Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/ICjM29Ho5ilzx2CC9UyPCpBHk08.roa
File: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (raw, json)
Hash identifier: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=
Subject key identifier: 20:28:CC:DB:D1:E8:E6:29:73:C7:60:82:F5:4C:8F:0A:90:47:93:4F
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019B7DC9D65BA682D0EB56252958EFEB71D0
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/ICjM29Ho5ilzx2CC9UyPCpBHk08.roa
Signing time: Fri 02 Jan 2026 08:18:58 +0000
ROA not before: Fri 02 Jan 2026 08:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51985
IP address blocks: 5.39.232.0/21 maxlen: 21
46.17.80.0/21 maxlen: 21
185.26.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:d6:5b:a6:82:d0:eb:56:25:29:58:ef:eb:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jan 2 08:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2028ccdbd1e8e62973c76082f54c8f0a9047934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:3c:59:ff:cf:af:f2:b3:39:73:d3:39:e2:
0e:cf:bd:5d:8c:eb:df:20:7b:a1:30:fe:a5:23:65:
ab:3e:b1:2d:da:1f:ae:6f:ab:d6:55:23:a6:5d:aa:
9b:b8:ac:3b:dd:1f:20:85:d1:1c:ba:d8:d3:ad:19:
f4:4d:95:66:bd:9a:cf:3f:24:a5:af:12:5b:67:c6:
d8:77:15:4e:1e:fe:53:2b:dc:93:d0:23:97:c1:d4:
83:c0:f1:0a:f6:0d:ca:8a:16:1b:d1:4b:e2:4e:8e:
7a:a9:30:88:eb:ac:00:35:1c:4e:3e:de:e2:57:42:
40:45:b8:ce:42:99:b6:52:ca:cb:bd:30:3f:fa:b1:
07:38:8b:cf:35:3d:d4:7c:bb:41:4c:e3:7e:bb:4c:
48:60:c2:94:61:51:e3:69:09:29:3a:0a:45:4f:b7:
83:e4:58:46:df:95:9f:c6:8d:d8:49:38:e2:bc:ab:
5e:20:30:12:ae:7b:04:a5:b3:b0:cb:b6:14:d2:ba:
b9:68:05:29:b1:04:ac:f2:e4:d2:1f:4f:6e:63:ca:
82:c0:b6:1f:66:6f:0a:3a:11:f6:05:fd:1d:ec:0d:
51:24:6c:d2:3e:db:d6:f3:09:88:a4:9f:9b:69:9f:
d2:49:7d:18:6e:69:c6:2c:7c:ec:03:b7:8b:08:12:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:CC:DB:D1:E8:E6:29:73:C7:60:82:F5:4C:8F:0A:90:47:93:4F
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/ICjM29Ho5ilzx2CC9UyPCpBHk08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.232.0/21
46.17.80.0/21
185.26.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:aa:94:4e:0e:d2:35:12:4a:ef:3a:63:7d:8e:d9:5f:6b:dd:
40:21:52:2f:2d:c8:c9:5f:9b:45:ac:85:1f:bc:b3:f1:32:ce:
d7:e9:b7:a1:2b:98:54:58:9c:6c:65:65:82:43:a9:16:ab:97:
1a:28:10:54:36:99:69:3d:4c:56:fd:a3:17:ff:01:f0:10:98:
fb:5d:6e:a6:84:0a:10:83:4f:ac:e6:2a:45:32:50:44:46:36:
6c:95:04:86:45:d8:b2:be:ff:6f:75:d9:79:ef:6d:98:16:d6:
ef:e7:8d:45:23:dc:c4:7c:cc:30:6e:0b:fb:55:b6:6c:cf:27:
2d:99:e1:df:dc:1c:80:4a:3f:be:46:56:26:82:1f:bd:07:bf:
99:50:3d:fe:61:0e:1e:ad:d7:06:4a:b5:f6:31:89:29:4d:c6:
9f:bf:6b:d0:0e:84:41:62:6f:99:2a:46:3f:7f:75:dc:4f:fe:
de:5a:43:90:65:a2:68:cb:99:a3:8b:32:38:ce:a5:42:19:57:
ca:e5:5d:c6:ef:c0:de:c3:ad:d8:9d:01:b2:97:50:b9:6a:5c:
f1:d9:1e:c1:7d:b7:a6:e4:3c:74:19:48:77:98:46:69:8a:4a:
b2:99:95:0e:58:90:b0:7f:98:b0:57:92:51:18:59:d2:51:ba:
ad:14:b4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:43 2026 by rpki-client