Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/IX_ALwyZI_cUgPQIwi0ZUhE9ngc.roa
File: IX_ALwyZI_cUgPQIwi0ZUhE9ngc.roa (raw, json)
Hash identifier: QCyhc8X7FsvPDoxMQiD+opeU+fYwmdaOARjEWbTLJNw=
Subject key identifier: 21:7F:C0:2F:0C:99:23:F7:14:80:F4:08:C2:2D:19:52:11:3D:9E:07
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 019F14CA65BE07A3BD9E90EE7BA9E2B9A1B1
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/IX_ALwyZI_cUgPQIwi0ZUhE9ngc.roa
Signing time: Mon 29 Jun 2026 19:10:36 +0000
ROA not before: Mon 29 Jun 2026 19:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 45.74.158.0/24 maxlen: 24
45.74.159.0/24 maxlen: 24
91.228.227.0/24 maxlen: 24
158.94.216.0/24 maxlen: 24
176.97.219.0/24 maxlen: 24
217.11.164.0/24 maxlen: 24
217.11.165.0/24 maxlen: 24
2a01:f900::/29 maxlen: 48
2a01:f900:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:ca:65:be:07:a3:bd:9e:90:ee:7b:a9:e2:b9:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Jun 29 19:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217fc02f0c9923f71480f408c22d1952113d9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:00:22:a2:5f:50:8a:12:39:66:a9:d5:2b:
ea:25:4d:ec:1f:81:73:9e:81:c5:f5:a5:b3:d7:1c:
c5:ab:03:3a:0c:2c:46:d8:0d:33:9b:e6:ae:62:ce:
bc:b7:35:61:01:a5:8e:6c:0f:46:06:c1:e8:d6:85:
01:f4:64:42:b2:2f:2e:46:73:65:53:26:ff:15:06:
36:43:84:69:88:53:16:c3:4e:46:cd:4b:25:9d:c7:
31:62:c3:59:44:b4:76:f6:91:06:16:08:35:7a:8f:
d8:34:82:8b:81:e1:73:76:ef:db:e7:1a:f4:9f:71:
3d:8f:e6:14:1f:63:14:3c:09:f9:72:0e:0e:db:68:
13:6d:95:55:ca:26:1f:74:ff:30:3a:81:50:1e:2e:
ae:b9:5a:ec:f2:2d:67:13:4c:8f:63:9e:b6:f1:4a:
42:f8:39:0a:e3:05:73:ac:db:34:d4:9f:55:b1:29:
fa:03:4d:4b:df:56:5c:29:83:cf:dc:b6:17:00:13:
28:6f:ed:32:8e:fa:01:aa:bb:34:f8:1a:5d:97:52:
7f:85:0c:dd:a1:2c:91:cf:65:a1:55:7c:4f:6a:ea:
70:b1:b2:b7:bf:bd:f2:26:17:59:1a:84:75:43:4a:
f3:1a:85:9a:f5:a4:5d:e5:b3:4b:28:54:ca:4a:96:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:C0:2F:0C:99:23:F7:14:80:F4:08:C2:2D:19:52:11:3D:9E:07
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/IX_ALwyZI_cUgPQIwi0ZUhE9ngc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.158.0/23
91.228.227.0/24
158.94.216.0/24
176.97.219.0/24
217.11.164.0/23
IPv6:
2a01:f900::/29
Signature Algorithm: sha256WithRSAEncryption
8b:e3:30:d1:80:34:69:b9:7f:11:29:d4:ec:25:26:b3:7e:31:
08:0e:38:52:fa:cc:af:bb:01:45:5f:5e:b2:91:d5:f7:84:cb:
04:4e:e7:53:f8:88:bf:95:22:b4:2a:1d:80:b5:07:29:66:87:
89:50:bf:88:98:ac:d1:58:84:d8:ee:92:3c:75:4c:1b:69:e3:
71:c1:3a:92:92:d7:9e:ce:3e:68:3b:74:37:c2:0a:59:dc:c6:
b9:e2:cb:01:79:17:b8:27:ac:2e:d3:41:5c:7f:cf:7c:5a:3b:
ae:78:99:cf:fd:a7:53:87:37:7c:ed:51:19:a0:50:bb:c9:e3:
ca:6a:d1:ce:a9:a1:13:0d:b3:ad:4c:82:5f:6b:54:17:b8:28:
df:41:c6:8f:1a:5b:db:f2:ea:5e:33:08:1b:be:e2:5a:e8:56:
42:bc:10:a8:1d:e4:c5:4f:38:a7:38:ad:20:0f:32:12:83:b7:
3c:a6:17:6e:31:03:52:8a:4b:87:d3:bc:8a:89:a4:11:67:cf:
99:23:26:7c:44:c3:c4:77:19:82:2a:ef:ed:15:20:d2:c3:5e:
3f:40:28:22:02:e4:9d:7b:47:80:9e:6f:a3:79:be:eb:9f:df:
33:10:3a:d4:f3:02:2d:0f:5b:9a:0f:d7:4d:26:aa:7c:5f:4b:
db:c0:0d:9c
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ8UymW+B6O9npDue6niuaGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjYwNjI5MTkxMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTdmYzAyZjBjOTkyM2Y3MTQ4MGY0MDhjMjJkMTk1MjExM2Q5ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFwAIqJfUIoSOWap1SvqJU3sH4Fz
noHF9aWz1xzFqwM6DCxG2A0zm+auYs68tzVhAaWObA9GBsHo1oUB9GRCsi8uRnNl
Uyb/FQY2Q4RpiFMWw05GzUslnccxYsNZRLR29pEGFgg1eo/YNIKLgeFzdu/b5xr0
n3E9j+YUH2MUPAn5cg4O22gTbZVVyiYfdP8wOoFQHi6uuVrs8i1nE0yPY5628UpC
+DkK4wVzrNs01J9VsSn6A01L31ZcKYPP3LYXABMob+0yjvoBqrs0+Bpdl1J/hQzd
oSyRz2WhVXxPaupwsbK3v73yJhdZGoR1Q0rzGoWa9aRd5bNLKFTKSpZwjQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFCF/wC8MmSP3FID0CMItGVIRPZ4HMB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvSVhfQUx3eVpJX2NVZ1BRSXdpMFpVaEU5bmdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBLUqeAwQA
W+TjAwQAnl7YAwQAsGHbAwQB2QukMA0EAgACMAcDBQMqAfkAMA0GCSqGSIb3DQEB
CwUAA4IBAQCL4zDRgDRpuX8RKdTsJSazfjEIDjhS+syvuwFFX16ykdX3hMsETudT
+Ii/lSK0Kh2AtQcpZoeJUL+ImKzRWITY7pI8dUwbaeNxwTqSkteezj5oO3Q3wgpZ
3Ma54ssBeRe4J6wu00Fcf898WjuueJnP/adThzd87VEZoFC7yePKatHOqaETDbOt
TIJfa1QXuCjfQcaPGlvb8upeMwgbvuJa6FZCvBCoHeTFTzinOK0gDzISg7c8phdu
MQNSikuH07yKiaQRZ8+ZIyZ8RMPEdxmCKu/tFSDSw14/QCgiAuSde0eAnm+jeb7r
n98zEDrU8wItD1uaD9dNJqp8X0vbwA2c
-----END CERTIFICATE-----
Generated at Wed Jul 15 20:07:31 2026 by rpki-client