Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/IJAySIrj88My47LJGVkAc9rZDtY.roa
File: IJAySIrj88My47LJGVkAc9rZDtY.roa (raw, json)
Hash identifier: an1H6uRWsmTvyleV0pswewslnipkuBrqpFXZ8x8RXI4=
Subject key identifier: 20:90:32:48:8A:E3:F3:C3:32:E3:B2:C9:19:59:00:73:DA:D9:0E:D6
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236943F7C8E92910B90C600EEE582FA3
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/IJAySIrj88My47LJGVkAc9rZDtY.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62164
IP address blocks: 5.181.164.0/22 maxlen: 22
5.181.164.0/23 maxlen: 23
5.181.167.0/24 maxlen: 24
45.11.88.0/22 maxlen: 22
45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
45.81.150.0/24 maxlen: 24
45.92.29.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
185.191.228.0/23 maxlen: 23
185.191.231.0/24 maxlen: 24
185.199.224.0/23 maxlen: 23
185.199.226.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
185.215.148.0/24 maxlen: 24
185.218.235.0/24 maxlen: 24
185.235.14.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
212.162.148.0/22 maxlen: 22
2a0b:aac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:f7:c8:e9:29:10:b9:0c:60:0e:ee:58:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=209032488ae3f3c332e3b2c919590073dad90ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:39:dd:04:56:cd:99:64:73:6d:74:ee:40:
91:79:06:9a:17:f9:eb:5b:ce:88:66:9f:d8:15:0f:
17:2c:a6:79:54:d0:ba:9a:cd:d0:d1:be:00:9d:87:
f3:53:5d:42:52:80:cd:bf:a6:44:6a:9e:13:c1:c5:
13:05:7a:5d:bb:69:cb:d8:a1:5e:17:94:98:84:8d:
65:8c:49:af:22:8f:fd:d5:0b:1a:80:ec:f7:82:58:
0e:8a:20:79:91:3a:1a:05:93:d3:04:9b:5c:e0:a4:
21:f1:56:31:4c:81:07:c7:76:f4:3a:7e:68:53:3a:
8c:1f:9c:30:43:c9:f5:d5:d6:33:db:95:11:0b:23:
b6:5e:5d:25:f2:d8:09:b7:6d:98:10:01:e9:cf:d8:
52:6a:ff:02:52:66:35:c1:58:50:db:28:20:47:a9:
b1:45:63:af:da:49:37:ef:2b:49:9a:e0:13:4f:cb:
de:74:30:2f:80:ab:ef:99:7f:e5:8c:3f:b3:6d:0c:
f0:66:8d:03:7b:2a:83:2f:b6:63:d0:59:4f:d9:39:
38:bc:b2:b0:81:bb:fc:3e:f7:63:ac:f1:18:3f:09:
55:1a:1c:65:4b:7c:f4:44:c0:44:d5:55:33:90:58:
b7:86:67:ac:9c:fb:15:fb:ba:a3:ca:2d:f6:3b:9f:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:32:48:8A:E3:F3:C3:32:E3:B2:C9:19:59:00:73:DA:D9:0E:D6
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/IJAySIrj88My47LJGVkAc9rZDtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/22
45.11.88.0/22
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.149.232.0/22
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0-185.202.174.255
185.215.148.0/24
185.218.235.0/24
185.235.14.0/23
193.39.184.0/22
212.162.148.0/22
IPv6:
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
20:dd:5d:2e:2e:95:d3:dc:9c:52:ee:78:33:7d:92:12:22:21:
1f:34:d5:c5:78:61:4b:f2:6b:7a:67:7d:be:a7:0c:05:d3:49:
27:89:91:8d:4e:f5:3e:bd:c4:7e:00:e6:f4:93:c8:ac:89:dd:
37:2b:52:e6:d0:bd:8d:71:a0:6b:be:59:b9:3d:65:50:08:43:
62:17:39:09:5d:e4:ed:4e:58:1e:25:fc:7c:ec:95:75:c1:60:
f7:8a:0e:5e:07:ad:8f:ab:33:a5:c3:19:d6:dd:57:7e:7f:9e:
c2:e4:cc:3a:30:fe:97:05:45:4c:ae:36:43:f5:e3:f3:f9:0a:
61:b4:be:bd:1d:67:28:50:79:e1:cb:e7:53:f8:6d:c2:c4:d1:
91:53:43:ea:e3:c4:a8:e6:69:75:c5:a7:30:1f:39:75:3e:b0:
a6:94:00:18:1f:c3:7e:9f:c1:87:76:c9:c7:31:b4:52:01:0f:
30:d0:4c:04:6c:9c:d9:7e:4f:89:e9:f5:e4:e1:a4:ea:e7:bd:
69:d6:22:a7:7c:09:aa:22:34:a2:62:14:31:10:32:22:29:13:
b2:bd:da:96:ce:19:b4:17:40:62:1e:64:4a:9e:02:3c:cd:12:
03:bd:f6:19:e5:29:93:8a:55:25:e2:ee:4c:65:08:10:29:d1:
c2:09:75:5b
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ8jaUP3yOkpELkMYA7uWC+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli
MjQ0NzcwHhcNMjYwNzAyMTUxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDkwMzI0ODhhZTNmM2MzMzJlM2IyYzkxOTU5MDA3M2RhZDkwZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqU53QRWzZlkc2107kCReQaaF/nr
W86IZp/YFQ8XLKZ5VNC6ms3Q0b4AnYfzU11CUoDNv6ZEap4TwcUTBXpdu2nL2KFe
F5SYhI1ljEmvIo/91QsagOz3glgOiiB5kToaBZPTBJtc4KQh8VYxTIEHx3b0On5o
UzqMH5wwQ8n11dYz25URCyO2Xl0l8tgJt22YEAHpz9hSav8CUmY1wVhQ2yggR6mx
RWOv2kk37ytJmuATT8vedDAvgKvvmX/ljD+zbQzwZo0DeyqDL7Zj0FlP2Tk4vLKw
gbv8PvdjrPEYPwlVGhxlS3z0RMBE1VUzkFi3hmesnPsV+7qjyi32O5/rsQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFCCQMkiK4/PDMuOyyRlZAHPa2Q7WMB8GA1UdIwQY
MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvSUpBeVNJcmo4OE15NDdMSkdWa0FjOXJaRHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwAwQCBbWk
AwQCLQtYAwQALVGWAwQALVwdAwQBVdFUAwQAVdFXAwQCuZXoAwQBub/kAwQAub/n
MAwDBAW5x+ADBAC5x+IwDAMEArnKrAMEALnKrgMEALnXlAMEALna6wMEAbnrDgME
AsEnuAMEAtSilDANBAIAAjAHAwUDKguqwDANBgkqhkiG9w0BAQsFAAOCAQEAIN1d
Li6V09ycUu54M32SEiIhHzTVxXhhS/Jremd9vqcMBdNJJ4mRjU71Pr3EfgDm9JPI
rIndNytS5tC9jXGga75ZuT1lUAhDYhc5CV3k7U5YHiX8fOyVdcFg94oOXgetj6sz
pcMZ1t1Xfn+ewuTMOjD+lwVFTK42Q/Xj8/kKYbS+vR1nKFB54cvnU/htwsTRkVND
6uPEqOZpdcWnMB85dT6wppQAGB/Dfp/Bh3bJxzG0UgEPMNBMBGyc2X5Pien15OGk
6ue9adYip3wJqiI0omIUMRAyIikTsr3als4ZtBdAYh5kSp4CPM0SA732GeUpk4pV
JeLuTGUIECnRwgl1Ww==
-----END CERTIFICATE-----
Generated at Wed Jul 8 13:59:31 2026 by rpki-client