Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/IysrIvGpka5-5DKpo4HXZVb4VMQ.roa
File: IysrIvGpka5-5DKpo4HXZVb4VMQ.roa (raw, json)
Hash identifier: tPxfr1ieqhseW6ic/tfIRSbN5IwX4Ibo1AZSmevcI+U=
Subject key identifier: 23:2B:2B:22:F1:A9:91:AE:7E:E4:32:A9:A3:81:D7:65:56:F8:54:C4
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 019D6758CC00E71C00FCBA95437DC8B0FF58
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/IysrIvGpka5-5DKpo4HXZVb4VMQ.roa
Signing time: Tue 07 Apr 2026 09:49:25 +0000
ROA not before: Tue 07 Apr 2026 09:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200882
IP address blocks: 80.248.141.0/24 maxlen: 24
80.248.142.0/24 maxlen: 24
2a12:fdc0::/44 maxlen: 44
2a12:fdc0:1::/48 maxlen: 48
2a12:fdc0:2::/48 maxlen: 48
2a12:fdc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:58:cc:00:e7:1c:00:fc:ba:95:43:7d:c8:b0:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Apr 7 09:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=232b2b22f1a991ae7ee432a9a381d76556f854c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4e:67:bf:6c:dd:6b:e7:63:34:8e:e9:fe:ea:
c0:e7:72:d4:f9:25:41:9a:19:26:d5:1c:6b:4d:c7:
87:25:73:cb:91:81:fb:21:00:24:4a:38:06:74:75:
04:75:95:13:ad:87:c1:37:6f:2b:ad:56:e5:17:2c:
6f:ae:e0:b6:dc:2c:62:56:c8:ba:7c:4b:34:28:74:
10:87:f9:bf:01:ea:f6:ea:b4:27:df:81:15:0a:33:
d0:ea:2b:a3:12:19:e8:ab:37:9a:5f:0b:55:1a:ec:
aa:fe:1d:6f:04:e7:cd:0e:34:b9:1d:91:c5:9c:b6:
35:fd:cb:f9:31:15:ab:fb:d8:92:a5:52:8b:c7:93:
a1:3c:c9:7f:50:c5:a6:9d:74:03:1f:22:0f:58:60:
74:63:5b:22:7c:3d:1b:7c:8b:72:03:e8:cd:5d:d0:
25:ef:21:42:92:46:68:10:d1:fc:28:ff:72:ff:03:
88:76:c8:a2:d6:07:46:bd:85:48:60:3e:30:9d:04:
3e:e2:d6:0f:ab:9f:5f:32:fd:bd:a1:be:20:bb:e0:
7c:32:01:e7:1f:35:41:24:4c:1a:5c:0d:73:fd:1f:
ff:77:6c:4b:05:ae:d2:ee:87:b2:50:76:13:f0:b2:
96:45:44:10:93:55:49:d6:34:8f:3a:4b:ff:c1:e4:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:2B:22:F1:A9:91:AE:7E:E4:32:A9:A3:81:D7:65:56:F8:54:C4
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/IysrIvGpka5-5DKpo4HXZVb4VMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.141.0-80.248.142.255
IPv6:
2a12:fdc0::/44
Signature Algorithm: sha256WithRSAEncryption
14:01:9f:bb:40:8a:06:a5:6d:2a:f6:d0:93:78:5e:6e:ed:b2:
0f:19:4f:8d:2c:d7:55:56:39:5b:01:35:4c:27:6c:1a:7f:31:
f6:e9:c3:dd:55:60:db:35:ee:55:f3:c4:7e:79:a1:24:7f:e4:
c2:23:86:dc:d9:82:98:32:a6:c1:a8:c4:25:ed:1d:72:3d:c3:
96:e3:51:75:a7:a0:9c:ae:b0:a5:d1:9d:3f:e4:91:69:09:16:
ec:b6:9d:60:7f:04:b8:d4:52:8d:7e:b0:27:6f:69:eb:89:57:
54:0a:fb:28:b2:5a:2b:b9:48:f2:b9:26:4f:ac:d3:6f:c2:70:
34:bd:3c:fd:38:e3:05:23:f3:1b:89:bb:4b:fa:15:87:7b:4c:
fa:a0:58:99:7d:70:05:47:a4:ca:0f:1e:cb:de:96:0b:44:02:
6e:38:e1:90:69:69:5b:bd:36:cd:78:38:1d:66:9d:a6:d8:19:
bd:66:c2:3e:ba:9f:a2:80:a9:d8:79:95:73:89:81:4f:5c:55:
c5:60:93:f7:cb:55:ae:10:a3:bc:14:1f:0f:bb:8e:52:ba:5f:
aa:97:2f:a0:e1:54:27:38:ec:ac:53:0b:30:f9:ec:55:cb:ba:
c8:f5:c1:6e:05:95:b6:be:4d:1e:a8:b9:fc:2e:68:b5:c0:a8:
49:06:2e:e8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ1nWMwA5xwA/LqVQ33IsP9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OGI0NDNlOTkyYzY2NTY1ODk0MmU2ODkwZDI5OGQ2OGNk
ZTY0MjUwHhcNMjYwNDA3MDk0OTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzJiMmIyMmYxYTk5MWFlN2VlNDMyYTlhMzgxZDc2NTU2Zjg1NGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk5nv2zda+djNI7p/urA53LU+SVB
mhkm1RxrTceHJXPLkYH7IQAkSjgGdHUEdZUTrYfBN28rrVblFyxvruC23CxiVsi6
fEs0KHQQh/m/Aer26rQn34EVCjPQ6iujEhnoqzeaXwtVGuyq/h1vBOfNDjS5HZHF
nLY1/cv5MRWr+9iSpVKLx5OhPMl/UMWmnXQDHyIPWGB0Y1sifD0bfItyA+jNXdAl
7yFCkkZoENH8KP9y/wOIdsii1gdGvYVIYD4wnQQ+4tYPq59fMv29ob4gu+B8MgHn
HzVBJEwaXA1z/R//d2xLBa7S7oeyUHYT8LKWRUQQk1VJ1jSPOkv/weRQmQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFCMrKyLxqZGufuQyqaOB12VW+FTEMB8GA1UdIwQY
MBaAFPiLRD6ZLGZWWJQuaJDSmNaM3mQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JdEVQcGtzWmxaWWxDNW9rTktZMW96ZVpDVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYmZiNTQyLTRmNjctNDZjNS05NzEw
LTY5NDI1MmYwMjlmMS8xL0l5c3JJdkdwa2E1LTVES3BvNEhYWlZiNFZNUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvYmZiNTQyLTRmNjctNDZjNS05NzEwLTY5NDI1MmYwMjlm
MS8xLzEtSXRFUHBrc1psWllsQzVva05LWTFvemVaQ1UuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOAYIKwYBBQUHAQcBAf8EKTAnMBQEAgABMA4wDAMEAFD4
jQMEAFD4jjAPBAIAAjAJAwcEKhL9wAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAUAZ+7
QIoGpW0q9tCTeF5u7bIPGU+NLNdVVjlbATVMJ2wafzH26cPdVWDbNe5V88R+eaEk
f+TCI4bc2YKYMqbBqMQl7R1yPcOW41F1p6CcrrCl0Z0/5JFpCRbstp1gfwS41FKN
frAnb2nriVdUCvsosloruUjyuSZPrNNvwnA0vTz9OOMFI/MbibtL+hWHe0z6oFiZ
fXAFR6TKDx7L3pYLRAJuOOGQaWlbvTbNeDgdZp2m2Bm9ZsI+up+igKnYeZVziYFP
XFXFYJP3y1WuEKO8FB8Pu45Sul+qly+g4VQnOOysUwsw+exVy7rI9cFuBZW2vk0e
qLn8Lmi1wKhJBi7o
-----END CERTIFICATE-----
Generated at Sat Apr 11 11:45:12 2026 by rpki-client