Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Icod11pjCiGgr717aIwj56pRJdg.roa
File: Icod11pjCiGgr717aIwj56pRJdg.roa (raw, json)
Hash identifier: 4GxQHYqLtQWLr0JAOZ6e3os/VMnjCHYtb1sIJw8nGrs=
Subject key identifier: 21:CA:1D:D7:5A:63:0A:21:A0:AF:BD:7B:68:8C:23:E7:AA:51:25:D8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D8BA9E6E11FD8497BF775153DDF02DA85
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Icod11pjCiGgr717aIwj56pRJdg.roa
Signing time: Tue 14 Apr 2026 11:04:20 +0000
ROA not before: Tue 14 Apr 2026 11:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.57.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.166.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.147.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
194.153.227.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
217.156.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:a9:e6:e1:1f:d8:49:7b:f7:75:15:3d:df:02:da:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 14 11:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21ca1dd75a630a21a0afbd7b688c23e7aa5125d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:3f:33:18:af:9d:d2:67:c9:29:f7:3a:48:
fb:1a:e3:d7:40:98:b8:22:f0:26:7f:bc:c9:6d:74:
ea:61:b0:1b:92:a1:6d:f2:cc:b1:52:bb:d1:37:e1:
26:b6:84:4d:ab:58:ca:9b:23:08:df:05:ad:b2:f4:
db:d9:a8:df:02:6d:d8:f8:48:2f:f3:53:9f:3a:47:
69:09:92:96:b2:dc:1e:0b:ab:02:27:63:42:3f:74:
bf:66:a6:a9:36:f8:e2:fc:cc:41:c6:d6:87:e2:fa:
16:66:a4:ee:c6:7a:e3:c2:74:66:2a:9e:e6:e9:86:
7a:c5:20:19:3d:71:54:24:20:eb:11:7d:9c:ac:c3:
1d:e8:9f:61:35:f4:9d:3e:5d:9a:82:8d:41:63:10:
30:0e:6a:ae:1c:9f:f9:02:e5:7b:a2:98:0e:7b:ef:
1c:d1:70:30:aa:b8:4b:52:e2:96:ab:29:2f:03:0b:
79:00:00:6b:c9:96:1b:3f:27:45:fb:b0:2c:b8:05:
36:b7:10:19:26:25:70:bf:ad:70:d1:7a:61:31:ad:
c0:dc:ca:67:03:44:af:68:85:a4:dd:cb:8d:24:ee:
da:1e:26:0c:d8:22:2e:00:1b:89:61:ba:fe:eb:35:
6e:d7:93:60:05:3a:c2:5f:5d:91:5b:3b:27:c4:f4:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CA:1D:D7:5A:63:0A:21:A0:AF:BD:7B:68:8C:23:E7:AA:51:25:D8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Icod11pjCiGgr717aIwj56pRJdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.57.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.166.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.147.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
194.153.227.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
217.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:32:1d:25:53:c4:cd:4d:f0:c3:1a:2b:dc:7c:2c:6c:7c:ea:
ed:9b:ef:fc:c7:16:59:ee:98:49:a8:16:11:5e:44:7d:0d:4d:
53:8e:83:ba:b8:bb:88:7b:15:51:e7:41:45:4c:65:ab:da:61:
f8:8e:06:c2:42:e9:aa:b9:a5:8c:35:f0:ed:22:5a:9b:f8:e6:
d2:27:eb:4a:d1:be:2e:1b:d6:71:eb:a7:f7:cb:07:4d:6f:a7:
50:66:3d:1d:29:09:93:8f:5e:22:95:dc:03:08:4c:97:06:25:
07:3a:1f:b1:1a:af:7c:f8:24:6e:25:28:8f:26:a7:4b:b9:4b:
96:5d:86:74:92:3d:23:ef:03:b4:eb:27:3f:ba:b9:d8:f7:17:
ba:e4:c7:a1:fe:b1:1b:d1:f6:04:5f:36:f5:1d:4e:39:35:e0:
c4:83:89:20:bd:c9:7b:d7:4e:c4:9d:52:35:8d:87:75:89:38:
5a:03:df:c4:7e:42:34:d4:df:82:bf:52:34:e0:9f:e0:c3:d7:
f1:3a:a1:39:9d:7b:ce:cc:92:05:50:07:59:02:dc:3f:96:bf:
92:0c:bd:b7:25:84:40:0e:b1:0e:93:b0:f0:56:5b:27:5b:67:
5c:0e:3a:37:ab:70:f8:88:f4:f6:b5:ad:fa:a8:1c:55:9d:2e:
f5:35:3b:53
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISAZ2LqebhH9hJe/d1FT3fAtqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwNDE0MTEwNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWNhMWRkNzVhNjMwYTIxYTBhZmJkN2I2ODhjMjNlN2FhNTEyNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pc/MxivndJnySn3Okj7GuPXQJi4
IvAmf7zJbXTqYbAbkqFt8syxUrvRN+EmtoRNq1jKmyMI3wWtsvTb2ajfAm3Y+Egv
81OfOkdpCZKWstweC6sCJ2NCP3S/ZqapNvji/MxBxtaH4voWZqTuxnrjwnRmKp7m
6YZ6xSAZPXFUJCDrEX2crMMd6J9hNfSdPl2ago1BYxAwDmquHJ/5AuV7opgOe+8c
0XAwqrhLUuKWqykvAwt5AABryZYbPydF+7AsuAU2txAZJiVwv61w0XphMa3A3Mpn
A0SvaIWk3cuNJO7aHiYM2CIuABuJYbr+6zVu15NgBTrCX12RWzsnxPS1LwIDAQAB
o4IDIzCCAx8wHQYDVR0OBBYEFCHKHddaYwohoK+9e2iMI+eqUSXYMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSWNvZDExcGpDaUdncjcxN2FJd2o1NnBSSmRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjCCAR4EAgABMIIB
FgMEAFBgDAMEAFBgKwMEAFBgLwMEAFBgMwMEAFBgOQMEAFBgQwMEAFBgRQMEAFBg
SAMEAFBgTwMEAFBgpgMEAFBg2zAMAwQAUGGTAwQBUGGUAwQAUbQbAwQAUbUeAwQA
UbVwAwQAUbWAAwQAUbWTAwQAUbWnAwQAUbX2AwQAVXgUAwQAVXgXAwQAweIQAwQA
weJ0AwQAweJ9AwQAweJ/AwQAweaeAwQAwearAwQAweblAwQAwedLAwQAwedsAwQA
wee4AwQAwefCAwQAwefpAwQAwefsAwQAwefuAwQAwef8AwQAwmZiAwQAwmaGAwQA
wmblAwQAwpngAwQAwpnjAwQA2ZwOAwQA2ZwpAwQA2ZxcAwQA2ZxhMA0GCSqGSIb3
DQEBCwUAA4IBAQCiMh0lU8TNTfDDGivcfCxsfOrtm+/8xxZZ7phJqBYRXkR9DU1T
joO6uLuIexVR50FFTGWr2mH4jgbCQumquaWMNfDtIlqb+ObSJ+tK0b4uG9Zx66f3
ywdNb6dQZj0dKQmTj14ildwDCEyXBiUHOh+xGq98+CRuJSiPJqdLuUuWXYZ0kj0j
7wO06yc/urnY9xe65Meh/rEb0fYEXzb1HU45NeDEg4kgvcl7107EnVI1jYd1iTha
A9/EfkI01N+Cv1I04J/gw9fxOqE5nXvOzJIFUAdZAtw/lr+SDL23JYRADrEOk7Dw
VlsnW2dcDjo3q3D4iPT2ta36qBxVnS71NTtT
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:13 2026 by rpki-client