Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/20yIMbSGNvnLZ_Ss9rvfo6bl08M.roa
File: 20yIMbSGNvnLZ_Ss9rvfo6bl08M.roa (raw, json)
Hash identifier: KEiEUaadsNTYxGa9A1mD4IKXF7NOktFIYUD/DqgdGRw=
Subject key identifier: DB:4C:88:31:B4:86:36:F9:CB:67:F4:AC:F6:BB:DF:A3:A6:E5:D3:C3
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 019EF50A54E9CBF96536FE08E5D9045576B5
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/20yIMbSGNvnLZ_Ss9rvfo6bl08M.roa
Signing time: Tue 23 Jun 2026 15:12:35 +0000
ROA not before: Tue 23 Jun 2026 15:12:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.0.0/23 maxlen: 24
195.242.7.0/24 maxlen: 24
195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
195.242.23.0/24 maxlen: 24
2a13:5940::/32 maxlen: 32
2a13:5945:7::/48 maxlen: 48
2a13:5945:c::/48 maxlen: 48
2a13:5945:22::/48 maxlen: 48
2a13:5945:43::/48 maxlen: 48
2a13:5947::/40 maxlen: 48
2a13:5947:130::/48 maxlen: 48
2a13:5947:150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:0a:54:e9:cb:f9:65:36:fe:08:e5:d9:04:55:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Jun 23 15:12:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db4c8831b48636f9cb67f4acf6bbdfa3a6e5d3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:18:3a:8d:71:34:47:20:9b:6f:b0:08:ce:
10:9a:99:c2:78:81:4a:c1:67:a8:5b:fb:dc:b2:50:
f6:02:25:71:bc:40:b7:0c:78:6c:b8:a5:70:e8:5b:
92:bb:62:93:15:f0:26:f5:f1:49:f0:c5:16:ac:c7:
35:ee:5e:84:08:53:c1:71:4d:e7:2d:20:94:2b:43:
7c:2a:68:aa:69:f8:60:77:da:db:67:7e:a7:fb:80:
a0:3c:7d:c5:28:55:71:c4:30:d3:b8:ed:9a:cd:8e:
52:45:c4:06:e6:e2:e5:79:e4:c8:60:0a:65:99:f1:
4b:7a:96:b8:17:55:74:6c:76:b4:7a:5b:ad:32:1f:
92:3d:46:bd:b3:d8:f9:2b:d1:5c:f6:d2:35:83:dd:
63:93:ca:f5:63:a6:00:9c:64:61:8b:e0:dc:e4:66:
38:93:57:b4:e1:7c:f3:66:e2:b7:16:47:07:2e:00:
c0:17:4d:63:63:28:41:fc:24:c6:b3:a9:31:2b:0d:
f0:eb:cf:8d:51:b1:3a:e9:44:d6:d4:e1:29:13:26:
b4:af:79:8f:74:0f:51:60:7f:29:7b:9e:ee:78:d3:
54:11:f7:b8:6e:3f:76:d2:34:0b:75:9f:85:cf:b4:
24:9b:f2:8f:0a:32:16:0b:c9:a5:f7:b1:2c:f6:8a:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:88:31:B4:86:36:F9:CB:67:F4:AC:F6:BB:DF:A3:A6:E5:D3:C3
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/20yIMbSGNvnLZ_Ss9rvfo6bl08M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.0.0/23
195.242.7.0-195.242.31.255
IPv6:
2a13:5940::/32
2a13:5945:7::/48
2a13:5945:c::/48
2a13:5945:22::/48
2a13:5945:43::/48
2a13:5947::/40
2a13:5947:130::/48
2a13:5947:150::/48
Signature Algorithm: sha256WithRSAEncryption
0e:ac:21:6e:c2:46:46:02:df:3f:6b:fe:8b:78:62:bc:98:67:
ac:f9:75:d3:f5:dd:c7:1b:96:e3:45:18:8f:5d:aa:4d:c0:82:
5b:5b:c9:39:49:de:85:13:b4:23:ac:b3:ad:84:09:a5:63:d5:
3d:b5:db:44:4f:6e:b9:17:7d:c9:51:61:5d:a4:ba:36:62:56:
51:cb:6f:61:6a:31:8e:9d:f2:6b:6b:30:68:55:48:f1:6b:84:
86:6a:fe:00:0b:d6:66:f3:67:e2:0f:e8:e1:30:6d:36:8a:6b:
f0:c2:99:db:6f:7d:ed:a7:9a:bf:8c:1b:fe:e8:81:e8:c3:7b:
e9:e4:4e:87:70:38:ad:8a:a2:0f:c6:d6:01:9e:1f:82:e3:bd:
d4:82:42:73:0c:28:45:19:c1:0c:16:33:0d:be:30:f8:85:4b:
62:92:f3:16:b4:ad:a1:55:ed:6f:60:dc:38:b5:4f:f5:ac:6c:
00:ca:e6:b0:60:b1:b8:6d:33:12:ad:c8:ef:22:a2:a7:79:ff:
32:06:9f:b4:02:ca:4c:99:53:8e:dc:08:1d:b4:f7:9d:a2:66:
a2:aa:ea:6a:40:1d:10:68:29:c5:7d:1c:7a:d3:00:8e:64:7e:
98:a2:9c:4d:a4:41:9e:73:5b:b0:08:9c:0b:ea:0c:cb:52:1b:
17:1e:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:26:53 2026 by rpki-client