Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/iYs6otweT346LHVOYHzhPWvIhMs.roa
File: iYs6otweT346LHVOYHzhPWvIhMs.roa (raw, json)
Hash identifier: zrCOc/ookzjTFAmPkuf91TVAeL6hEkpEfk5tUgwqn4c=
Subject key identifier: 89:8B:3A:A2:DC:1E:4F:7E:3A:2C:75:4E:60:7C:E1:3D:6B:C8:84:CB
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019E72AAA97D3A3C48CADAC486E14636C73B
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/iYs6otweT346LHVOYHzhPWvIhMs.roa
Signing time: Fri 29 May 2026 07:37:27 +0000
ROA not before: Fri 29 May 2026 07:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215826
IP address blocks: 194.59.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:aa:a9:7d:3a:3c:48:ca:da:c4:86:e1:46:36:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 29 07:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=898b3aa2dc1e4f7e3a2c754e607ce13d6bc884cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:c8:f4:c8:d1:9f:47:d9:55:4b:e3:dc:17:
79:0a:1d:c1:8c:d5:ab:83:53:96:af:fc:ff:81:e3:
fd:ef:26:30:8e:f2:ac:a0:bd:ca:86:e9:2d:ed:e4:
a3:f7:83:dd:66:f8:42:91:7b:88:cb:b2:6c:bd:32:
4b:de:72:65:34:f6:bc:aa:bd:03:52:50:94:06:71:
62:1b:48:93:7d:ed:d5:22:d7:9d:8f:e7:cc:d3:9b:
b9:18:55:0d:3a:8e:a9:8b:72:28:3e:c9:bc:91:9d:
6a:f5:51:ae:91:6f:4f:3b:70:46:b4:9b:4a:1d:d3:
9b:a0:02:8d:71:aa:51:0a:24:05:a0:a3:76:54:a0:
61:72:0a:20:f7:d1:86:f6:ff:bf:92:ea:b7:07:4b:
b0:c0:20:da:8a:25:99:d1:4b:ca:88:d3:3f:a6:5b:
3b:be:c1:e6:9f:2c:6a:cc:7d:30:7f:60:60:76:df:
03:ad:da:b4:04:ea:e2:65:38:f7:33:57:38:93:0d:
53:5f:fc:15:4e:84:b2:dd:f9:ee:5c:0a:07:97:1a:
95:28:3d:b9:5a:41:4c:82:dd:e4:f6:16:28:cb:bc:
36:17:b4:1a:1e:d9:a7:69:1a:63:ec:a7:74:ce:32:
8b:8e:96:94:ba:fa:9b:10:5e:e3:3c:82:d8:d7:e6:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:3A:A2:DC:1E:4F:7E:3A:2C:75:4E:60:7C:E1:3D:6B:C8:84:CB
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/iYs6otweT346LHVOYHzhPWvIhMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
62:58:27:a4:38:11:4e:30:98:a9:e8:10:a2:91:db:fc:aa:f5:
6f:2a:fe:0e:c0:b8:74:c9:25:a5:c1:66:01:81:09:f2:ac:1f:
d1:09:b6:d8:e3:94:0c:82:4e:92:65:90:52:1c:30:5c:58:a6:
4d:1d:2e:1c:73:15:a7:06:78:5a:5a:f8:be:4d:7c:e3:63:00:
13:70:65:fe:09:41:f5:12:eb:ac:f4:c6:43:9d:2b:5e:87:b6:
08:58:1a:30:04:1e:b6:5c:9e:7c:23:fc:62:7b:1a:96:76:5f:
34:04:c8:91:86:52:78:12:cb:4f:34:d9:9a:cf:85:e8:ad:97:
58:e2:2c:cc:34:13:0b:7d:88:79:7b:f7:b3:6a:cb:77:a1:1b:
bc:8e:ef:66:81:f4:ef:ae:6b:63:0e:fd:2e:48:d0:a1:fc:9c:
97:07:6a:d2:da:fb:64:ae:57:95:4c:fd:04:d0:f9:eb:41:cf:
17:63:d7:6e:44:dd:88:df:1c:0e:d9:a9:7b:79:fb:c1:dc:36:
7f:4c:ba:46:66:a8:8c:a8:e3:3b:43:c6:23:a1:39:0a:03:b9:
cc:11:a7:55:4d:6a:3e:57:a3:b5:5c:57:ac:d6:02:d6:2a:a6:
85:a6:f6:ba:a8:91:60:f6:2a:d8:5b:86:71:c3:e7:59:9d:ca:
16:f8:9d:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5yqql9OjxIytrEhuFGNsc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjYwNTI5MDczNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OThiM2FhMmRjMWU0ZjdlM2EyYzc1NGU2MDdjZTEzZDZiYzg4NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3I9MjRn0fZVUvj3Bd5Ch3BjNWr
g1OWr/z/geP97yYwjvKsoL3Khukt7eSj94PdZvhCkXuIy7JsvTJL3nJlNPa8qr0D
UlCUBnFiG0iTfe3VItedj+fM05u5GFUNOo6pi3IoPsm8kZ1q9VGukW9PO3BGtJtK
HdOboAKNcapRCiQFoKN2VKBhcgog99GG9v+/kuq3B0uwwCDaiiWZ0UvKiNM/pls7
vsHmnyxqzH0wf2Bgdt8Drdq0BOriZTj3M1c4kw1TX/wVToSy3fnuXAoHlxqVKD25
WkFMgt3k9hYoy7w2F7QaHtmnaRpj7Kd0zjKLjpaUuvqbEF7jPILY1+aCowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImLOqLcHk9+Oix1TmB84T1ryITLMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvaVlzNm90d2VUMzQ2TEhWT1lIemhQV3ZJaE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwju6MA0G
CSqGSIb3DQEBCwUAA4IBAQBiWCekOBFOMJip6BCikdv8qvVvKv4OwLh0ySWlwWYB
gQnyrB/RCbbY45QMgk6SZZBSHDBcWKZNHS4ccxWnBnhaWvi+TXzjYwATcGX+CUH1
Euus9MZDnSteh7YIWBowBB62XJ58I/xiexqWdl80BMiRhlJ4EstPNNmaz4XorZdY
4izMNBMLfYh5e/ezast3oRu8ju9mgfTvrmtjDv0uSNCh/JyXB2rS2vtkrleVTP0E
0PnrQc8XY9duRN2I3xwO2al7efvB3DZ/TLpGZqiMqOM7Q8YjoTkKA7nMEadVTWo+
V6O1XFes1gLWKqaFpva6qJFg9irYW4Zxw+dZncoW+J3V
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:14:39 2026 by rpki-client