Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ivk_BwiYZ-XYKw7WmCTwjYihySU.roa
File: Ivk_BwiYZ-XYKw7WmCTwjYihySU.roa (raw, json)
Hash identifier: 2F3w/C+pqJGMMSnyUJUazNFsPe+OgCK9OPcqwLxuGQE=
Subject key identifier: 22:F9:3F:07:08:98:67:E5:D8:2B:0E:D6:98:24:F0:8D:88:A1:C9:25
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D9C770D763BE74D7C87770CF5963D82F7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ivk_BwiYZ-XYKw7WmCTwjYihySU.roa
Signing time: Fri 17 Apr 2026 17:22:21 +0000
ROA not before: Fri 17 Apr 2026 17:22:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
103.84.212.0/24 maxlen: 24
103.84.213.0/24 maxlen: 24
124.158.100.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:77:0d:76:3b:e7:4d:7c:87:77:0c:f5:96:3d:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 17:22:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22f93f07089867e5d82b0ed69824f08d88a1c925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:36:d1:6d:0d:c9:e8:21:f4:0a:0c:47:08:
85:35:ac:27:17:d7:22:76:8d:f2:06:61:e6:f6:f2:
2b:05:ca:60:3b:54:52:2c:c9:4c:48:28:7e:5e:b3:
da:8f:6f:87:33:4c:17:72:44:fa:f7:27:d2:8f:17:
17:65:1a:a1:3b:a9:34:8c:32:43:29:9c:cf:1e:83:
d7:e6:e5:a4:e3:42:fa:f8:bd:d4:42:1e:fe:c6:07:
09:78:b5:c5:25:3b:14:ef:6a:1a:af:5e:29:ae:a6:
f3:de:7b:6d:7e:e2:38:8a:f5:ea:28:5d:c3:ea:bf:
e2:f7:5f:54:22:79:63:77:42:2c:81:05:01:f3:65:
27:4f:21:0c:09:ed:0b:26:81:62:91:32:f7:c9:9b:
2c:83:ee:d8:49:f5:dc:28:fd:90:f3:6e:34:38:39:
29:1d:c9:3f:d2:ce:b7:cb:e9:c3:49:2c:b8:f1:06:
ff:28:e4:f6:2d:12:ee:8a:c9:f2:7b:ae:60:47:43:
16:5b:1b:ee:37:b5:f1:16:c4:c0:50:c2:aa:1a:f4:
d2:91:8d:04:95:aa:26:f8:4e:18:ad:d5:12:fa:3c:
e8:7c:d1:a4:c7:f4:2f:44:0d:98:d7:5b:1c:48:22:
1a:46:6b:bf:b4:4d:30:5a:b1:65:64:50:2a:7e:8e:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:3F:07:08:98:67:E5:D8:2B:0E:D6:98:24:F0:8D:88:A1:C9:25
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ivk_BwiYZ-XYKw7WmCTwjYihySU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
103.71.61.0/24
103.84.212.0/23
124.158.100.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:99:9d:8c:9f:53:35:87:f4:93:ad:b3:55:13:2b:c0:8f:76:
e5:ed:12:9f:23:80:4d:e9:e0:1b:b3:0a:cf:05:aa:f6:f5:99:
a6:d4:4b:71:cf:0e:62:70:71:39:c3:0d:77:3e:e5:b0:cd:b5:
16:13:a5:a2:5d:d0:f4:9d:b7:7c:07:d7:37:0c:10:07:b0:a6:
c1:b0:ef:99:6e:ea:b9:17:45:ef:fa:7b:53:50:db:19:30:4c:
b9:27:7a:55:21:5d:e7:7b:15:05:f9:b9:04:ad:69:d6:49:6d:
70:d7:03:31:c2:1b:50:e9:75:41:06:c9:0c:5f:63:5c:97:64:
36:2d:9c:9c:8b:03:7d:51:7b:a3:d8:f2:25:f4:bb:87:3d:ea:
3f:bd:99:d3:45:a5:a0:5f:bf:f5:4b:1c:e2:69:b9:9a:bd:99:
d8:df:a2:3b:91:e2:b5:0a:76:e8:e1:5d:5d:e1:3b:29:cb:e6:
b0:9b:7b:a7:35:d9:aa:32:c7:52:e8:ec:34:a1:4e:f7:6a:b2:
98:ba:61:c5:df:06:7b:a7:fa:ec:08:ca:fd:51:45:a0:57:2b:
b4:c1:35:cd:da:15:b3:94:85:9e:08:4a:6f:78:ce:1d:0f:2a:
04:18:05:36:56:73:cb:c0:72:f2:67:ff:9f:f9:91:db:7f:fb:
8b:6e:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 07:37:33 2026 by rpki-client