Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ivofh3BfKNYkrV_x7fmbYGuvXjM.roa
File: ivofh3BfKNYkrV_x7fmbYGuvXjM.roa (raw, json)
Hash identifier: LpXlOorV5fsOtklxfHWBYJ4QON3qB8PGpptoyb818zw=
Subject key identifier: 8A:FA:1F:87:70:5F:28:D6:24:AD:5F:F1:ED:F9:9B:60:6B:AF:5E:33
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A01F4D3688E83A2F2C65BA43C92684E893
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ivofh3BfKNYkrV_x7fmbYGuvXjM.roa
Signing time: Thu 20 Aug 2026 13:12:28 +0000
ROA not before: Thu 20 Aug 2026 13:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.20.4.0/22 maxlen: 22
2.20.109.0/24 maxlen: 24
2.20.110.0/24 maxlen: 24
2.20.112.0/22 maxlen: 22
2.20.242.0/24 maxlen: 24
2.20.252.0/24 maxlen: 24
2.21.2.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.21.100.0/22 maxlen: 22
2.22.216.0/22 maxlen: 22
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.78.0/24 maxlen: 24
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:4d:36:88:e8:3a:2f:2c:65:ba:43:c9:26:84:e8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 20 13:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8afa1f87705f28d624ad5ff1edf99b606baf5e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:fe:bf:23:8f:61:0f:c7:4c:a6:62:19:63:
e7:c3:a5:7a:45:74:dd:7d:1d:96:15:72:7d:19:2a:
6a:22:b9:77:b7:79:e6:37:c5:bf:30:bb:f3:75:e1:
92:73:08:0f:fc:df:34:57:8f:fa:fe:96:f8:db:00:
bc:c8:85:78:9d:b2:54:cf:08:8e:cc:36:90:a3:6e:
51:a8:af:f0:f1:31:bd:7f:0f:2e:76:06:06:59:5b:
d8:12:7e:b7:72:fb:0f:e9:58:cf:1d:5c:45:b7:d4:
39:bf:5f:f4:0a:12:bf:a9:31:59:9d:67:85:c4:19:
6e:21:7c:c2:d9:cd:90:03:f3:b5:85:e8:17:8a:9f:
74:32:1c:6c:78:1e:98:03:a2:e1:02:85:67:2a:3d:
da:61:2e:22:0d:c1:e0:ef:dd:9d:8c:ed:6c:10:c6:
a9:53:a3:a8:2f:80:0c:29:88:35:12:86:83:fc:2c:
be:94:8d:b8:94:d0:56:8d:90:34:33:a6:64:64:f9:
44:64:94:82:d3:9f:2c:6c:93:77:54:7c:a6:b6:11:
45:70:18:7b:03:00:b6:43:44:ff:67:d5:40:0d:f5:
26:6b:fb:54:c9:84:ff:5e:d7:b6:80:d1:38:6d:e9:
05:6e:a5:56:2d:96:6d:13:ac:89:e7:49:14:cb:1e:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:1F:87:70:5F:28:D6:24:AD:5F:F1:ED:F9:9B:60:6B:AF:5E:33
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ivofh3BfKNYkrV_x7fmbYGuvXjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.20.4.0/22
2.20.109.0-2.20.110.255
2.20.112.0/22
2.20.242.0/24
2.20.252.0/24
2.21.2.0/24
2.21.14.0/24
2.21.100.0/22
2.22.216.0/22
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.78.0/24
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
8c:4e:2e:2e:da:5a:59:77:36:cd:37:32:2a:99:1f:e2:b4:0e:
2e:12:e1:a1:fc:86:49:70:57:8a:26:17:b0:15:c8:f6:e6:3c:
18:33:f8:9f:f5:5b:6b:a3:6e:ad:90:41:1d:80:59:08:00:9c:
ee:53:57:b9:96:79:a4:81:d7:e8:4f:20:67:f0:5c:53:e5:5f:
bb:bb:7c:56:0a:bd:36:ba:e3:47:f9:7e:9a:3e:f6:46:1c:f4:
43:6b:b3:25:df:cc:9f:ac:10:dd:f1:14:26:34:83:83:16:c7:
ac:73:7f:a2:85:b0:0c:17:5d:fa:f1:db:0d:76:b9:0d:98:ed:
80:ce:9e:fa:47:69:f7:02:11:df:ee:0f:8a:25:b4:9e:c1:83:
b4:37:92:a1:1d:14:f7:c3:f0:fa:47:e1:da:4d:d9:80:29:be:
40:2b:20:0b:ab:50:9c:80:63:d3:56:83:f6:37:d4:66:06:fa:
5c:3b:ee:d9:75:ed:ed:42:07:14:b3:bf:78:9e:82:03:25:7f:
7d:69:82:81:18:8d:c4:17:bf:5e:eb:06:72:22:0b:01:83:fd:
cc:9e:e8:6d:8a:78:22:49:96:c8:f9:f1:35:7e:ae:c4:ae:57:
ee:32:a2:1d:3f:59:3f:8c:27:61:00:7a:19:44:fe:e2:45:2c:
1d:8b:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:24 2026 by rpki-client