Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/iKuPyI8zLCgawXSKX7-BKU55u_A.roa
File: iKuPyI8zLCgawXSKX7-BKU55u_A.roa (raw, json)
Hash identifier: MfsvzyIXZkMQ/jz1uJByq5Hlv40Mpv4XoWbE4eac8sA=
Subject key identifier: 88:AB:8F:C8:8F:33:2C:28:1A:C1:74:8A:5F:BF:81:29:4E:79:BB:F0
Certificate issuer: /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial: 019F236860367D0D0E78AE0DAB244C57C42F
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/iKuPyI8zLCgawXSKX7-BKU55u_A.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 145.36.0.0/20 maxlen: 20
145.36.16.0/20 maxlen: 20
145.36.32.0/20 maxlen: 20
145.36.48.0/24 maxlen: 24
145.36.49.0/24 maxlen: 24
145.36.50.0/24 maxlen: 24
145.36.51.0/24 maxlen: 24
145.36.52.0/24 maxlen: 24
145.36.53.0/24 maxlen: 24
145.36.54.0/24 maxlen: 24
145.36.55.0/24 maxlen: 24
145.36.56.0/24 maxlen: 24
145.36.57.0/24 maxlen: 24
145.36.58.0/24 maxlen: 24
145.36.59.0/24 maxlen: 24
145.36.60.0/24 maxlen: 24
145.36.61.0/24 maxlen: 24
145.36.62.0/24 maxlen: 24
145.36.63.0/24 maxlen: 24
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:36:7d:0d:0e:78:ae:0d:ab:24:4c:57:c4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88ab8fc88f332c281ac1748a5fbf81294e79bbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:9f:b3:ad:60:c4:3e:a7:c9:4e:4d:35:a7:
be:bc:a4:fa:33:12:e6:38:5c:ee:35:7e:70:dd:43:
a2:73:fc:72:34:ea:ed:f3:6c:c3:1b:2e:8c:6c:5a:
3d:3d:b0:3c:99:5f:76:64:e5:8d:b9:25:23:82:a8:
19:11:82:8c:68:e0:53:95:24:27:23:37:00:35:e1:
75:09:3b:aa:a2:e7:12:b2:75:bb:cd:ea:14:d8:2d:
1c:f0:6d:fb:fe:47:b0:95:8e:79:e1:5b:02:e9:ff:
fc:e9:6c:c9:4a:50:35:d1:05:88:90:29:f4:39:fa:
f9:b2:e4:4b:a7:26:f8:ae:a7:41:2d:20:c3:55:69:
dc:13:0b:6b:f1:43:f4:ab:16:3e:63:c8:a6:56:7a:
a2:a3:ee:22:2b:86:37:d9:d7:f0:f7:a6:21:e4:d6:
b9:13:2a:e2:9a:48:20:07:f4:97:1d:93:c7:21:92:
f3:44:5e:33:e9:e4:7d:a5:20:77:0b:12:e5:80:54:
42:93:b5:c5:3d:3c:15:63:39:43:b5:66:1f:86:d2:
4a:99:d2:ee:99:a8:55:12:5c:05:29:44:2d:42:af:
94:c6:4f:56:38:89:7d:19:52:c0:1a:9b:84:d1:bd:
cd:92:1c:05:29:7e:ed:73:a7:02:04:71:c8:0b:9c:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:8F:C8:8F:33:2C:28:1A:C1:74:8A:5F:BF:81:29:4E:79:BB:F0
X509v3 Authority Key Identifier:
keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/iKuPyI8zLCgawXSKX7-BKU55u_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:d2:a0:0e:f3:4c:4d:52:33:8f:af:24:07:91:56:2b:0c:e0:
2e:e8:57:b0:3c:73:9d:c3:41:5b:37:49:ec:8d:8b:f9:47:63:
b6:18:8b:7c:e4:d7:27:f9:cc:d8:45:3e:75:87:5e:ae:9b:c0:
d9:e4:e4:2a:89:57:c3:c1:33:f0:d9:2d:86:58:ed:87:a3:47:
71:42:e9:1d:01:ff:e3:e6:60:e4:4f:dc:e0:73:25:bf:7b:dd:
6c:bd:95:ee:0a:4c:ac:35:32:e8:1f:60:d8:90:0d:ff:3e:79:
ea:db:6f:99:20:34:06:b9:46:39:63:5e:08:82:19:ce:26:8b:
5d:97:17:2e:c7:48:e4:7f:92:9f:1f:5b:02:67:5f:15:ff:8b:
2d:c6:67:07:21:b9:ee:1f:73:54:c4:00:6f:f9:a9:ff:9d:53:
21:45:ee:1d:fd:30:31:42:8b:ac:37:d1:70:b9:dd:65:19:56:
51:5f:85:20:e5:f1:95:35:c7:7f:a6:f7:9c:34:25:aa:f1:09:
c5:9f:2e:79:f4:d3:86:dc:70:35:33:09:a9:36:d8:d5:00:bb:
3d:52:ae:01:67:71:a6:5c:5c:ed:13:a6:da:be:54:d0:7f:7e:
43:b5:08:73:71:28:3c:74:bc:c2:66:5d:a5:79:9a:3f:03:16:
fe:c1:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client