Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa
File: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (raw, json)
Hash identifier: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=
Subject key identifier: 20:8D:59:56:0E:9F:1D:EE:CC:D2:F9:B6:4C:0F:6F:DD:7F:26:0B:AA
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019E827B1EE1451EE4911EA07A1329D9581A
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa
Signing time: Mon 01 Jun 2026 09:19:27 +0000
ROA not before: Mon 01 Jun 2026 09:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47223
IP address blocks: 91.106.24.0/23 maxlen: 23
91.106.27.0/24 maxlen: 24
91.106.30.0/23 maxlen: 23
94.240.0.0/24 maxlen: 24
94.240.1.0/24 maxlen: 24
94.240.2.0/24 maxlen: 24
94.240.3.0/24 maxlen: 24
94.240.4.0/24 maxlen: 24
94.240.7.0/24 maxlen: 24
94.240.23.0/24 maxlen: 24
94.240.32.0/21 maxlen: 21
94.240.32.0/23 maxlen: 23
94.240.34.0/24 maxlen: 24
94.240.35.0/24 maxlen: 24
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/22 maxlen: 22
94.240.48.0/24 maxlen: 24
94.240.50.0/24 maxlen: 24
94.240.51.0/24 maxlen: 24
94.240.62.0/23 maxlen: 23
94.240.63.0/24 maxlen: 24
185.139.16.0/22 maxlen: 22
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:7b:1e:e1:45:1e:e4:91:1e:a0:7a:13:29:d9:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jun 1 09:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208d59560e9f1deeccd2f9b64c0f6fdd7f260baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:ce:18:c4:73:62:be:7d:67:44:f0:70:89:
91:7e:6f:68:e0:37:16:8e:a5:40:dc:ab:26:e4:f8:
93:58:54:21:38:c9:1c:70:cd:71:f0:de:93:c6:09:
0b:10:c7:f2:69:ea:3b:23:21:ec:da:f6:46:92:0a:
69:fc:5d:ab:c0:b8:b3:8f:8b:de:ee:12:1c:53:d0:
8b:0b:7c:95:f1:ae:47:f0:db:36:d5:e1:21:f2:68:
81:e3:af:a0:a0:e3:fa:0c:8e:68:67:b4:51:ed:06:
03:9f:42:44:b0:48:83:77:f9:bd:f7:88:0c:e3:19:
44:4c:19:eb:53:74:fa:8d:be:a4:6a:b2:8c:b0:91:
44:17:b7:19:5b:44:72:64:dc:84:8d:2b:11:82:b2:
c5:34:af:ec:1c:c2:81:80:dd:28:f3:1e:84:70:2b:
31:91:38:05:2b:52:d7:7b:23:dc:73:26:e1:9f:c0:
e0:ab:20:85:77:b0:e1:e4:13:fa:b4:a1:33:1a:a2:
89:2e:da:a5:41:5d:b4:40:60:93:b8:a4:f5:c4:31:
6f:c7:1c:b4:c2:51:11:63:a6:95:02:30:a5:1a:3f:
42:22:2d:ad:87:2d:50:cc:0b:57:44:f5:15:a3:82:
56:1a:1a:c1:59:02:5e:4f:ea:8c:51:9f:15:43:25:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:59:56:0E:9F:1D:EE:CC:D2:F9:B6:4C:0F:6F:DD:7F:26:0B:AA
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/23
91.106.27.0/24
91.106.30.0/23
94.240.0.0-94.240.4.255
94.240.7.0/24
94.240.23.0/24
94.240.32.0-94.240.40.255
94.240.42.0/24
94.240.44.0-94.240.51.255
94.240.62.0/23
185.139.16.0/22
194.152.46.0/23
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
39:75:08:9f:95:36:58:0f:56:5f:2b:76:e7:78:f9:90:11:46:
c9:c1:bb:fa:45:57:b8:47:98:50:e1:d1:97:3b:56:fe:fc:e5:
f8:aa:ae:6b:60:7f:3f:58:93:ff:d3:0c:8a:53:a9:7d:cc:e6:
52:0d:5a:4b:1b:3d:02:9e:06:8e:1d:ef:3d:10:ab:b3:ac:be:
35:eb:17:d5:07:57:72:40:84:82:5a:ee:b4:64:7f:f5:19:ad:
d4:6c:88:af:0b:9a:0a:af:04:c7:3f:0b:1b:38:9c:81:a3:df:
f8:1f:e5:ef:bb:9d:0a:fc:cc:de:7d:10:cf:e6:93:f3:8c:5f:
74:05:2f:99:fe:51:e5:e1:ab:c7:80:6f:31:10:3b:6b:b3:d4:
b6:9b:fb:7b:f1:3b:34:11:8d:e8:c1:39:34:ef:f0:82:b6:3b:
19:4f:f6:e0:a2:9f:58:02:94:aa:db:16:2b:d4:ee:4a:f0:13:
28:67:ed:73:8b:fb:7a:37:d6:8c:cd:e1:c4:7a:c9:3f:4b:49:
7e:37:99:a6:bd:b1:67:b0:ad:bf:52:49:5f:d5:7b:fb:8b:01:
d6:6b:4b:01:12:82:cf:6d:61:ef:6c:b9:52:cc:54:62:33:fe:
ea:66:8f:4b:f4:f6:0c:24:f1:f7:dd:27:ae:b6:b0:77:8c:01:
a0:bc:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:22:44 2026 by rpki-client