:AB:DA:6D:D8:01
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019FFA85E94F603C95A05C9EC2D9D101ED86
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/I5ohKLBmaxUTevQzWj4-q9pt2AE.roa
Signing time: Thu 13 Aug 2026 09:48:27 +0000
ROA not before: Thu 13 Aug 2026 09:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39024
IP address blocks: 151.237.40.0/21 maxlen: 21
151.237.47.0/24 maxlen: 24
194.69.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:85:e9:4f:60:3c:95:a0:5c:9e:c2:d9:d1:01:ed:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Aug 13 09:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=239a2128b0666b15137af4335a3e3eabda6dd801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:2f:60:76:a9:fb:52:fc:fb:9c:80:9c:61:
5f:f3:07:e0:44:0c:03:d3:ca:b7:9f:80:07:d7:25:
73:d6:25:1f:05:49:0c:35:61:19:03:3f:cb:a8:25:
17:bd:a1:f0:7c:e3:58:63:3f:98:93:f8:9e:3c:c1:
28:7e:4b:aa:16:20:34:3e:9e:39:ba:e3:81:17:9a:
6e:4a:0c:57:5c:0c:9d:02:49:aa:ac:ee:da:39:d2:
c0:87:47:85:d0:67:96:1f:cf:16:c4:6f:f2:94:6a:
b5:9e:3c:fb:61:df:fc:0b:a3:9c:52:ec:23:9a:2b:
7a:ae:e5:52:4f:50:44:ed:07:01:b3:97:97:c0:3b:
30:88:d7:77:6d:b4:ca:16:6d:fe:1a:29:1e:6f:25:
5e:7a:a3:c1:10:4c:24:e7:ce:90:56:c4:f7:df:2f:
1d:d3:10:d4:d4:04:40:ad:6b:9d:28:f7:0a:0f:b1:
53:26:fe:c5:6d:3e:16:e3:1a:65:c4:4e:15:cd:7a:
e2:29:7f:8c:5f:26:2c:6a:af:fe:df:88:05:cc:fa:
89:d6:0b:70:8d:35:30:7c:bd:da:b5:5d:a9:3c:7d:
d2:e9:d3:a2:f9:1c:ff:93:9f:23:17:d7:f4:7c:03:
0e:42:11:ec:6d:28:38:17:56:4c:89:c9:34:4c:82:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:21:28:B0:66:6B:15:13:7A:F4:33:5A:3E:3E:AB:DA:6D:D8:01
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/I5ohKLBmaxUTevQzWj4-q9pt2AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.40.0/21
194.69.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:68:5b:67:ed:d9:ea:49:25:cd:d4:19:c4:12:95:9a:36:ed:
23:f0:c4:dd:c8:cc:87:0e:06:44:f9:40:2c:ef:15:1e:21:29:
e8:f7:e2:15:dd:60:2e:8b:d7:f3:9f:e0:3e:5e:43:80:80:ed:
e6:7c:89:be:74:4b:01:20:5c:49:74:c2:dd:df:fa:3c:c1:58:
4e:5a:f3:2e:c6:a6:6f:2e:bb:94:2d:54:be:30:6c:ec:66:81:
42:06:ac:4c:51:b2:9c:01:8e:4e:37:9b:da:30:a9:c7:30:ca:
64:3b:8d:ef:73:7d:7c:4e:92:16:80:52:dd:7a:e3:fb:7e:8d:
8b:81:f7:79:c8:a3:ce:59:44:ef:c0:d5:f2:c5:6a:0d:7e:b3:
e6:02:36:e6:b3:59:68:38:54:45:f1:bf:ca:38:08:2b:d6:ca:
eb:cf:51:38:cb:ed:8f:a8:34:f8:fb:42:e0:69:80:f6:d4:09:
f0:5c:72:55:6b:93:73:71:a7:41:c5:e7:3e:80:cf:8b:fe:2e:
da:e7:17:ed:41:fe:30:0b:9e:25:ab:81:18:cd:fa:6d:28:ab:
4b:ba:1d:ae:09:67:b3:ef:d7:f2:78:43:51:7f:7a:3f:15:1e:
fe:32:58:d8:2a:10:bc:c4:e2:b0:97:df:80:53:0c:99:92:df:
9d:74:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:35 2026 by rpki-client