Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/Ivl8g-yeU6TokuiYRUH3mNvRvC8.roa
File: Ivl8g-yeU6TokuiYRUH3mNvRvC8.roa (raw, json)
Hash identifier: 28UMOLyxquYF+ojhzH8Mtr9Cd8/TnqnACtOEyRhgu7A=
Subject key identifier: 22:F9:7C:83:EC:9E:53:A4:E8:92:E8:98:45:41:F7:98:DB:D1:BC:2F
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 01A116C0F3284403EDDB0E338676E60E7D8C
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/Ivl8g-yeU6TokuiYRUH3mNvRvC8.roa
Signing time: Wed 07 Oct 2026 14:25:06 +0000
ROA not before: Wed 07 Oct 2026 14:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58051
IP address blocks: 45.154.196.0/24 maxlen: 24
185.185.42.0/24 maxlen: 24
185.203.91.0/24 maxlen: 24
185.221.63.0/24 maxlen: 24
193.105.207.0/24 maxlen: 24
2a01:fdc1::/32 maxlen: 32
2a01:fdc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:c0:f3:28:44:03:ed:db:0e:33:86:76:e6:0e:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Oct 7 14:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22f97c83ec9e53a4e892e8984541f798dbd1bc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:2b:e5:1e:12:0c:55:88:d7:5c:76:dc:43:
9e:32:2e:20:c4:3d:42:0c:7b:32:00:6c:4d:0f:53:
b7:c0:d2:6b:1e:e8:9d:13:b1:a7:e2:56:3a:25:9d:
e0:e0:1a:eb:65:12:f8:75:b5:65:a6:3e:52:e8:3d:
a0:1b:e4:ae:c9:7c:0c:4d:4a:0a:44:97:13:a5:74:
d1:4c:12:84:42:1c:09:3a:db:db:e9:f9:9e:af:b6:
90:a7:cc:46:dd:96:a0:7c:42:c1:e5:b2:56:e3:36:
c2:87:72:a2:0b:43:91:27:ad:63:63:f0:5e:ce:a0:
fc:c5:3e:2f:77:da:4d:45:42:6c:0e:d2:e2:77:71:
cf:53:f3:61:49:6d:5e:ac:e8:9b:3f:86:ff:21:9a:
ac:f0:38:56:79:9f:88:7d:53:fe:4a:78:2b:41:4f:
d8:05:6a:37:c1:3f:fc:56:b0:70:3e:05:86:04:18:
fe:1c:3a:f0:8a:3b:ee:3b:0e:f2:b4:d4:c7:d9:32:
cc:bc:32:f1:d6:09:d9:5b:46:d6:4b:72:d7:a5:c8:
23:a7:14:10:aa:cf:61:04:46:b2:54:e0:70:78:5d:
e5:5d:36:6f:2e:ca:25:b5:30:79:54:7e:f9:92:fa:
66:18:c1:03:12:19:a4:9a:62:25:32:70:25:0c:b8:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:7C:83:EC:9E:53:A4:E8:92:E8:98:45:41:F7:98:DB:D1:BC:2F
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/Ivl8g-yeU6TokuiYRUH3mNvRvC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.196.0/24
185.185.42.0/24
185.203.91.0/24
185.221.63.0/24
193.105.207.0/24
IPv6:
2a01:fdc1::-2a01:fdc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:9a:cd:00:45:f0:31:87:22:99:c2:c8:33:40:58:8c:f3:51:
13:3a:f2:16:e0:1e:32:87:a3:1b:dd:f7:81:d7:8a:cc:5e:5d:
e6:a2:ad:a5:f8:e9:db:9e:81:fd:11:97:6b:59:cc:10:55:d3:
5e:50:9a:2c:4f:50:89:43:53:4d:6d:e4:90:bc:e6:0f:5e:19:
ff:50:fd:2f:c4:e3:ed:39:fe:10:09:72:54:d3:b4:59:83:4b:
71:f0:07:c6:1e:99:10:29:3d:b3:bf:a5:b3:8c:5e:39:37:62:
b8:97:3d:4d:b1:32:62:ee:ea:85:d8:20:4e:74:d2:af:3f:fc:
eb:6c:69:1b:a1:ba:f4:13:e9:ba:e5:82:1a:c0:f2:6f:8d:f5:
50:f4:67:32:75:45:21:91:09:a2:b2:99:ac:95:7f:dd:9a:6e:
89:33:91:44:42:e2:2a:0e:d4:f3:f3:2e:34:0d:97:f3:03:53:
a6:71:75:0c:ff:af:11:8e:d0:f8:21:b9:24:75:7b:cc:0a:7f:
d7:c2:e0:00:c2:57:a4:9f:9f:1d:6a:c9:63:b1:c5:f4:90:e1:
6c:f4:c7:3f:2d:98:c6:84:ad:41:6d:2f:5d:b5:b0:51:bc:df:
ed:83:21:41:28:ff:21:c1:5a:f9:02:18:90:0a:a9:8a:fc:e0:
cb:44:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:29 2026 by rpki-client