Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/9yvmVURUkLMHk20MVeDjqLMtnVE.roa
File: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (raw, json)
Hash identifier: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=
Subject key identifier: F7:2B:E6:55:44:54:90:B3:07:93:6D:0C:55:E0:E3:A8:B3:2D:9D:51
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019CB3730A7A8E00185558EEF19D3B046F2C
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/9yvmVURUkLMHk20MVeDjqLMtnVE.roa
Signing time: Tue 03 Mar 2026 11:26:26 +0000
ROA not before: Tue 03 Mar 2026 11:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25577
IP address blocks: 5.133.184.0/22 maxlen: 22
31.3.208.0/24 maxlen: 24
84.45.32.0/19 maxlen: 19
109.104.100.0/23 maxlen: 23
109.104.105.0/24 maxlen: 24
109.104.112.0/24 maxlen: 24
109.104.114.0/24 maxlen: 24
109.104.122.0/23 maxlen: 23
2001:9d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:73:0a:7a:8e:00:18:55:58:ee:f1:9d:3b:04:6f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Mar 3 11:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f72be655445490b307936d0c55e0e3a8b32d9d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:e9:ba:f0:21:c4:b2:31:60:23:05:f7:aa:
a8:93:63:a3:25:db:33:d3:93:a2:92:7f:89:f2:b3:
e4:ba:b3:b7:58:ca:93:78:14:4b:8d:f5:ac:de:02:
ee:30:59:2d:51:b4:3e:e3:be:04:a7:0e:d4:8c:49:
b3:41:21:51:21:af:3b:a7:2a:ad:ad:37:2f:7e:f6:
02:38:23:3d:6b:67:84:7b:39:44:36:3f:db:6a:6f:
93:cc:c5:d1:50:72:ef:88:22:21:f9:83:69:10:af:
73:71:61:ed:e3:c7:53:64:e1:93:18:2d:32:64:cd:
97:e0:71:1f:cc:4e:f8:50:ac:d6:c8:d7:cd:5f:8c:
6d:16:2f:86:9f:36:14:c0:6f:a6:ac:31:bc:3a:ee:
32:4d:50:ec:36:b5:31:12:58:e3:c6:0f:4b:82:57:
ac:f3:41:94:16:9a:e8:4f:38:6e:48:66:77:5e:ec:
c4:34:a2:c4:f6:41:81:35:db:07:a3:77:d4:82:2b:
6e:94:35:8b:85:37:8c:16:c5:27:8f:c7:12:75:8b:
3c:ff:bf:61:c6:1b:96:c8:54:54:55:30:34:39:be:
b1:0f:d4:9c:d0:34:22:a6:7f:1f:58:ae:8b:40:ef:
b4:c8:5b:42:ab:fa:5c:e1:83:db:4d:6b:9f:cd:42:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:E6:55:44:54:90:B3:07:93:6D:0C:55:E0:E3:A8:B3:2D:9D:51
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/9yvmVURUkLMHk20MVeDjqLMtnVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.184.0/22
31.3.208.0/24
84.45.32.0/19
109.104.100.0/23
109.104.105.0/24
109.104.112.0/24
109.104.114.0/24
109.104.122.0/23
IPv6:
2001:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
24:b3:ef:45:0b:26:0e:c7:ab:cc:00:a1:b6:80:df:a5:4d:63:
eb:a3:8a:c7:90:aa:c8:42:33:38:b7:23:df:da:64:55:38:04:
94:de:ef:71:1d:55:87:06:ff:6a:a3:ca:26:9a:f5:cf:bf:90:
07:de:ee:f1:64:02:4a:ec:3e:14:fa:19:c9:df:99:03:ae:e0:
09:b1:af:cb:78:58:0b:9e:2a:23:10:10:00:c2:87:33:a9:ba:
8b:21:55:41:2b:30:57:49:b1:f9:48:58:c2:bf:64:1b:f8:9a:
b4:64:b7:da:22:31:a5:f2:f3:64:48:a0:9f:c4:aa:81:e4:28:
0f:c3:e2:c6:ae:81:0f:db:11:86:ec:57:ec:7c:6f:3d:0d:50:
7a:9c:9c:5e:44:43:06:0c:e4:43:d3:bd:68:fe:fd:db:1a:97:
a6:86:fc:eb:ae:ed:f0:67:d6:52:37:12:4f:bc:35:0d:4d:24:
53:30:af:d4:59:46:75:04:4a:12:51:f9:e5:9f:25:d1:51:8d:
f8:50:3f:34:29:87:5e:af:31:57:fe:fc:f9:44:f3:56:99:b4:
e6:aa:54:4f:04:64:13:af:85:0c:3c:30:14:fd:7b:76:71:7a:
b1:48:fe:01:66:ce:f5:06:10:71:ba:f9:d5:9a:ba:a4:59:22:
f6:d8:1b:44
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZyzcwp6jgAYVVju8Z07BG8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwMzAzMTEyNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzJiZTY1NTQ0NTQ5MGIzMDc5MzZkMGM1NWUwZTNhOGIzMmQ5ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5HpuvAhxLIxYCMF96qok2OjJdsz
05Oikn+J8rPkurO3WMqTeBRLjfWs3gLuMFktUbQ+474Epw7UjEmzQSFRIa87pyqt
rTcvfvYCOCM9a2eEezlENj/bam+TzMXRUHLviCIh+YNpEK9zcWHt48dTZOGTGC0y
ZM2X4HEfzE74UKzWyNfNX4xtFi+GnzYUwG+mrDG8Ou4yTVDsNrUxEljjxg9Lgles
80GUFproTzhuSGZ3XuzENKLE9kGBNdsHo3fUgitulDWLhTeMFsUnj8cSdYs8/79h
xhuWyFRUVTA0Ob6xD9Sc0DQipn8fWK6LQO+0yFtCq/pc4YPbTWufzUKveQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFPcr5lVEVJCzB5NtDFXg46izLZ1RMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvOXl2bVZVUlVrTE1IazIwTVZlRGpxTE10blZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCBYW4AwQA
HwPQAwQFVC0gAwQBbWhkAwQAbWhpAwQAbWhwAwQAbWhyAwQBbWh6MA0EAgACMAcD
BQAgAQnYMA0GCSqGSIb3DQEBCwUAA4IBAQAks+9FCyYOx6vMAKG2gN+lTWPro4rH
kKrIQjM4tyPf2mRVOASU3u9xHVWHBv9qo8ommvXPv5AH3u7xZAJK7D4U+hnJ35kD
ruAJsa/LeFgLniojEBAAwoczqbqLIVVBKzBXSbH5SFjCv2Qb+Jq0ZLfaIjGl8vNk
SKCfxKqB5CgPw+LGroEP2xGG7FfsfG89DVB6nJxeREMGDORD071o/v3bGpemhvzr
ru3wZ9ZSNxJPvDUNTSRTMK/UWUZ1BEoSUfnlnyXRUY34UD80KYderzFX/vz5RPNW
mbTmqlRPBGQTr4UMPDAU/Xt2cXqxSP4BZs71BhBxuvnVmrqkWSL22BtE
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:29:34 2026 by rpki-client