Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/IIIXZtSualOwJL3v5moeDxfjfvI.roa
File: IIIXZtSualOwJL3v5moeDxfjfvI.roa (raw, json)
Hash identifier: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=
Subject key identifier: 20:82:17:66:D4:AE:6A:53:B0:24:BD:EF:E6:6A:1E:0F:17:E3:7E:F2
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019CE24222E6707E819DFCF0185D5680FC05
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/IIIXZtSualOwJL3v5moeDxfjfvI.roa
Signing time: Thu 12 Mar 2026 13:35:10 +0000
ROA not before: Thu 12 Mar 2026 13:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210919
IP address blocks: 185.227.152.0/22 maxlen: 24
185.227.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:42:22:e6:70:7e:81:9d:fc:f0:18:5d:56:80:fc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Mar 12 13:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20821766d4ae6a53b024bdefe66a1e0f17e37ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:f1:0e:28:3c:4b:43:c6:b5:b7:d9:67:30:
21:80:87:90:8a:aa:c3:0c:1f:74:51:ab:06:ed:a3:
97:90:62:bd:45:42:8b:9c:b5:c2:e4:76:5f:1f:8d:
70:c7:f6:e7:7d:b5:a9:83:cc:9d:09:6c:87:b1:54:
34:d8:fd:94:99:a4:77:c0:44:ba:8d:61:bc:b7:13:
85:c9:a3:83:5b:f7:74:be:58:6b:35:b5:ea:95:49:
72:6a:44:e6:c0:f7:6c:e7:ab:4c:c6:08:8e:92:ad:
d8:c8:4f:fc:e1:28:0f:29:8b:43:d2:6f:07:e6:86:
6c:ba:6b:22:c0:e6:7d:ba:4b:75:8e:25:68:4b:33:
20:33:71:a3:7d:70:1f:6e:38:a6:ba:d0:42:ea:81:
30:d6:0e:b5:8c:27:42:e0:a8:b4:1e:60:73:22:a5:
4c:b4:c7:7f:3b:f0:26:c1:55:7f:8f:61:af:eb:ac:
6a:f2:8f:12:aa:6a:76:6a:e9:0a:9f:23:22:55:8b:
f5:00:35:2b:a7:eb:38:94:be:8b:da:7d:c5:6e:2e:
fe:8d:03:37:f4:ef:37:ed:51:e2:8a:4a:f7:52:13:
f5:ae:83:fb:92:c3:f5:37:95:65:4f:87:13:4e:e7:
d2:9a:1c:2f:db:03:51:82:47:2d:1b:c0:c3:f1:c9:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:17:66:D4:AE:6A:53:B0:24:BD:EF:E6:6A:1E:0F:17:E3:7E:F2
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/IIIXZtSualOwJL3v5moeDxfjfvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b7:44:db:f8:bd:af:c4:12:f4:6d:0d:62:61:7b:7e:86:a3:
02:b3:8f:71:1c:e7:df:1f:a1:fd:84:70:63:3d:4a:38:52:74:
f0:86:08:02:88:9c:d9:2f:df:a9:44:da:45:5a:fa:0d:06:33:
8a:e6:a3:80:d6:92:ae:cd:3a:63:cb:11:df:31:b6:77:b1:91:
72:40:3a:54:1a:2c:81:b5:fa:51:41:d9:bc:ae:e7:6a:78:69:
5b:70:10:b6:6b:aa:a7:2c:e0:21:97:39:5d:16:9f:d7:44:8a:
fc:ec:93:cd:1e:40:67:69:c7:7f:3e:18:12:e4:ba:9d:ea:f9:
fa:ef:2f:2b:c1:5e:9e:0a:d3:cd:df:7f:37:70:b8:0b:b6:ef:
6c:38:98:ef:9c:3a:a8:f1:04:d7:31:24:c7:82:4d:2e:f6:32:
f5:41:14:b8:b9:fb:07:69:20:81:97:74:ed:c4:f8:d8:08:1c:
31:83:41:02:bf:c1:2d:5e:10:87:ac:0a:8d:7f:31:09:cb:62:
b7:85:87:72:72:c1:63:7e:a9:f7:6f:3b:da:98:69:cd:17:03:
2b:db:88:14:a1:6d:38:48:64:2f:5e:d2:cd:5f:01:0c:c2:a5:
05:01:66:8c:5f:7d:5e:b7:d0:6c:16:17:7e:6b:a6:3c:c3:c3:
ff:e9:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:52:08 2026 by rpki-client