Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa
File: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (raw, json)
Hash identifier: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=
Subject key identifier: 23:3D:0B:4F:F4:1E:D9:80:B2:D6:34:50:F2:EC:55:C7:D9:84:5E:35
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019B7C7F09B4AAF27DE1922B399F5C0FB6B9
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa
Signing time: Fri 02 Jan 2026 02:17:38 +0000
ROA not before: Fri 02 Jan 2026 02:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201502
IP address blocks: 46.255.240.0/21 maxlen: 24
176.124.114.0/24 maxlen: 24
185.13.220.0/22 maxlen: 24
185.25.136.0/22 maxlen: 24
185.203.172.0/22 maxlen: 24
185.220.80.0/24 maxlen: 24
185.253.80.0/22 maxlen: 24
188.208.19.0/24 maxlen: 24
188.214.82.0/23 maxlen: 24
2a03:a6c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:09:b4:aa:f2:7d:e1:92:2b:39:9f:5c:0f:b6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jan 2 02:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=233d0b4ff41ed980b2d63450f2ec55c7d9845e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:1b:64:de:71:aa:60:92:fb:b7:bb:e4:b9:
4c:6d:78:c3:e1:b3:e7:8e:21:25:98:dc:3f:95:19:
24:c5:b7:ec:c2:d7:d4:58:01:69:17:a2:9e:a9:da:
8a:22:66:01:50:d7:bd:54:7f:cb:8f:0c:88:e8:ed:
fd:88:aa:74:ff:c9:d4:00:9d:f5:2b:8b:d2:02:c3:
1b:56:4f:99:49:15:10:6a:4f:6f:23:c6:73:13:42:
e8:f5:6c:77:a9:47:51:f2:4b:21:39:87:13:df:87:
4a:ba:2f:24:7b:66:73:0a:a9:0f:c2:7b:8b:9d:58:
cd:36:1d:d7:f7:39:2e:8e:5c:9b:9e:ac:25:74:70:
1b:86:1d:3a:d4:b7:9b:50:cd:ba:f2:ba:2a:53:c3:
4d:41:43:45:93:10:f2:8d:62:38:97:83:07:5b:0f:
75:f5:7c:40:66:57:11:3b:3e:cf:f0:ba:76:4d:9d:
74:47:5e:80:a4:00:48:47:a1:5e:b0:a6:70:44:60:
e6:84:e0:d5:c1:a7:2a:67:0d:89:1a:7e:4c:24:fc:
dd:56:a2:13:01:7b:8f:23:62:d6:5e:3a:99:65:46:
67:e2:5e:6b:0a:61:8a:ad:98:db:bf:cb:73:d6:99:
af:1e:c5:ec:2a:ff:14:3a:ca:04:16:19:55:37:c3:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:0B:4F:F4:1E:D9:80:B2:D6:34:50:F2:EC:55:C7:D9:84:5E:35
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.240.0/21
176.124.114.0/24
185.13.220.0/22
185.25.136.0/22
185.203.172.0/22
185.220.80.0/24
185.253.80.0/22
188.208.19.0/24
188.214.82.0/23
IPv6:
2a03:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:2c:61:90:8a:80:85:53:74:a5:03:72:2b:cb:47:df:64:8d:
b8:da:5a:be:00:50:1b:54:79:f0:3f:74:d5:b9:5d:56:c2:af:
e3:d4:06:2c:5d:08:b0:4b:1a:d9:85:94:33:f9:ab:8b:57:86:
22:4d:63:ec:71:45:32:6e:7f:03:ec:25:d8:1f:8c:73:e8:63:
a6:63:41:48:93:ac:85:c7:3d:cd:31:90:8e:ee:06:5c:9a:c1:
78:75:df:b9:32:72:27:f3:10:37:28:6c:a5:e7:2b:e6:71:fd:
df:d4:50:7b:49:77:c6:2a:ba:5d:2c:97:50:96:d2:b3:ca:a2:
1a:e8:bf:ad:da:85:7a:bc:3d:10:de:f7:01:51:63:a8:02:e3:
d2:dd:ef:04:7f:37:74:7c:23:7a:cf:bd:c1:ce:fa:a6:c6:07:
c0:0c:67:8d:6d:29:a2:ce:81:ef:e3:1a:54:6a:6c:93:0c:a7:
43:d2:74:8b:c0:7b:20:e9:b3:3c:04:10:ea:50:33:4c:f4:3a:
a3:a6:ba:6d:cc:97:7d:25:88:54:61:62:d2:12:25:01:f1:26:
19:6d:40:e5:37:89:64:a1:52:bd:8c:d5:bd:f3:91:9e:77:56:
ba:cf:fd:fc:0e:1b:9a:88:5e:fd:34:e3:a2:f6:81:df:ad:09:
32:75:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:27 2026 by rpki-client