Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iu1jPb_IOIO9_Y5JFQZTsCbKCMU.roa
File: iu1jPb_IOIO9_Y5JFQZTsCbKCMU.roa (raw, json)
Hash identifier: s8rdIZ+FtrgIhdcC9lRMTS3VYMkXN3sF7sSMGtwELZE=
Subject key identifier: 8A:ED:63:3D:BF:C8:38:83:BD:FD:8E:49:15:06:53:B0:26:CA:08:C5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A047BCD7644C349FEEC5106CF5186B16F3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iu1jPb_IOIO9_Y5JFQZTsCbKCMU.roa
Signing time: Fri 28 Aug 2026 09:39:13 +0000
ROA not before: Fri 28 Aug 2026 09:39:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207550
IP address blocks: 217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:bc:d7:64:4c:34:9f:ee:c5:10:6c:f5:18:6b:16:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 28 09:39:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aed633dbfc83883bdfd8e49150653b026ca08c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:64:5e:71:05:6c:f5:40:f2:87:de:6a:03:
6c:c9:ee:d9:d2:58:ec:b8:04:cd:b8:24:2c:8f:b4:
a1:b4:fb:90:70:ee:04:9e:63:10:5c:c9:9e:4a:6d:
f6:c7:fa:6d:5a:5a:a3:f8:83:fe:aa:bb:72:83:74:
e2:d4:52:d6:74:68:48:40:5a:c9:56:ce:c2:25:11:
c7:fc:a2:8a:13:a5:9e:c2:63:7e:78:7f:bb:1e:4b:
eb:cb:61:e2:11:32:5f:c0:3d:33:25:ec:30:14:ca:
40:a0:cc:86:2c:76:fa:49:89:e5:7b:4b:64:2d:08:
52:e8:d8:c5:2a:72:4c:2a:93:b1:ae:4a:0a:98:47:
93:42:b9:05:d9:a2:94:8c:b2:07:86:6f:fb:b0:16:
24:28:4c:48:a7:56:9b:31:b8:bf:2b:23:d8:44:8e:
65:77:93:5f:a1:58:b9:f1:7d:59:b3:64:24:9b:c8:
84:50:9f:3a:99:a5:fe:2f:12:5b:1f:53:9b:23:4c:
b1:a9:60:af:b8:7b:44:29:4c:77:ac:f6:70:4d:b2:
43:13:3f:42:20:ff:53:39:65:68:9e:9c:ca:39:f7:
0b:33:a6:87:94:6d:70:c5:ff:e7:00:91:f7:1d:32:
80:98:00:b3:00:07:9e:f7:b2:9a:76:29:f5:48:90:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:63:3D:BF:C8:38:83:BD:FD:8E:49:15:06:53:B0:26:CA:08:C5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iu1jPb_IOIO9_Y5JFQZTsCbKCMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:10:71:25:7c:9b:7b:5c:2d:f5:12:ff:96:6f:f6:eb:49:1e:
de:95:01:22:bd:5b:e0:90:dd:df:19:55:36:5b:77:3f:14:70:
6b:70:23:ce:80:87:12:cc:15:ff:78:57:9a:66:bb:c7:a4:36:
5c:85:e2:8f:e9:cc:98:05:70:ec:37:48:70:7f:31:b8:b4:de:
49:68:c8:f0:ea:a2:a9:32:a7:ac:1c:be:ed:06:d7:7d:cb:d4:
ee:af:46:92:9d:82:37:80:0d:9a:01:b9:82:df:61:42:1a:42:
d8:eb:25:ee:b3:a3:a4:11:dc:ed:38:fc:5e:90:c8:d0:96:ac:
61:80:cb:af:23:a8:06:b6:fc:8a:d6:85:f8:1b:52:60:65:75:
e9:d6:ee:f1:5c:8f:93:41:39:d5:f2:c9:fe:e7:69:19:05:9c:
eb:d4:89:f0:7a:f4:2b:8c:59:c8:b8:46:b7:47:4b:a4:28:ba:
00:35:d7:cd:0e:dd:90:93:a2:48:5b:09:9a:7b:07:6c:56:36:
dc:d6:d8:ab:ea:22:db:31:ed:da:c8:fb:97:5c:77:f0:27:f6:
ec:04:99:ea:cf:cd:13:be:76:09:2a:77:78:71:34:06:83:87:
d0:2d:e3:b6:90:28:bc:3f:31:ac:e4:da:65:5a:75:63:b0:ab:
94:c9:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:14 2026 by rpki-client