Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/iSjarq4NNlQRklz6q-Hs_fVz_vU.roa
File: iSjarq4NNlQRklz6q-Hs_fVz_vU.roa (raw, json)
Hash identifier: Q+/NKcHbybuXzkuY6W3yZnp3OXIeAFYvEvg8gCJy6DE=
Subject key identifier: 89:28:DA:AE:AE:0D:36:54:11:92:5C:FA:AB:E1:EC:FD:F5:73:FE:F5
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 019EDF82233FDCE5D64FC4ED4A9DAAF93CFB
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/iSjarq4NNlQRklz6q-Hs_fVz_vU.roa
Signing time: Fri 19 Jun 2026 10:51:48 +0000
ROA not before: Fri 19 Jun 2026 10:51:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3327
IP address blocks: 62.128.100.0/22 maxlen: 22
62.128.100.0/23 maxlen: 23
62.128.102.0/23 maxlen: 23
62.128.104.0/21 maxlen: 21
62.128.104.0/23 maxlen: 23
62.128.106.0/24 maxlen: 24
62.128.112.0/20 maxlen: 20
62.128.113.0/24 maxlen: 24
62.128.126.0/24 maxlen: 24
87.98.0.0/18 maxlen: 18
87.98.64.0/19 maxlen: 19
87.98.124.0/22 maxlen: 22
87.98.125.0/24 maxlen: 24
89.219.0.0/24 maxlen: 24
89.219.3.0/24 maxlen: 24
89.219.128.0/22 maxlen: 22
89.219.134.0/23 maxlen: 23
89.219.136.0/21 maxlen: 21
89.219.144.0/21 maxlen: 21
89.219.152.0/23 maxlen: 23
89.219.154.0/24 maxlen: 24
89.219.161.0/24 maxlen: 24
89.219.162.0/24 maxlen: 24
89.219.168.0/24 maxlen: 24
195.222.0.0/19 maxlen: 19
195.222.16.0/24 maxlen: 24
212.27.224.0/19 maxlen: 19
212.27.226.0/24 maxlen: 24
212.27.227.0/24 maxlen: 24
212.27.228.0/24 maxlen: 24
212.27.231.0/24 maxlen: 24
212.27.232.0/24 maxlen: 24
212.47.192.0/19 maxlen: 19
212.49.0.0/19 maxlen: 19
212.49.24.0/24 maxlen: 24
217.28.240.0/20 maxlen: 20
217.28.243.0/24 maxlen: 24
217.28.244.0/22 maxlen: 22
217.28.244.0/24 maxlen: 24
217.28.245.0/24 maxlen: 24
217.28.246.0/24 maxlen: 24
217.28.247.0/24 maxlen: 24
217.28.248.0/24 maxlen: 24
217.28.249.0/24 maxlen: 24
217.28.251.0/24 maxlen: 24
217.28.254.0/24 maxlen: 24
2001:ad0::/32 maxlen: 32
2001:ad0:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:82:23:3f:dc:e5:d6:4f:c4:ed:4a:9d:aa:f9:3c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Jun 19 10:51:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8928daaeae0d365411925cfaabe1ecfdf573fef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:17:8c:ba:1e:2e:e6:fd:24:9c:9f:f4:32:
f9:1b:50:41:bc:fd:be:d3:90:96:77:eb:14:b8:db:
32:72:4b:ed:de:b9:fb:62:18:5d:4c:75:5e:31:22:
c8:a0:22:12:dd:5f:e3:3f:e2:87:0f:1b:ff:97:5a:
7d:b1:db:24:3f:ca:b7:f8:7c:4e:05:bf:f4:dc:5c:
8b:eb:0a:d1:73:48:af:8f:bf:ea:2e:e0:fc:17:cd:
d6:14:c9:b9:bc:e3:62:86:f0:12:90:b4:96:a8:d9:
23:f1:24:6d:7a:8c:69:b4:6f:e0:e0:2a:f3:3f:24:
6a:e8:34:4d:d7:5f:94:32:c6:87:5f:b1:e5:31:3f:
58:44:bf:27:36:9b:9b:87:fa:f9:ad:db:f5:93:06:
f7:ff:fc:e1:d3:a0:0f:d0:80:fa:fc:d0:b8:64:07:
b4:40:25:39:75:98:41:72:63:a2:a6:26:f0:80:4d:
a4:d3:e9:69:fe:b7:f2:b3:bd:99:c3:5e:74:ce:86:
f2:12:c0:9b:5d:39:54:fd:90:2c:4a:2c:8f:41:2e:
44:96:d5:08:58:01:25:cf:da:96:41:3e:5c:99:e7:
d3:23:d0:e7:a8:6b:1a:45:c8:9e:e8:6f:4c:a9:3c:
55:33:b9:22:8b:7c:3c:b9:22:3e:cb:43:f4:35:c7:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:28:DA:AE:AE:0D:36:54:11:92:5C:FA:AB:E1:EC:FD:F5:73:FE:F5
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/iSjarq4NNlQRklz6q-Hs_fVz_vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.128.100.0-62.128.127.255
87.98.0.0-87.98.95.255
87.98.124.0/22
89.219.0.0/24
89.219.3.0/24
89.219.128.0/22
89.219.134.0-89.219.154.255
89.219.161.0-89.219.162.255
89.219.168.0/24
195.222.0.0/19
212.27.224.0/19
212.47.192.0/19
212.49.0.0/19
217.28.240.0/20
IPv6:
2001:ad0::/32
Signature Algorithm: sha256WithRSAEncryption
88:c3:65:d8:13:a9:fd:78:41:36:9f:0a:4d:c6:c9:25:0b:4f:
e4:c4:3e:d4:fe:d4:61:72:e9:c2:90:22:ff:aa:9d:fe:60:3c:
94:07:a0:31:20:0c:36:ef:f6:96:e4:c8:55:3b:26:3f:59:1f:
59:a4:b3:70:4b:64:01:7e:47:cd:ba:50:2f:a8:b6:da:e0:05:
80:8e:da:40:73:47:c7:19:58:c8:f1:2b:36:f0:8e:02:70:ed:
f4:27:94:05:3b:9b:c7:f5:bc:66:63:0a:3c:1a:83:d2:85:8d:
7c:98:c4:fb:bc:0f:16:71:83:9f:8d:a1:d2:22:fc:6a:95:85:
39:df:e1:ec:7f:16:94:21:92:26:87:77:3e:7e:b4:1f:d8:67:
34:4c:19:7a:0e:40:6d:94:ab:d0:70:74:72:7c:7f:3f:5c:8d:
dc:73:d0:a8:3c:5e:65:92:7c:8a:7c:fd:2a:ea:ed:4f:59:05:
f8:93:ca:0b:a2:91:e2:ed:65:bf:b0:13:99:57:02:c7:6e:89:
eb:f2:92:57:7e:9d:4f:91:bd:12:96:47:b2:7b:1a:4f:d4:24:
cb:c1:e3:54:0b:06:41:7f:fb:c1:12:d4:1a:41:9a:4b:a1:30:
85:e8:34:8d:29:fa:ce:a7:00:b0:02:4e:5f:bd:4c:8a:2c:16:
dd:86:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:36 2026 by rpki-client