Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/k6iypoa6LHwlwb2qIMXLLBYL54M.roa
File: k6iypoa6LHwlwb2qIMXLLBYL54M.roa (raw, json)
Hash identifier: mfnNfPCGzWqdDV2YD4QQcqHG+UEJW0CMtavWwVN5thM=
Subject key identifier: 93:A8:B2:A6:86:BA:2C:7C:25:C1:BD:AA:20:C5:CB:2C:16:0B:E7:83
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 019C940563B3DA75EEF75C78BFB70A1E0F27
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/k6iypoa6LHwlwb2qIMXLLBYL54M.roa
Signing time: Wed 25 Feb 2026 08:58:27 +0000
ROA not before: Wed 25 Feb 2026 08:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15377
IP address blocks: 5.252.180.0/22 maxlen: 22
46.98.0.0/16 maxlen: 16
88.218.180.0/22 maxlen: 22
91.201.68.0/22 maxlen: 22
91.215.52.0/22 maxlen: 22
91.233.96.0/22 maxlen: 22
91.236.96.0/22 maxlen: 22
91.243.192.0/19 maxlen: 19
178.215.160.0/20 maxlen: 20
185.205.144.0/22 maxlen: 22
185.244.140.0/22 maxlen: 22
192.162.108.0/22 maxlen: 22
193.108.248.0/22 maxlen: 22
212.115.224.0/19 maxlen: 19
213.177.180.0/24 maxlen: 24
2a05:8dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:05:63:b3:da:75:ee:f7:5c:78:bf:b7:0a:1e:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Feb 25 08:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a8b2a686ba2c7c25c1bdaa20c5cb2c160be783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:e0:89:06:49:df:9b:87:1d:f9:01:d3:54:
90:90:2b:8b:07:0e:e4:bc:f5:26:65:44:c4:1f:14:
44:7b:64:bc:d4:46:97:fb:d9:b6:72:21:3a:14:ad:
fe:08:78:70:38:2c:29:98:98:07:1a:90:7b:c7:76:
c7:e3:2c:28:a2:cc:15:b1:8c:f1:3f:6c:fc:87:66:
1e:8e:4f:dc:61:b3:c2:e8:fc:59:43:91:44:aa:67:
59:a0:0b:f6:74:73:f4:6a:b8:f4:5c:b9:ef:a9:29:
63:22:fd:b8:7d:b6:5e:00:59:45:c3:de:44:30:dc:
02:22:af:80:2e:96:60:49:22:2f:b1:6e:41:82:dc:
6d:41:f1:3a:df:4a:dd:12:2c:f1:62:12:cd:42:16:
48:ef:ca:d0:f5:57:25:12:b8:fa:90:25:4f:f2:c6:
77:cf:1c:e1:6a:dd:25:81:e9:f2:c8:99:bf:a0:13:
d9:a7:bb:6f:42:59:9b:90:45:08:69:81:95:df:41:
4f:53:63:45:ba:ab:a5:32:33:8b:8f:fa:ef:85:b3:
88:49:9c:7b:92:50:2f:c3:b8:fe:6d:18:75:5a:f3:
74:f1:9c:67:06:12:a5:39:10:53:a4:6a:08:ec:2a:
d4:f7:ff:46:6a:6e:94:0e:ac:07:4f:57:25:ff:e2:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:B2:A6:86:BA:2C:7C:25:C1:BD:AA:20:C5:CB:2C:16:0B:E7:83
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/k6iypoa6LHwlwb2qIMXLLBYL54M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.180.0/22
46.98.0.0/16
88.218.180.0/22
91.201.68.0/22
91.215.52.0/22
91.233.96.0/22
91.236.96.0/22
91.243.192.0/19
178.215.160.0/20
185.205.144.0/22
185.244.140.0/22
192.162.108.0/22
193.108.248.0/22
212.115.224.0/19
213.177.180.0/24
IPv6:
2a05:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
41:33:9f:35:90:e5:6c:b7:42:74:62:92:4f:31:63:ca:49:d9:
dd:c6:70:99:ac:d8:1d:ce:ba:00:03:09:31:e0:18:91:f9:80:
18:9c:e4:00:16:0e:7d:bd:7b:a8:0b:20:37:22:49:2b:8e:27:
90:41:bd:a2:fa:80:27:e3:2b:2d:80:cf:f3:a4:a8:57:ca:81:
6c:b3:7c:16:0d:6d:e4:b9:ce:0a:17:c6:8a:77:90:f7:c4:0c:
96:32:a8:3d:69:a0:f5:28:62:c5:64:e4:9f:42:81:f5:7b:0a:
f2:29:d6:4b:4f:1d:9d:53:00:c3:1e:68:a4:78:df:ec:63:13:
41:c9:c8:e2:86:c2:76:93:ff:9d:6f:7d:bb:75:e8:ba:5d:c6:
df:b7:ee:cc:79:ce:b2:d8:93:f6:7a:f3:6e:dc:dd:c5:12:6d:
11:1d:83:d5:96:7b:df:aa:12:2c:09:1b:41:f1:e0:35:ee:fb:
f5:2f:a8:30:d0:a6:63:43:2f:27:50:b4:ea:3b:82:a7:7b:cd:
69:22:72:02:96:68:3f:8d:9e:c5:4a:6e:a7:0c:ef:17:e0:4f:
b1:5b:d5:2f:66:2f:3a:03:6f:72:10:32:50:63:9f:14:9e:ca:
49:3b:63:00:ba:50:5f:bc:fe:43:86:0a:c0:ac:fc:2a:77:77:
42:13:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:31 2026 by rpki-client