Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SZu55x7en_czyZkzfAyJFpU244Y.roa
File: SZu55x7en_czyZkzfAyJFpU244Y.roa (raw, json)
Hash identifier: OzvmzSsqolBamLC2DAGFHbq89A4Q/ST8nHE6ANWH5N4=
Subject key identifier: 49:9B:B9:E7:1E:DE:9F:F7:33:C9:99:33:7C:0C:89:16:95:36:E3:86
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A0ED57F442F9601BCCFD1F197B832B6D40
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SZu55x7en_czyZkzfAyJFpU244Y.roa
Signing time: Tue 29 Sep 2026 13:25:59 +0000
ROA not before: Tue 29 Sep 2026 13:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 189.81.196.0/23 maxlen: 23
189.81.244.0/23 maxlen: 23
189.104.54.0/23 maxlen: 23
189.104.80.0/23 maxlen: 23
189.104.118.0/23 maxlen: 23
189.104.148.0/23 maxlen: 23
189.104.164.0/23 maxlen: 23
189.104.208.0/23 maxlen: 23
189.104.210.0/23 maxlen: 23
189.104.234.0/23 maxlen: 23
205.188.80.0/22 maxlen: 22
205.188.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:57:f4:42:f9:60:1b:cc:fd:1f:19:7b:83:2b:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Sep 29 13:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=499bb9e71ede9ff733c999337c0c89169536e386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:ca:be:af:50:6f:1c:09:b9:44:eb:9b:05:
cf:6f:67:d1:f8:b8:e5:13:1f:8a:a4:f0:10:da:a6:
4a:47:2a:ca:c6:e3:d4:a8:d2:e4:5c:54:dc:d0:b5:
8c:6b:4c:1a:f3:15:1c:87:2f:36:7f:23:11:79:ba:
ce:1c:bc:48:2b:71:95:65:19:62:04:2b:2c:65:b6:
5a:0a:4c:c4:78:a5:1e:ae:6a:49:7b:35:e5:3c:5b:
8c:84:2f:c2:ee:fd:9a:cc:0e:f0:fc:0d:78:48:aa:
48:08:90:f7:57:f1:06:2d:32:7a:e4:a3:e3:e9:29:
7f:08:3d:bc:75:7c:a3:c4:70:90:22:63:f3:65:98:
fb:1f:d4:a4:d0:10:c5:72:cb:50:a6:81:7e:5b:30:
f7:11:93:16:43:aa:80:22:44:c7:58:d4:34:02:b6:
5e:a5:75:dc:94:a0:e0:23:16:0e:80:cd:7c:d5:5f:
bd:f1:65:6e:e9:25:fe:20:b6:c2:ef:e8:db:e6:c1:
61:51:c7:77:3f:26:14:64:70:b9:43:06:d8:6f:38:
14:ba:f2:8c:66:83:7b:55:13:db:f3:a6:0e:41:0e:
20:67:a2:f9:4c:98:05:88:ba:73:92:33:6d:ae:36:
29:5e:30:c4:0c:d0:d6:f7:91:a8:ed:60:00:11:32:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9B:B9:E7:1E:DE:9F:F7:33:C9:99:33:7C:0C:89:16:95:36:E3:86
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SZu55x7en_czyZkzfAyJFpU244Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.196.0/23
189.81.244.0/23
189.104.54.0/23
189.104.80.0/23
189.104.118.0/23
189.104.148.0/23
189.104.164.0/23
189.104.208.0/22
189.104.234.0/23
205.188.80.0/22
205.188.224.0/22
Signature Algorithm: sha256WithRSAEncryption
18:fc:05:23:a2:18:7b:9d:18:c6:3e:42:2a:b0:f7:da:4a:3f:
6a:a6:ed:16:6b:73:4b:75:7d:a6:9f:4e:00:17:a9:50:02:2b:
22:84:f8:86:43:cd:cb:d5:51:2b:c4:99:37:e4:f0:69:b0:a0:
69:49:e9:05:cf:2a:6a:c3:f3:72:aa:9b:c3:77:d3:09:7b:e2:
51:4b:58:fa:1a:01:aa:90:12:ed:ec:77:5e:5b:01:7b:0e:80:
7c:b7:8b:a8:a7:1a:97:77:cc:b1:43:11:35:7e:71:87:a1:62:
f6:9f:fc:cd:87:43:ef:6e:fb:8c:e9:2f:e8:a3:da:26:59:1b:
96:41:62:66:8c:58:1c:a4:80:49:6c:77:e9:2b:7d:d5:e8:6b:
fc:96:a4:be:fa:76:05:4e:bf:2d:29:c4:86:29:fa:7d:f9:96:
a0:9f:ae:df:94:7d:2e:62:2a:94:b9:db:9d:4e:a3:11:24:93:
e1:32:2f:30:a9:5c:bb:76:03:8c:b2:aa:94:bc:8d:00:1e:4e:
a9:61:0c:24:dc:c6:84:4e:ac:2e:cd:96:c5:0c:6c:3f:f7:1e:
d5:27:73:ac:d6:d4:63:bb:9a:35:2d:a4:b4:58:3a:b9:a0:f6:
13:d7:12:b5:1e:cf:82:b7:2a:37:cd:a7:d0:a6:bf:b5:1d:4d:
03:7d:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:57 2026 by rpki-client