Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa
File: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (raw, json)
Hash identifier: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=
Subject key identifier: 3E:2E:AE:4F:43:03:C7:11:E5:7A:8D:FF:C9:92:B1:74:7C:BC:A2:ED
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A039319D29FF8702AF30A6E21182411194
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa
Signing time: Tue 25 Aug 2026 13:52:27 +0000
ROA not before: Tue 25 Aug 2026 13:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 72.63.0.0/22 maxlen: 22
72.63.28.0/22 maxlen: 22
72.63.60.0/22 maxlen: 22
72.63.92.0/22 maxlen: 22
72.63.124.0/22 maxlen: 22
72.63.156.0/22 maxlen: 22
72.63.188.0/22 maxlen: 22
72.63.220.0/22 maxlen: 22
189.81.22.0/23 maxlen: 23
189.81.46.0/23 maxlen: 23
205.188.21.0/24 maxlen: 24
205.188.164.0/22 maxlen: 22
205.188.170.0/23 maxlen: 23
205.188.172.0/22 maxlen: 22
205.188.180.0/23 maxlen: 23
205.188.182.0/23 maxlen: 23
205.188.184.0/22 maxlen: 22
205.188.188.0/22 maxlen: 22
205.188.192.0/22 maxlen: 22
205.188.200.0/22 maxlen: 22
205.188.204.0/23 maxlen: 23
205.188.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:31:9d:29:ff:87:02:af:30:a6:e2:11:82:41:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 25 13:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e2eae4f4303c711e57a8dffc992b1747cbca2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:33:c4:b7:7c:b5:99:71:1c:d5:53:16:24:
06:34:6f:cb:4a:e4:82:bc:f8:db:16:7f:2c:3d:ae:
4b:0b:da:9e:8f:e9:b0:f3:8d:c2:0d:ec:25:25:92:
7d:64:84:86:d8:c8:f7:6f:1a:0b:d3:c4:3e:9a:73:
bf:cb:ff:88:e2:69:f3:5d:24:7e:cd:b1:8d:0a:15:
a9:a3:9f:c0:bc:45:27:f4:b9:c8:c6:e0:fc:03:f8:
11:a5:7c:43:e4:76:15:66:42:ed:2c:fd:a8:6b:11:
31:ee:3d:66:39:61:76:19:6e:02:45:29:56:64:e2:
3e:08:13:f3:c4:0a:ba:27:91:5b:e8:ec:7e:b9:e9:
af:22:c4:35:69:35:8c:f0:b3:4b:e7:41:92:cd:10:
1f:5a:09:55:2b:be:75:37:5d:75:8e:b5:db:0e:13:
d1:95:64:45:2e:aa:55:63:d9:67:41:ff:e7:d6:e0:
68:cf:11:c0:71:c1:e8:5c:72:2c:46:7f:9d:be:ee:
68:03:8c:5f:a1:a1:af:9b:31:6c:ee:4a:40:c3:34:
9b:e4:c4:93:6d:86:66:45:6e:80:a6:08:0d:7f:1d:
52:b1:6d:81:90:81:ba:0b:48:43:df:80:7f:77:c1:
3f:c4:19:7f:83:f5:88:62:01:13:fd:2f:0d:14:6c:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:AE:4F:43:03:C7:11:E5:7A:8D:FF:C9:92:B1:74:7C:BC:A2:ED
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.0.0/22
72.63.28.0/22
72.63.60.0/22
72.63.92.0/22
72.63.124.0/22
72.63.156.0/22
72.63.188.0/22
72.63.220.0/22
189.81.22.0/23
189.81.46.0/23
205.188.21.0/24
205.188.164.0/22
205.188.170.0-205.188.175.255
205.188.180.0-205.188.195.255
205.188.200.0/21
Signature Algorithm: sha256WithRSAEncryption
00:e6:76:82:76:c0:e3:10:bd:3c:92:3f:ad:3c:3f:cd:25:29:
e1:1b:54:af:8e:ed:8a:df:b8:6e:2d:77:19:f4:fc:b4:49:b1:
e7:7e:60:69:b4:7b:c6:24:41:3e:a4:87:a1:3c:d6:0d:d6:35:
f0:3f:7e:07:79:f5:7c:42:9b:17:47:33:af:15:80:c2:e5:82:
d5:cd:19:11:7e:11:a9:5f:1a:da:39:5a:64:95:c1:70:06:0d:
ea:3e:f4:36:f1:7b:d6:5e:7b:5e:42:83:61:f2:29:ef:dc:c9:
58:97:54:49:18:df:e7:0d:1d:f6:22:4c:1d:dd:b3:50:4b:e8:
93:32:b7:53:64:c9:a4:97:6d:6b:8e:72:4b:43:5c:52:ef:27:
9c:48:6b:1c:aa:2c:84:0d:83:6f:6d:70:87:3a:be:18:2f:80:
d8:13:a6:9e:70:63:5e:fa:b6:95:b8:ee:e5:2a:b8:e4:8b:5c:
f4:fc:ee:80:71:c3:aa:8e:87:aa:e6:0f:0d:c9:c6:4c:24:20:
1e:c2:90:d8:b8:b3:05:b1:86:65:61:ae:a4:02:17:c8:2a:1f:
f3:48:50:90:8c:a9:9b:7f:ff:87:f6:48:a6:a1:26:66:8c:cb:
6f:29:d5:9c:25:c7:92:54:8a:b2:29:3a:e5:ad:17:8f:25:e2:
41:f0:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:55 2026 by rpki-client