Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/ivio5KeVWRux6XlRxWuFL231juo.roa
File: ivio5KeVWRux6XlRxWuFL231juo.roa (raw, json)
Hash identifier: Em/PVIA83JxuedRO9ip2PoK/WCsTEwUOVUS8akfMdh8=
Subject key identifier: 8A:F8:A8:E4:A7:95:59:1B:B1:E9:79:51:C5:6B:85:2F:6D:F5:8E:EA
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019FB37B62CD8E1123DC07FC54D1348347FD
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/ivio5KeVWRux6XlRxWuFL231juo.roa
Signing time: Thu 30 Jul 2026 14:43:55 +0000
ROA not before: Thu 30 Jul 2026 14:43:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 22
2.58.146.0/23 maxlen: 23
2.59.116.0/24 maxlen: 24
45.12.46.0/23 maxlen: 23
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.92.212.0/22 maxlen: 22
45.95.140.0/22 maxlen: 22
45.130.204.0/22 maxlen: 22
45.136.60.0/22 maxlen: 22
45.145.192.0/22 maxlen: 22
45.151.204.0/22 maxlen: 22
45.152.40.0/22 maxlen: 22
79.99.140.0/22 maxlen: 22
91.239.15.0/24 maxlen: 24
103.82.160.0/22 maxlen: 22
153.56.192.0/21 maxlen: 21
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.157.123.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
194.99.66.0/23 maxlen: 23
212.52.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:7b:62:cd:8e:11:23:dc:07:fc:54:d1:34:83:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jul 30 14:43:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8af8a8e4a795591bb1e97951c56b852f6df58eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:b5:ad:0e:4d:e5:c2:e1:a3:fa:d3:8d:ff:
78:9a:ce:95:83:58:6f:ec:dc:85:8d:8e:70:d8:a5:
8a:cf:51:03:27:19:42:25:86:e9:ec:19:c9:96:5a:
63:2a:cc:54:71:1e:c5:4c:8f:e7:af:0e:05:97:4a:
b5:cc:a3:7a:dc:67:49:08:c7:68:18:5b:ca:3d:87:
dd:e1:69:3f:ba:57:19:90:36:68:3b:62:77:68:a3:
e6:eb:2d:ac:41:42:b0:80:c4:c5:86:dc:01:2a:cc:
4a:7d:fb:8e:cc:f3:2f:71:82:f9:cb:da:59:4d:83:
b4:1c:5c:26:8b:8a:c3:71:03:2c:70:a3:72:a8:71:
52:c6:71:c1:ad:f5:0e:b3:67:17:e0:50:3e:45:f7:
b8:ad:52:e2:64:25:fb:a0:ea:5a:ff:7e:fd:da:e0:
88:7d:ff:b7:1f:32:5b:bc:07:f3:0c:ec:d2:77:45:
57:d2:a9:bd:ef:35:f5:9f:f1:fa:89:3e:b4:17:96:
84:1f:6f:c5:62:c4:9e:e7:7e:24:1f:f3:52:c1:c3:
a2:84:80:30:6a:0b:3b:27:c7:f7:a7:b9:1c:18:61:
2b:76:d2:72:82:84:d7:f0:2e:d0:92:7d:66:28:92:
f1:51:8c:bf:41:b8:de:6b:3b:1b:dc:9c:99:a5:fa:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:A8:E4:A7:95:59:1B:B1:E9:79:51:C5:6B:85:2F:6D:F5:8E:EA
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/ivio5KeVWRux6XlRxWuFL231juo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.58.146.0/23
2.59.116.0/24
45.12.46.0/23
45.67.44.0/22
45.86.192.0/22
45.92.212.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
45.152.40.0/22
79.99.140.0/22
91.239.15.0/24
103.82.160.0/22
153.56.192.0/21
185.39.11.0/24
185.57.176.0/22
185.157.123.0/24
185.232.89.0/24
194.99.66.0/23
212.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ff:b7:73:57:ae:b1:b6:a8:a2:dd:72:1f:f0:5a:78:fb:e4:
e8:1a:ef:59:ee:79:a2:64:84:67:ae:8c:6d:c3:b8:78:21:72:
b0:ba:97:94:23:de:f6:47:b8:c1:e3:b2:ab:fb:6f:12:61:d8:
63:cb:7b:91:33:e6:c6:88:21:f8:3e:72:a7:5e:7d:c1:2f:fa:
bf:2a:dd:88:75:02:8d:09:fa:c0:08:c5:f5:17:7f:19:53:47:
4f:c9:6e:08:24:54:5e:dd:cf:29:5c:d4:97:22:b0:e8:9a:ae:
12:97:5f:6d:1f:fb:c5:8b:39:17:50:a8:89:4b:19:2f:39:7a:
e9:c8:77:8e:e0:66:ca:39:ce:af:7b:26:cd:2f:e0:a3:bf:31:
ff:cf:bd:6e:90:85:e7:9e:8e:be:67:2e:ea:2b:d9:36:17:b1:
25:3c:42:2c:84:fe:77:fe:ad:0d:54:4b:f9:a1:11:24:c4:98:
25:b0:d5:54:27:1c:27:f4:e6:1b:e3:15:d0:49:97:da:99:28:
0c:99:99:22:ee:60:16:12:87:e0:51:7c:98:96:c5:db:57:84:
97:fd:f6:6c:26:45:67:77:27:7d:93:4f:2e:00:fc:7e:86:47:
95:5a:a7:3c:b7:68:11:5d:ec:b8:56:ae:08:3e:7d:61:5b:f5:
b5:fb:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:51 2026 by rpki-client