Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/IEKQdQSPHj3Cnkr1D4OpgmDW5ws.roa
File: IEKQdQSPHj3Cnkr1D4OpgmDW5ws.roa (raw, json)
Hash identifier: b9P/Bsdn0gx8DrmDgi2+/lOlYncQzapyrce4brihN78=
Subject key identifier: 20:42:90:75:04:8F:1E:3D:C2:9E:4A:F5:0F:83:A9:82:60:D6:E7:0B
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019FF060EA62EFEB4063C0FD8B688F872570
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/IEKQdQSPHj3Cnkr1D4OpgmDW5ws.roa
Signing time: Tue 11 Aug 2026 10:31:51 +0000
ROA not before: Tue 11 Aug 2026 10:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:60:ea:62:ef:eb:40:63:c0:fd:8b:68:8f:87:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Aug 11 10:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20429075048f1e3dc29e4af50f83a98260d6e70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:60:3e:c3:0f:90:fd:95:67:a9:71:7b:d0:
5e:f7:24:8a:80:54:c8:92:20:0e:37:90:ba:90:9e:
3c:85:c0:f0:62:c6:46:0d:ef:1d:11:83:7a:75:7b:
c0:0a:99:6d:96:d2:28:35:80:f0:f0:e9:6f:dc:4c:
ac:d7:58:39:11:21:52:a9:28:e3:f9:d6:c8:59:41:
6c:e4:a1:75:53:ce:a4:00:e8:c8:88:93:79:f0:79:
1b:37:7e:35:fa:c2:20:ab:79:96:dc:e6:25:60:75:
64:c5:19:73:70:d6:a7:a5:b6:4c:c0:57:d2:b6:94:
bd:c8:a4:dd:bf:8f:55:4c:29:52:48:57:19:55:c5:
cb:ac:37:d8:dc:77:b0:f9:6f:eb:14:50:62:d2:e0:
dd:08:e0:5a:8b:f1:05:98:f7:9a:81:b1:46:55:11:
31:0a:90:7f:a2:b3:9c:a4:c1:92:30:da:1c:da:09:
76:ae:dd:45:53:51:86:b7:cc:b1:ff:82:87:60:a2:
60:8f:41:4b:ca:65:ce:c9:47:06:fd:e5:41:88:47:
65:c5:63:3b:da:a4:1f:b4:a6:52:f9:ae:54:65:14:
46:0a:9c:37:83:79:3a:fc:43:a1:65:90:f0:25:16:
38:4c:d8:f8:23:4c:e5:ac:db:e4:b0:16:64:96:78:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:90:75:04:8F:1E:3D:C2:9E:4A:F5:0F:83:A9:82:60:D6:E7:0B
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/IEKQdQSPHj3Cnkr1D4OpgmDW5ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.244.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a5:5d:8e:92:50:92:7c:c7:32:93:60:60:5e:c9:ef:bf:cd:
fe:e4:c6:0a:99:f4:51:2d:6e:8f:ba:5d:68:3c:54:eb:6a:15:
1f:a8:e5:7c:58:67:ef:04:b6:f7:a4:9f:04:c0:cc:fd:8b:b4:
8a:af:ca:a8:0a:de:2f:b5:3b:7e:ed:c9:33:eb:b3:3b:7c:0f:
c0:31:d2:c9:90:c1:86:9b:9d:b2:83:2c:d7:cb:38:9f:cd:b0:
6a:8b:8b:fa:ca:44:3c:9e:d0:39:6f:5d:da:bf:3a:54:63:ff:
53:db:4d:05:d5:5a:04:59:8d:be:26:03:df:97:90:67:17:ff:
a0:87:6f:b3:7d:0d:4b:0f:b8:c0:04:63:95:cc:01:34:96:c2:
1e:dc:ef:f6:24:f9:1d:46:f7:11:62:f3:87:55:6f:55:78:80:
76:cc:e7:81:a1:0a:40:2c:44:89:3a:7f:c4:6d:cf:1f:11:89:
14:4c:01:8b:1e:77:54:31:d5:be:6e:98:59:89:e8:e5:a6:72:
46:ea:14:94:c1:54:92:64:7b:d4:eb:d9:dd:46:ca:aa:e7:ed:
cb:0d:2f:2d:8e:d8:02:cc:11:a3:be:33:1f:5a:8b:60:bc:fc:
98:c7:01:fe:42:84:70:03:93:9a:5f:e7:06:c4:2e:db:55:5c:
a6:95:4f:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/wYOpi7+tAY8D9i2iPhyVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjYwODExMTAzMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDQyOTA3NTA0OGYxZTNkYzI5ZTRhZjUwZjgzYTk4MjYwZDZlNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o9gPsMPkP2VZ6lxe9Be9ySKgFTI
kiAON5C6kJ48hcDwYsZGDe8dEYN6dXvACpltltIoNYDw8Olv3Eys11g5ESFSqSjj
+dbIWUFs5KF1U86kAOjIiJN58HkbN341+sIgq3mW3OYlYHVkxRlzcNanpbZMwFfS
tpS9yKTdv49VTClSSFcZVcXLrDfY3Hew+W/rFFBi0uDdCOBai/EFmPeagbFGVREx
CpB/orOcpMGSMNoc2gl2rt1FU1GGt8yx/4KHYKJgj0FLymXOyUcG/eVBiEdlxWM7
2qQftKZS+a5UZRRGCpw3g3k6/EOhZZDwJRY4TNj4I0zlrNvksBZklnghSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCBCkHUEjx49wp5K9Q+DqYJg1ucLMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvSUVLUWRRU1BIajNDbmtyMUQ0T3BnbURXNXdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXnAwQA
1RX0MA0GCSqGSIb3DQEBCwUAA4IBAQB4pV2OklCSfMcyk2BgXsnvv83+5MYKmfRR
LW6Pul1oPFTrahUfqOV8WGfvBLb3pJ8EwMz9i7SKr8qoCt4vtTt+7ckz67M7fA/A
MdLJkMGGm52ygyzXyzifzbBqi4v6ykQ8ntA5b13avzpUY/9T200F1VoEWY2+JgPf
l5BnF/+gh2+zfQ1LD7jABGOVzAE0lsIe3O/2JPkdRvcRYvOHVW9VeIB2zOeBoQpA
LESJOn/Ebc8fEYkUTAGLHndUMdW+bphZiejlpnJG6hSUwVSSZHvU69ndRsqq5+3L
DS8tjtgCzBGjvjMfWotgvPyYxwH+QoRwA5OaX+cGxC7bVVymlU9N
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:33:09 2026 by rpki-client