Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/IIPCcrlFGQt8SPiXbrUcvVBlto4.roa
File: IIPCcrlFGQt8SPiXbrUcvVBlto4.roa (raw, json)
Hash identifier: WISWmF9tnub9k3uNSia5SCm/UjRnq4bIyNehPCftyw0=
Subject key identifier: 20:83:C2:72:B9:45:19:0B:7C:48:F8:97:6E:B5:1C:BD:50:65:B6:8E
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 019E9181E669B2442656C359F6FD31EB34B2
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/IIPCcrlFGQt8SPiXbrUcvVBlto4.roa
Signing time: Thu 04 Jun 2026 07:21:09 +0000
ROA not before: Thu 04 Jun 2026 07:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 77.95.120.0/21 maxlen: 21
85.118.216.0/21 maxlen: 21
185.63.149.0/24 maxlen: 24
185.63.150.0/23 maxlen: 23
212.103.64.0/19 maxlen: 19
212.103.64.0/24 maxlen: 24
212.103.65.0/24 maxlen: 24
217.11.208.0/20 maxlen: 20
217.146.160.0/20 maxlen: 20
217.146.165.0/24 maxlen: 24
2a00:c38::/32 maxlen: 32
2a00:c38:1a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:81:e6:69:b2:44:26:56:c3:59:f6:fd:31:eb:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jun 4 07:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2083c272b945190b7c48f8976eb51cbd5065b68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:22:07:f8:85:4e:00:d5:a0:0a:ac:ea:9f:
32:3d:1a:86:21:45:70:39:56:fa:8e:38:8e:f6:eb:
af:9d:b4:9a:9c:aa:3b:4c:43:e4:39:77:5c:ac:aa:
a4:3f:26:b4:52:c7:39:5e:5a:d6:0f:97:81:ac:95:
1b:26:09:13:65:14:51:fb:ae:f3:e8:06:24:cf:70:
a9:3d:b4:1e:94:77:84:f5:72:a0:a2:19:6a:1e:bc:
04:63:8a:90:83:81:0f:98:0a:1d:29:50:b0:8a:f9:
e3:3d:5f:73:15:64:44:c7:cc:4a:16:cd:60:4a:88:
26:57:d4:35:d5:21:de:85:44:f9:b2:ce:1e:ac:f9:
ba:39:8d:14:57:ed:9c:74:da:2d:bc:c2:93:c6:43:
d8:dd:ca:58:37:14:3e:57:c2:87:8b:d2:c8:c6:e5:
59:b0:79:d4:57:81:34:e3:83:ad:53:e7:a6:88:6f:
ed:c5:8d:c9:21:4b:ac:bc:09:72:65:83:08:da:12:
45:66:68:34:d0:59:49:ac:07:88:6c:cf:c5:4a:62:
b8:9e:18:b3:ea:7b:57:69:27:db:ee:62:91:b8:ea:
29:57:34:66:77:70:16:f2:9b:b4:90:f3:c3:44:6d:
59:6c:f9:35:a3:ae:6f:7e:3b:17:89:bb:0d:47:eb:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:C2:72:B9:45:19:0B:7C:48:F8:97:6E:B5:1C:BD:50:65:B6:8E
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/IIPCcrlFGQt8SPiXbrUcvVBlto4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/21
85.118.216.0/21
185.63.149.0-185.63.151.255
212.103.64.0/19
217.11.208.0/20
217.146.160.0/20
IPv6:
2a00:c38::/32
Signature Algorithm: sha256WithRSAEncryption
3c:9f:61:12:01:c9:24:5d:74:35:1f:e0:8c:60:5f:6c:5e:68:
1b:be:45:d6:b8:9b:70:81:e8:55:97:21:64:3b:aa:4e:e5:3d:
82:f9:32:42:28:fa:54:14:40:20:c2:7d:b5:1b:21:d7:a6:f8:
1a:04:c6:c5:8c:67:cf:cf:56:67:40:12:a3:24:c6:6d:88:89:
f8:6e:b7:09:fe:50:99:39:47:eb:85:2e:78:d9:b4:4b:ef:3e:
47:ba:5a:44:8d:2c:d5:cb:4f:a7:9f:80:fe:e7:5a:2b:0c:02:
d2:a5:4d:de:77:43:1f:e6:48:7e:16:22:8a:be:45:e7:1d:26:
14:38:32:ce:6d:9f:35:92:53:70:f1:07:1f:9b:75:9e:46:47:
d7:70:fc:33:75:93:52:56:43:7b:0f:13:45:26:64:0f:c9:c9:
df:d4:38:4c:77:55:f9:07:3f:6d:2d:e3:2d:87:3b:e9:1b:a1:
ea:f1:64:43:30:1b:fb:9e:95:66:57:f2:fa:b7:48:14:da:42:
6b:ec:80:74:96:7d:38:86:39:06:bb:ca:88:92:c0:72:ce:af:
54:44:e0:b9:6e:d3:eb:23:48:06:4b:6c:c6:81:a0:0a:ac:35:
1f:37:1d:0f:dc:9f:3b:ad:87:7e:62:fe:6f:d0:01:c4:43:ae:
e6:ed:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:48 2026 by rpki-client