Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ICLuLWUf8K-OPFkcJRYxqsBX-og.roa
File: ICLuLWUf8K-OPFkcJRYxqsBX-og.roa (raw, json)
Hash identifier: KNef4xAbXPZkefsWRYunbzCYlTuRbde30AOI76m0/d8=
Subject key identifier: 20:22:EE:2D:65:1F:F0:AF:8E:3C:59:1C:25:16:31:AA:C0:57:FA:88
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01A13025B0DB42F0C312624E23ED63AFE445
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ICLuLWUf8K-OPFkcJRYxqsBX-og.roa
Signing time: Mon 12 Oct 2026 12:45:38 +0000
ROA not before: Mon 12 Oct 2026 12:45:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39083
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
141.98.47.0/24 maxlen: 24
194.120.126.0/24 maxlen: 24
2a07:6f40::/29 maxlen: 48
2a0d:2140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:25:b0:db:42:f0:c3:12:62:4e:23:ed:63:af:e4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Oct 12 12:45:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2022ee2d651ff0af8e3c591c251631aac057fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:08:80:c7:48:7b:e0:27:e4:ff:eb:82:18:
e7:35:8b:08:9c:6e:ea:17:42:d3:8d:b9:f9:bf:28:
81:db:96:a2:58:e6:ec:c7:b5:97:54:63:85:4c:c7:
2a:66:0e:d0:ec:ed:37:9d:c6:19:a0:be:39:8d:54:
98:ee:6e:bc:4f:04:bb:56:35:1a:db:ab:4d:ef:54:
e0:43:72:89:65:19:af:02:22:d6:f9:ab:b4:91:d0:
ec:7d:8e:36:92:e1:03:ff:9f:6e:e3:79:51:c2:b8:
0e:47:d5:26:eb:57:76:b1:13:a5:ce:44:54:0e:71:
09:7e:8b:cf:6c:2e:2d:1d:6e:67:3c:0b:6b:18:c9:
ff:d2:ce:ab:0a:1a:b4:c6:48:ca:5e:dc:09:2f:3d:
41:0e:1e:22:78:dd:6e:90:08:61:a5:ec:9b:7a:ce:
10:67:0e:2d:92:57:79:06:b8:94:14:8e:bc:ed:79:
db:4e:4f:b7:8b:95:24:ee:a6:1a:1a:31:03:61:88:
69:c7:ba:c3:88:16:ab:07:7e:09:0e:b2:67:14:11:
fc:b1:c0:aa:20:c1:71:b3:d9:ee:87:cf:a5:00:b5:
f2:dd:e0:0a:f9:c8:4b:d0:9c:68:37:2c:80:53:62:
ec:79:c0:07:aa:4f:61:b2:c0:c6:04:d2:25:2d:60:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:22:EE:2D:65:1F:F0:AF:8E:3C:59:1C:25:16:31:AA:C0:57:FA:88
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ICLuLWUf8K-OPFkcJRYxqsBX-og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
141.98.47.0/24
194.120.126.0/24
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
73:33:ca:6b:24:09:7d:1d:35:ea:75:21:4f:c3:0a:87:06:cb:
5c:a3:81:1c:4f:b2:ed:e8:c2:44:69:aa:38:69:69:a0:37:ed:
5d:a1:24:6d:b6:3a:6f:1f:40:1d:04:25:9c:ef:4a:7d:f6:8e:
ac:7d:e8:0f:c7:50:5a:2d:07:29:fa:0e:bb:39:50:98:e8:96:
34:17:e3:bd:67:7b:da:08:00:f1:92:d2:a3:b4:a7:24:4f:51:
0f:d7:e8:c9:22:57:b1:98:88:6f:c4:6e:7c:ca:70:8f:53:20:
2d:1c:21:3a:64:a4:b0:f0:f6:48:fa:14:d9:45:32:ca:a7:ee:
7f:e9:e1:d1:a7:90:e1:e7:b0:39:b3:a7:2c:80:d3:26:3f:a8:
5d:ac:4c:f7:8e:5e:46:1a:26:f6:19:d3:0c:f3:12:19:65:94:
b6:89:a3:82:ad:5b:e8:b2:6c:b1:71:91:a7:e5:84:53:a0:1b:
35:35:e5:c2:96:6f:b1:18:04:c5:fa:8f:32:54:aa:52:ce:7d:
74:48:2b:be:22:d3:19:98:6c:1d:87:55:ec:7e:13:b6:ef:1f:
2d:b2:a2:e4:d3:65:e7:2b:a7:c5:97:b6:2d:61:22:3a:35:ee:
78:03:cb:e6:03:94:8e:c1:de:5c:06:9d:c4:1b:b1:d7:21:30:
2a:1f:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:23:14 2026 by rpki-client