Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/IwDwlMvs50HlF4PAAohmN44UXSM.roa
File: IwDwlMvs50HlF4PAAohmN44UXSM.roa (raw, json)
Hash identifier: ODvZqgbe4hpWWyR/6qlx9W/NEch37pqGD3Hxlxzwjqw=
Subject key identifier: 23:00:F0:94:CB:EC:E7:41:E5:17:83:C0:02:88:66:37:8E:14:5D:23
Certificate issuer: /CN=33f49fa75ae8c8fd9eea6974a1ea50cebd0c8ee7
Certificate serial: 019F236911660EA844BACEA5227DFD09D8DE
Authority key identifier: 33:F4:9F:A7:5A:E8:C8:FD:9E:EA:69:74:A1:EA:50:CE:BD:0C:8E:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_Sfp1royP2e6ml0oepQzr0Mjuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/IwDwlMvs50HlF4PAAohmN44UXSM.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34134
IP address blocks: 185.25.144.0/23 maxlen: 23
185.25.146.0/23 maxlen: 23
195.160.212.0/23 maxlen: 23
195.160.214.0/23 maxlen: 23
2a04:15c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_Sfp1royP2e6ml0oepQzr0Mjuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:11:66:0e:a8:44:ba:ce:a5:22:7d:fd:09:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f49fa75ae8c8fd9eea6974a1ea50cebd0c8ee7
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2300f094cbece741e51783c0028866378e145d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:a2:8c:38:f3:7e:48:55:a5:f0:25:a0:08:
fc:92:0d:be:f8:00:97:60:e8:78:ce:4e:f8:85:b2:
0f:c9:92:72:1c:fb:98:32:9d:ef:d5:67:dd:43:08:
3b:d8:e2:e7:b7:12:ef:48:d5:34:0e:64:62:c5:28:
08:8c:3c:8e:20:dc:f5:e9:2c:14:d6:7c:ed:38:8e:
b0:9a:8d:5f:b6:5a:f9:3e:87:f8:20:5f:05:c4:a5:
d6:64:7c:13:48:b8:06:cd:60:19:0c:7b:77:3c:96:
38:b5:9f:c4:f1:a9:89:45:de:7e:01:ac:d9:f9:50:
c8:65:76:46:f8:43:58:a9:23:03:fb:b9:68:53:59:
6d:bd:3f:ac:ac:64:ef:97:ba:82:c6:ac:e5:5b:b5:
f8:b9:4c:0c:d8:b8:8e:d5:d2:2b:98:f3:99:d5:02:
5d:a6:1d:c1:78:de:5a:8a:e3:7a:4e:d2:5b:1e:f8:
b3:00:15:83:5f:39:19:76:5a:3a:24:be:ff:df:80:
5c:aa:3d:c2:de:9f:87:52:57:df:fc:38:b1:70:b4:
d5:75:9e:5d:0e:a4:5c:e0:86:25:91:6c:5c:44:8e:
24:e0:78:d8:58:4f:21:4b:c3:f6:fc:f5:99:70:8a:
2b:76:49:d9:00:15:38:48:09:43:49:6d:87:8b:81:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:F0:94:CB:EC:E7:41:E5:17:83:C0:02:88:66:37:8E:14:5D:23
X509v3 Authority Key Identifier:
keyid:33:F4:9F:A7:5A:E8:C8:FD:9E:EA:69:74:A1:EA:50:CE:BD:0C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_Sfp1royP2e6ml0oepQzr0Mjuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/IwDwlMvs50HlF4PAAohmN44UXSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.144.0/22
195.160.212.0/22
IPv6:
2a04:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:9a:24:e0:18:22:37:e9:72:74:3f:7e:91:1c:94:bb:46:dc:
42:b5:24:fc:11:46:22:9f:72:23:0a:22:f2:9a:65:ad:de:46:
a2:64:54:9d:e2:06:59:ad:3d:89:fa:f6:a9:9e:d2:27:60:b2:
9a:4c:ea:84:6d:c9:6c:a5:8e:2c:27:8e:57:c7:cb:87:b3:64:
c1:c3:78:c6:9a:7e:a0:fb:aa:1b:8d:ea:cc:db:95:ca:0d:da:
1f:08:63:c7:38:d1:da:57:6e:7c:aa:04:dc:10:24:6a:de:0a:
cd:f5:fe:50:6b:1e:3e:fe:43:ca:a2:ff:07:26:e6:0e:07:24:
d8:a1:79:4e:d4:64:5a:1a:4d:be:d3:21:ea:11:6a:07:4a:6a:
7b:88:e6:13:70:ed:b3:2c:56:03:e4:ac:1c:32:35:81:41:79:
8b:68:a1:a9:48:ee:30:98:d0:83:38:e8:78:0d:d3:97:2d:63:
88:de:21:5e:92:21:f9:28:b3:bd:7a:d0:45:a1:dd:f8:da:d9:
4c:07:3f:50:44:27:4a:9a:65:00:7b:81:5b:93:83:f4:ba:fb:
51:d2:0f:f2:68:a0:07:82:1f:02:2d:b9:fc:00:41:b0:42:3f:
c8:ce:16:f2:ab:d0:d5:5f:7d:54:e5:88:23:e1:77:97:30:65:
22:f1:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:14 2026 by rpki-client