Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/iI-JIIREyrVCRNSoJRI3rD8eag0.roa
File: iI-JIIREyrVCRNSoJRI3rD8eag0.roa (raw, json)
Hash identifier: zF9D3W/DKJlql6on+FQS1/CzfYptHarWetavG7c7Vrw=
Subject key identifier: 88:8F:89:20:84:44:CA:B5:42:44:D4:A8:25:12:37:AC:3F:1E:6A:0D
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01A120D9A2833A4CA6D9C6CCD92D781BCC54
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/iI-JIIREyrVCRNSoJRI3rD8eag0.roa
Signing time: Fri 09 Oct 2026 13:28:16 +0000
ROA not before: Fri 09 Oct 2026 13:28:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.64.0/20 maxlen: 24
79.141.64.0/24 maxlen: 24
79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
92.242.62.0/23 maxlen: 23
92.255.62.0/23 maxlen: 24
109.172.96.0/22 maxlen: 22
130.49.208.0/22 maxlen: 22
136.234.124.0/23 maxlen: 23
185.42.164.0/22 maxlen: 24
185.193.90.0/23 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:d9:a2:83:3a:4c:a6:d9:c6:cc:d9:2d:78:1b:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Oct 9 13:28:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=888f89208444cab54244d4a8251237ac3f1e6a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:7c:f2:86:4c:bf:08:48:3f:67:e9:53:b8:
59:52:c2:06:17:bb:e0:16:84:a0:66:f2:ae:55:48:
6d:fa:06:e3:60:fb:cd:26:a2:5c:2e:b9:aa:37:a5:
cc:7e:95:dd:b5:80:09:5d:44:4a:7c:07:46:b1:e4:
23:d5:7c:6f:00:84:c3:26:51:a9:d5:aa:7a:f9:7a:
18:fe:e2:19:56:68:19:ad:91:4f:ac:16:b9:91:77:
0c:5e:2a:75:c5:b7:28:78:d9:ae:62:be:00:fc:bb:
35:99:43:74:bf:32:9b:30:f9:c8:f4:12:76:22:fd:
ce:90:7a:25:26:f0:e1:5f:f1:c0:22:ed:e4:f6:08:
8e:be:7b:e8:c3:cb:58:5e:02:e8:96:35:46:e2:d5:
49:ce:23:9e:8a:d4:b2:56:bc:c8:b4:06:73:58:bd:
a2:15:a1:70:0a:b3:53:ca:60:30:16:c5:ed:04:a2:
74:80:d4:1d:dc:62:20:ff:44:c3:69:3f:5a:e8:41:
14:19:52:ca:02:d9:d4:2a:63:e3:ed:68:c9:92:f4:
9e:89:03:ef:5d:a5:50:96:52:84:2d:72:a8:1a:79:
0f:ee:3e:54:7c:99:be:e0:1b:82:a0:60:4e:bd:01:
d6:a7:8f:19:c5:ef:e3:de:16:c5:6c:5a:09:2f:4b:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:89:20:84:44:CA:B5:42:44:D4:A8:25:12:37:AC:3F:1E:6A:0D
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/iI-JIIREyrVCRNSoJRI3rD8eag0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.64.0/20
92.242.62.0/23
92.255.62.0/23
109.172.96.0/22
130.49.208.0/22
136.234.124.0/23
185.42.164.0/22
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:de:22:30:d2:eb:88:75:60:f5:8f:57:ac:d3:05:f5:18:e8:
53:44:41:37:c3:39:a0:99:45:14:7d:ea:a4:44:dc:19:9d:d4:
a4:96:0f:7b:80:e8:24:ab:bd:7c:a4:d1:6f:3e:8d:6b:4c:a9:
c1:82:7d:68:e0:b6:49:3e:47:24:e9:40:de:44:9d:8a:c4:7f:
e5:a5:8e:81:ac:aa:d2:fe:e7:97:d4:ff:ba:34:fa:75:3b:fe:
5b:95:c1:15:c0:ae:8c:ac:e5:b1:5b:d1:1d:f2:0c:e0:04:b5:
8c:3b:2b:5f:03:01:49:ea:a3:91:a3:9c:c3:52:23:81:c5:ce:
69:61:4d:ce:ae:64:b7:e4:ee:65:63:df:f2:06:0c:86:21:5f:
88:97:ba:70:ab:58:75:97:3b:0e:66:ef:01:2d:ef:39:6f:83:
46:a8:06:13:71:25:6d:81:06:e7:12:1f:59:ce:66:1c:84:84:
28:14:76:fc:7e:38:93:95:1f:1c:b7:60:a1:a0:28:0e:65:df:
d2:f5:60:0d:35:10:1a:4d:a0:c9:bf:36:44:da:89:36:0e:30:
3a:89:ae:df:63:73:00:20:be:75:a5:ea:e6:42:43:5e:96:47:
67:81:8e:13:95:8f:7f:bb:52:54:ae:8c:68:fc:39:04:36:16:
1b:78:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:31 2026 by rpki-client