Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa
File: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (raw, json)
Hash identifier: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=
Subject key identifier: 22:D2:E7:60:46:E5:88:EF:6E:CB:8A:4D:D9:FF:4D:C7:E7:1B:9C:C5
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019EE5D4C9BA44787FA8F76501F6E3A8780E
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa
Signing time: Sat 20 Jun 2026 16:19:48 +0000
ROA not before: Sat 20 Jun 2026 16:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 185.86.83.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
185.237.80.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
194.1.218.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
194.145.139.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
2a0a:fa40::/29 maxlen: 29
2a0c:580::/29 maxlen: 29
2a0c:4a40::/29 maxlen: 29
2a0c:4a45::/32 maxlen: 32
2a0c:4a46::/32 maxlen: 32
2a0c:4a47::/32 maxlen: 32
2a0d:d380::/29 maxlen: 29
2a0d:d380::/32 maxlen: 32
2a0d:d381::/32 maxlen: 32
2a0d:d383::/32 maxlen: 32
2a0d:d384::/32 maxlen: 32
2a0d:d385::/32 maxlen: 32
2a0d:d386::/32 maxlen: 32
2a0d:d387::/32 maxlen: 32
2a10:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:d4:c9:ba:44:78:7f:a8:f7:65:01:f6:e3:a8:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jun 20 16:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d2e76046e588ef6ecb8a4dd9ff4dc7e71b9cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:03:50:8d:7a:16:00:ce:21:4f:d3:f7:a1:
95:c4:62:ea:e8:4a:f7:4f:fc:73:2d:c1:a9:80:ac:
65:bb:26:ab:3c:22:0e:b3:07:c0:f0:b5:8b:ff:82:
37:e5:25:df:4d:74:92:0e:f5:c3:da:db:0f:f9:f2:
1d:7b:a6:d8:5f:52:cd:f8:d8:a2:4b:40:ca:8d:ba:
5d:18:30:a5:3e:aa:05:b6:a7:09:a3:a4:82:f4:9f:
fc:d2:8c:90:a5:16:4b:70:02:2c:89:d0:17:2d:a0:
ca:a6:cb:54:64:10:21:ee:2a:13:88:a6:28:c3:1e:
7a:1a:dc:c8:7e:d5:9c:48:1a:af:d2:18:46:4c:ea:
1f:4a:d8:39:e3:17:61:0f:3c:12:d4:98:61:6e:5f:
66:9a:68:c5:c5:19:e0:f3:a1:5a:6a:62:e2:e7:29:
0e:ab:04:26:52:55:81:73:9c:39:98:4e:db:40:79:
a5:d7:7a:b5:6f:d3:c8:7d:18:83:5b:0e:34:46:d0:
64:d2:71:b5:3e:68:41:e6:77:00:a0:35:19:09:c2:
69:b0:48:ff:04:98:7f:a2:5d:9f:e3:9a:3f:43:73:
d6:ec:91:e6:37:84:3e:d4:bb:70:8b:e2:ec:67:9f:
a2:4a:79:4a:8f:68:6e:e8:82:7d:ca:ab:ee:a2:65:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:E7:60:46:E5:88:EF:6E:CB:8A:4D:D9:FF:4D:C7:E7:1B:9C:C5
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.83.0/24
185.205.16.0/24
185.205.18.0/24
185.237.80.0/23
185.254.93.0/24
193.36.62.0/24
194.1.218.0/24
194.145.136.0/24
194.145.139.0/24
IPv6:
2a05:b700::/29
2a0a:fa40::/29
2a0c:580::/29
2a0c:4a40::/29
2a0d:d380::/29
2a10:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
70:88:c0:73:78:55:f6:e5:81:8f:20:8b:eb:9a:63:55:9d:c6:
c2:55:76:5a:3b:f4:70:30:f0:f9:f8:88:d6:c1:38:57:9f:5f:
fb:48:08:d0:a4:ec:6f:e2:57:6d:a7:c9:18:fe:2d:42:25:5b:
44:2c:31:59:6d:d5:bf:21:4c:28:52:83:e5:3a:db:ed:c5:85:
f9:e0:1f:cd:a6:b3:54:f4:d8:5d:79:05:d1:7d:18:bf:bd:cc:
f9:33:bf:68:cf:a0:c2:6d:36:36:a9:48:ff:ce:87:de:ed:41:
ab:5b:00:52:85:db:e7:b2:2e:b8:2d:75:e6:de:17:06:34:ff:
71:d1:7f:33:24:eb:9f:8c:4e:ff:dd:6c:95:bb:3b:c8:72:0e:
ff:be:c3:b9:47:5c:ed:73:c2:46:51:71:1a:cc:5a:40:00:be:
8e:15:cc:74:a9:89:06:f6:94:55:c0:fd:0a:7d:89:45:5f:af:
9c:28:7d:0a:b2:2a:2f:b8:d6:cb:b0:04:a7:06:f9:a3:ea:d6:
e7:b4:64:b9:86:73:97:d7:82:54:f3:db:3f:2d:aa:b6:3e:10:
a1:91:1a:24:b0:bf:4e:f5:52:0d:3e:0f:13:d3:8c:58:3b:5d:
69:d1:b3:a9:2b:44:95:5b:28:aa:92:cc:c1:1b:13:8b:04:3c:
23:dc:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:58 2026 by rpki-client