Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iYRxkLYXsGI0pT2yceg3jqfcYmM.roa
File: iYRxkLYXsGI0pT2yceg3jqfcYmM.roa (raw, json)
Hash identifier: 6EKgRX3nYIv5nRI/Nb1C4xiwlYVyRt3xia1t06bkvFc=
Subject key identifier: 89:84:71:90:B6:17:B0:62:34:A5:3D:B2:71:E8:37:8E:A7:DC:62:63
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0580BA32F713F6D711979CB13D613EEE0
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iYRxkLYXsGI0pT2yceg3jqfcYmM.roa
Signing time: Mon 31 Aug 2026 13:39:12 +0000
ROA not before: Mon 31 Aug 2026 13:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.182.117.0/24 maxlen: 24
31.40.250.0/24 maxlen: 24
62.204.52.0/24 maxlen: 24
91.242.234.0/24 maxlen: 24
130.255.172.0/24 maxlen: 24
130.255.175.0/24 maxlen: 24
193.42.119.0/24 maxlen: 24
194.69.164.0/24 maxlen: 24
195.64.127.0/24 maxlen: 24
212.24.120.0/24 maxlen: 24
212.52.18.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
213.109.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:0b:a3:2f:71:3f:6d:71:19:79:cb:13:d6:13:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 31 13:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89847190b617b06234a53db271e8378ea7dc6263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:92:0b:fd:ae:fe:59:fe:21:90:70:f2:a8:
d9:dc:a9:99:2d:d2:90:34:25:e1:46:15:2f:9f:d2:
01:ef:60:99:27:44:60:ac:e7:f1:ee:75:8b:ec:2f:
fd:f8:88:98:c2:a8:48:0a:b7:7f:06:15:39:3c:7a:
b0:af:94:13:18:7c:47:68:97:15:48:29:fb:e4:0e:
a5:9e:88:df:99:38:61:30:a4:d8:15:d9:01:26:22:
2a:1e:90:1e:0a:bc:35:3c:0f:57:67:4f:bb:4e:2d:
0e:cf:23:ee:62:bb:0c:90:e2:0d:43:76:bd:7e:7d:
6d:4b:c8:c7:d2:0a:60:a5:68:80:bb:43:de:25:ea:
77:0f:3d:2c:d9:8c:c0:40:ff:e0:aa:5f:2c:98:bd:
23:cc:59:58:6e:37:82:c0:3c:8c:4e:b1:9c:ec:00:
23:82:89:bf:9a:a1:6f:2c:b3:9e:45:82:60:51:37:
da:5d:92:06:e5:76:c0:fe:33:88:90:d5:63:0f:17:
89:cd:32:56:38:66:61:ac:b9:f2:14:d1:6f:87:6c:
99:ee:91:f3:f2:86:f9:c3:61:54:69:03:23:c9:29:
75:0f:d0:84:ca:9b:45:4f:b9:a8:bb:2d:6c:d2:4d:
72:45:20:41:02:81:d6:13:71:e9:27:48:99:cb:e8:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:71:90:B6:17:B0:62:34:A5:3D:B2:71:E8:37:8E:A7:DC:62:63
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iYRxkLYXsGI0pT2yceg3jqfcYmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.117.0/24
31.40.250.0/24
62.204.52.0/24
91.242.234.0/24
130.255.172.0/24
130.255.175.0/24
193.42.119.0/24
194.69.164.0/24
195.64.127.0/24
212.24.120.0/24
212.52.18.0/24
212.107.26.0/24
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
58:43:04:1a:82:00:51:66:f2:0b:51:63:35:3e:b5:ca:1d:34:
4c:e0:db:23:f6:d5:2f:5d:fa:b2:82:bb:f5:a8:e5:b9:80:32:
83:11:64:22:d0:28:ee:97:7d:af:5e:92:d1:ab:e9:f6:ea:ef:
6d:61:35:47:ef:d7:75:a3:93:89:48:36:6b:45:f3:ec:0e:73:
9a:28:93:2d:ca:2d:22:1f:02:17:b7:61:d8:b7:9f:83:dc:de:
60:dc:7a:62:cc:ad:3f:d3:2d:c4:d2:eb:b0:90:82:2b:63:bd:
47:e2:c9:07:f2:42:1b:1a:78:a4:69:5d:e3:19:79:67:90:70:
30:6f:02:0d:e9:05:9e:2a:4d:58:c1:e0:be:2e:d9:c6:9b:7b:
e7:23:5a:43:68:71:0c:b2:2a:20:9b:e1:59:5d:fb:5e:69:98:
24:aa:59:3b:9a:69:bc:52:25:8e:30:c4:f7:7c:af:87:0d:27:
b2:bf:47:fe:67:82:10:cb:9c:67:f4:82:31:53:01:b4:f0:1e:
c8:2d:01:4b:ab:f7:f1:80:17:55:58:6d:85:ee:1b:87:61:26:
54:9f:3f:8e:35:d2:a6:4f:82:8d:82:dd:c0:b0:d9:45:31:be:
61:be:7a:e8:c0:10:f8:69:94:e6:0d:a6:94:40:d4:bc:b1:86:
8b:1a:92:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAaBYC6MvcT9tcRl5yxPWE+7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwODMxMTMzOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTg0NzE5MGI2MTdiMDYyMzRhNTNkYjI3MWU4Mzc4ZWE3ZGM2MjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW+SC/2u/ln+IZBw8qjZ3KmZLdKQ
NCXhRhUvn9IB72CZJ0RgrOfx7nWL7C/9+IiYwqhICrd/BhU5PHqwr5QTGHxHaJcV
SCn75A6lnojfmThhMKTYFdkBJiIqHpAeCrw1PA9XZ0+7Ti0OzyPuYrsMkOINQ3a9
fn1tS8jH0gpgpWiAu0PeJep3Dz0s2YzAQP/gql8smL0jzFlYbjeCwDyMTrGc7AAj
gom/mqFvLLOeRYJgUTfaXZIG5XbA/jOIkNVjDxeJzTJWOGZhrLnyFNFvh2yZ7pHz
8ob5w2FUaQMjySl1D9CEyptFT7mouy1s0k1yRSBBAoHWE3HpJ0iZy+hNCQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFImEcZC2F7BiNKU9snHoN46n3GJjMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvaVlSeGtMWVhzR0kwcFQyeWNlZzNqcWZjWW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQABbZ1AwQA
Hyj6AwQAPsw0AwQAW/LqAwQAgv+sAwQAgv+vAwQAwSp3AwQAwkWkAwQAw0B/AwQA
1Bh4AwQA1DQSAwQA1GsaAwQA1W2ZMA0GCSqGSIb3DQEBCwUAA4IBAQBYQwQaggBR
ZvILUWM1PrXKHTRM4Nsj9tUvXfqygrv1qOW5gDKDEWQi0Cjul32vXpLRq+n26u9t
YTVH79d1o5OJSDZrRfPsDnOaKJMtyi0iHwIXt2HYt5+D3N5g3HpizK0/0y3E0uuw
kIIrY71H4skH8kIbGnikaV3jGXlnkHAwbwIN6QWeKk1YweC+LtnGm3vnI1pDaHEM
siogm+FZXfteaZgkqlk7mmm8UiWOMMT3fK+HDSeyv0f+Z4IQy5xn9IIxUwG08B7I
LQFLq/fxgBdVWG2F7huHYSZUnz+ONdKmT4KNgt3AsNlFMb5hvnrowBD4aZTmDaaU
QNS8sYaLGpLQ
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:06 2026 by rpki-client