Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/iCAXabpGCd_wrbFC6Q7HHXtjbd4.roa
File: iCAXabpGCd_wrbFC6Q7HHXtjbd4.roa (raw, json)
Hash identifier: fvuSD8OT+kk7mQC64EnGnya0B3aCUtklezIY+XWru1A=
Subject key identifier: 88:20:17:69:BA:46:09:DF:F0:AD:B1:42:E9:0E:C7:1D:7B:63:6D:DE
Certificate issuer: /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial: 01A0EEF13156DAAE45EE8765A3E3E0CFC112
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/iCAXabpGCd_wrbFC6Q7HHXtjbd4.roa
Signing time: Tue 29 Sep 2026 20:52:59 +0000
ROA not before: Tue 29 Sep 2026 20:52:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 51.0.0.0/19 maxlen: 19
51.0.0.0/20 maxlen: 24
51.0.16.0/21 maxlen: 24
51.0.24.0/22 maxlen: 24
51.0.28.0/24 maxlen: 24
51.0.30.0/24 maxlen: 24
51.0.31.0/24 maxlen: 24
51.0.128.0/17 maxlen: 17
51.0.128.0/21 maxlen: 21
51.0.128.0/22 maxlen: 22
51.0.132.0/24 maxlen: 24
51.0.133.0/24 maxlen: 24
51.0.136.0/21 maxlen: 21
51.0.136.0/23 maxlen: 24
51.0.138.0/23 maxlen: 24
51.0.140.0/23 maxlen: 24
51.0.142.0/23 maxlen: 24
51.0.250.0/24 maxlen: 24
51.0.251.0/24 maxlen: 24
51.0.252.0/22 maxlen: 22
51.0.252.0/24 maxlen: 24
51.72.0.0/15 maxlen: 15
51.74.0.0/16 maxlen: 16
51.74.0.0/20 maxlen: 24
51.74.16.0/24 maxlen: 24
51.74.17.0/24 maxlen: 24
51.74.20.0/22 maxlen: 22
51.74.128.0/18 maxlen: 18
51.74.192.0/18 maxlen: 18
51.172.0.0/15 maxlen: 24
51.224.0.0/15 maxlen: 15
51.224.182.0/23 maxlen: 23
51.224.186.0/23 maxlen: 23
51.224.188.0/23 maxlen: 23
51.224.190.0/23 maxlen: 23
51.224.192.0/23 maxlen: 23
51.224.194.0/23 maxlen: 23
51.224.196.0/23 maxlen: 23
83.118.240.0/20 maxlen: 24
193.202.192.0/19 maxlen: 24
2001:3fc0::/29 maxlen: 29
2001:3fc0::/36 maxlen: 36
2001:3fc0:800::/40 maxlen: 40
2001:3fc0:840::/48 maxlen: 48
2001:3fc0:880::/48 maxlen: 48
2001:3fc0:8c0::/48 maxlen: 48
2001:3fc1::/32 maxlen: 32
2001:3fc1:8000::/36 maxlen: 36
2001:3fc1:8000::/38 maxlen: 38
2001:3fc1:8400::/38 maxlen: 38
2001:3fc1:8800::/38 maxlen: 38
2001:3fc1:8c00::/38 maxlen: 38
2001:3fc2::/32 maxlen: 48
2001:3fc2:8000::/36 maxlen: 48
2001:3fc3::/36 maxlen: 48
2001:3fc3:800::/40 maxlen: 48
2001:3fc3:1000::/36 maxlen: 48
2001:3fc3:2000::/36 maxlen: 36
2001:3fc3:2800::/40 maxlen: 40
2001:3fc3:3000::/36 maxlen: 36
2001:3fc3:4000::/36 maxlen: 48
2001:3fc3:5000::/36 maxlen: 48
2001:3fc3:6000::/36 maxlen: 36
2001:3fc3:6800::/40 maxlen: 40
2001:3fc3:8000::/36 maxlen: 36
2001:3fc3:8800::/40 maxlen: 40
2001:3fc3:a000::/36 maxlen: 36
2001:3fc3:a800::/40 maxlen: 40
2001:3fc4::/36 maxlen: 48
2001:3fc4:1000::/36 maxlen: 48
2001:3fc5::/36 maxlen: 48
2001:3fc5:1000::/36 maxlen: 36
2001:3fc5:1000::/40 maxlen: 40
2001:3fc5:1020::/48 maxlen: 48
2001:3fc5:1040::/48 maxlen: 48
2001:3fc5:1080::/48 maxlen: 48
2001:3fc5:2000::/36 maxlen: 36
2001:3fc5:2000::/40 maxlen: 40
2001:3fc5:2020::/48 maxlen: 48
2001:3fc5:2040::/48 maxlen: 48
2001:3fc5:2080::/48 maxlen: 48
2001:3fc5:8000::/36 maxlen: 36
2001:3fc5:8800::/40 maxlen: 40
2001:3fc5:9000::/36 maxlen: 48
2001:3fc5:9800::/40 maxlen: 48
2001:3fc6::/40 maxlen: 40
2001:3fc6:1::/48 maxlen: 48
2001:3fc6:2::/48 maxlen: 48
2001:3fc6:4::/46 maxlen: 46
2001:3fc6:8::/45 maxlen: 45
2001:3fc6:8::/47 maxlen: 48
2001:3fc6:a::/47 maxlen: 48
2001:3fc6:c::/47 maxlen: 48
2001:3fc6:e::/47 maxlen: 48
2001:3fc6:20::/43 maxlen: 43
2001:3fc6:100::/44 maxlen: 44
2001:3fc6:100::/48 maxlen: 48
2001:3fc6:200::/40 maxlen: 48
2001:3fc7::/36 maxlen: 48
2001:3fc7:1000::/36 maxlen: 36
2001:3fc7:1800::/40 maxlen: 40
2001:3fc7:2000::/36 maxlen: 36
2001:3fc7:2800::/40 maxlen: 40
2001:3fc7:2840::/48 maxlen: 48
2001:3fc7:2880::/48 maxlen: 48
2001:3fc7:28c0::/48 maxlen: 48
2001:3fc7:3000::/36 maxlen: 36
2001:3fc7:3000::/40 maxlen: 40
2001:3fc7:3000::/48 maxlen: 48
2001:3fc7:3004::/48 maxlen: 48
2001:3fc7:3008::/48 maxlen: 48
2001:3fc7:4000::/36 maxlen: 48
2001:3fc7:4800::/40 maxlen: 48
2001:3fc7:5000::/36 maxlen: 36
2001:3fc7:5800::/40 maxlen: 40
2001:3fc7:6000::/36 maxlen: 36
2001:3fc7:6800::/40 maxlen: 40
2001:3fc7:6800::/48 maxlen: 48
2001:3fc7:7000::/36 maxlen: 48
2001:3fc7:8000::/36 maxlen: 48
2001:3fc7:9000::/36 maxlen: 48
2001:3fc7:a000::/36 maxlen: 48
2001:3fc7:b000::/36 maxlen: 48
2001:3fc7:c000::/36 maxlen: 48
2001:3fc7:e000::/36 maxlen: 48
2001:3fc7:f000::/36 maxlen: 36
2001:3fc7:f400::/40 maxlen: 40
2001:3fc7:f440::/48 maxlen: 48
2001:3fc7:f480::/48 maxlen: 48
2001:3fc7:f800::/40 maxlen: 40
2001:3fc7:f840::/48 maxlen: 48
2001:3fc7:f880::/48 maxlen: 48
2001:3fc7:f8c0::/48 maxlen: 48
2a0e:9780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f1:31:56:da:ae:45:ee:87:65:a3:e3:e0:cf:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
Validity
Not Before: Sep 29 20:52:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88201769ba4609dff0adb142e90ec71d7b636dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:aa:10:22:69:26:2b:77:02:73:60:39:09:
44:a0:32:d3:54:5a:5c:e5:c3:dc:e3:8d:49:5a:91:
a1:d3:5f:05:28:b6:9b:b9:50:ad:ca:f0:74:cf:56:
1f:bd:bd:f3:a6:4e:ca:98:f0:9c:57:f7:d3:28:dc:
1f:d0:c2:a0:3e:cf:e1:76:e0:85:8b:55:97:49:a6:
90:71:31:ee:91:da:21:0b:91:2d:8a:e7:43:5a:19:
eb:56:50:49:28:69:d4:e0:5f:b6:e8:06:d9:df:2d:
5d:3f:c9:e7:0b:7f:f0:d9:df:bf:57:51:52:80:61:
57:87:b9:33:16:f1:4e:87:24:af:9c:60:c7:bf:96:
34:ba:8c:f2:3f:1a:b0:70:8b:c7:02:43:72:75:82:
1b:60:71:5f:d5:27:5b:26:8e:fa:df:bb:bd:53:00:
bd:36:23:f8:6d:bb:60:9f:d2:4b:e3:8f:e0:98:68:
75:70:ae:ec:0b:49:7f:49:b7:ef:60:0c:42:87:f4:
0f:88:df:0a:e5:b0:59:68:50:11:7e:cc:7a:1d:a9:
0d:15:3a:e6:6f:5c:f1:24:18:01:12:45:30:65:4e:
22:71:d3:48:fa:fd:a5:3f:7d:0d:62:e8:1f:76:08:
48:34:32:97:2d:2f:21:46:20:f9:72:22:ad:a2:e5:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:17:69:BA:46:09:DF:F0:AD:B1:42:E9:0E:C7:1D:7B:63:6D:DE
X509v3 Authority Key Identifier:
keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/iCAXabpGCd_wrbFC6Q7HHXtjbd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/19
51.0.128.0/17
51.72.0.0-51.74.255.255
51.172.0.0/15
51.224.0.0/15
83.118.240.0/20
193.202.192.0/19
IPv6:
2001:3fc0::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
32:e7:c9:2c:9e:5b:0c:ee:76:7f:4a:58:b8:65:42:1f:78:00:
d4:d2:98:49:6d:8e:9f:78:a4:3c:7e:b4:2b:d5:2b:95:27:16:
67:aa:2a:1c:b9:8e:e4:a2:d0:42:82:35:b7:d3:d4:75:18:fa:
0e:5e:9b:f7:ed:af:ae:d0:f6:18:8a:bd:76:b6:de:4b:a8:60:
3b:93:8b:38:e6:d5:d3:62:08:02:60:a9:6f:89:0c:50:17:f1:
4f:b9:af:00:39:1c:c6:51:c0:10:77:6a:30:9b:f0:e2:c7:64:
fb:f5:4e:be:f0:c7:c2:a7:98:9c:7c:ec:7a:7a:e8:16:33:19:
d3:55:2e:c9:8c:10:01:d9:bf:4c:43:71:89:8c:a4:dc:a4:85:
a9:0b:dc:1a:8d:82:54:27:2d:b0:ee:4d:59:7a:f7:c1:54:e8:
38:29:1d:8c:5d:03:80:3e:2d:01:ad:0d:85:f9:20:78:fe:04:
4b:84:bf:d3:e1:72:6e:3e:e4:7c:97:36:c2:32:39:d3:8d:bf:
1a:26:10:4d:25:ab:ab:88:4c:98:1c:c5:0e:86:e3:da:5d:94:
b5:f0:1c:e6:83:42:00:a7:fa:c3:83:a6:04:49:ad:9a:10:3d:
17:be:1b:63:cf:54:bb:8c:58:a6:18:d0:51:45:21:81:fc:0e:
05:05:2b:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:59:06 2026 by rpki-client