Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/HSoISsJ-isLr8N_DHmCBMl3TpWs.roa
File: HSoISsJ-isLr8N_DHmCBMl3TpWs.roa (raw, json)
Hash identifier: eFtDBlD8d0dAnIzoz+b3NcMyduLIBF9yLf8ySSSmIvA=
Subject key identifier: 1D:2A:08:4A:C2:7E:8A:C2:EB:F0:DF:C3:1E:60:81:32:5D:D3:A5:6B
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019E842C2A6417DBC77A2985B910856E3097
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/HSoISsJ-isLr8N_DHmCBMl3TpWs.roa
Signing time: Mon 01 Jun 2026 17:12:27 +0000
ROA not before: Mon 01 Jun 2026 17:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22065
IP address blocks: 141.137.224.0/24 maxlen: 24
155.204.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:2c:2a:64:17:db:c7:7a:29:85:b9:10:85:6e:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jun 1 17:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d2a084ac27e8ac2ebf0dfc31e6081325dd3a56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:e9:2e:54:53:45:8a:de:0f:fe:0c:da:df:
1e:ae:2f:7f:18:4b:93:2a:5d:b5:65:c4:c4:21:05:
8b:9b:1b:4f:d4:af:7a:21:12:96:1b:6d:ff:90:13:
3b:b1:a6:51:8e:fc:c2:af:ca:93:3a:be:f4:8d:34:
e4:c9:a0:02:fe:f1:85:eb:7e:37:b6:3b:bc:f0:75:
e2:52:97:d6:72:9c:ad:12:c9:e5:cb:15:0a:d3:08:
f2:94:31:47:a9:a6:b8:ee:80:44:39:ce:c0:8e:45:
2b:e5:73:a1:64:09:e5:e9:cd:36:fd:05:a2:de:23:
a3:47:41:e4:1e:a8:ec:f6:b7:35:54:03:d9:00:fe:
b3:65:15:cf:ad:f9:08:6d:06:a2:2a:07:0d:97:1f:
06:46:70:f3:f9:43:b4:d1:68:c7:03:9c:79:f6:14:
06:ef:cf:d0:85:ab:e8:aa:84:b4:5c:f3:bc:7d:e1:
4c:f8:69:5f:11:48:06:58:43:26:e2:26:ac:eb:fe:
9c:3c:13:d1:f9:09:8b:d4:32:47:ab:be:97:f0:31:
7e:7b:9e:fe:19:e7:cd:93:1a:25:9d:93:38:eb:a4:
40:65:05:c1:8e:2b:cc:54:ff:99:bb:ae:36:cd:48:
9d:25:70:3e:c8:ac:cc:9d:51:a5:45:36:1c:a9:ab:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:08:4A:C2:7E:8A:C2:EB:F0:DF:C3:1E:60:81:32:5D:D3:A5:6B
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/HSoISsJ-isLr8N_DHmCBMl3TpWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.224.0/24
155.204.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:11:d1:10:e7:07:9c:3a:59:36:87:69:fe:69:ac:22:61:61:
94:6a:da:87:6d:05:83:a4:e9:b2:18:bb:ae:ea:bf:26:06:e8:
d0:d1:74:e4:f1:ae:a9:9d:85:95:22:a3:5a:59:6a:71:42:e3:
e5:73:3b:2b:a5:b5:95:ec:ca:36:4c:3c:71:79:34:0c:80:bc:
68:d8:4e:f1:d6:5b:85:b0:01:d0:58:f4:7f:64:ce:7a:7d:59:
ec:a5:2e:3f:05:54:39:fa:46:9d:1c:80:0b:29:31:af:81:b8:
bf:23:99:93:0b:c0:0e:84:da:3f:8a:0e:a8:9f:bb:ef:6e:4d:
1d:69:2d:72:1a:e2:00:53:d0:19:29:4f:9b:a3:16:66:b2:6a:
e3:de:9f:e3:8b:b5:6d:c0:dd:f7:de:08:d6:80:34:16:d5:e0:
17:c5:b7:c4:66:de:5d:b0:62:26:58:ef:52:3a:e1:61:66:81:
0e:ea:eb:fb:92:43:91:8f:f9:3b:00:0f:00:b3:53:fb:d0:7c:
0a:95:6c:fe:1b:97:6e:e0:e9:5f:17:f7:01:d9:c2:4b:74:9b:
79:cb:c0:d9:aa:8c:9a:c4:b2:46:17:99:41:5e:92:7c:bf:79:
c4:50:07:69:31:18:51:a6:d5:2c:66:70:bb:fe:70:24:b8:35:
88:9d:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:46:04 2026 by rpki-client