Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8iq73EY8SNEMLGjWaX4ccQq1LKw.roa
File: 8iq73EY8SNEMLGjWaX4ccQq1LKw.roa (raw, json)
Hash identifier: JmTLodfb4oaon3Tv2+zOKzJurk+8nq1oEroEJejbuII=
Subject key identifier: F2:2A:BB:DC:46:3C:48:D1:0C:2C:68:D6:69:7E:1C:71:0A:B5:2C:AC
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 019C81C1CA9F987EC916A39F530FC11876B2
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8iq73EY8SNEMLGjWaX4ccQq1LKw.roa
Signing time: Sat 21 Feb 2026 19:51:27 +0000
ROA not before: Sat 21 Feb 2026 19:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.38.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.43.0/24 maxlen: 24
195.219.44.0/24 maxlen: 24
195.219.45.0/24 maxlen: 24
195.219.47.0/24 maxlen: 24
195.219.96.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c1:ca:9f:98:7e:c9:16:a3:9f:53:0f:c1:18:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Feb 21 19:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22abbdc463c48d10c2c68d6697e1c710ab52cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:e1:bb:08:bb:a7:b5:4d:fe:e5:01:69:0a:
33:a2:8f:28:e7:8c:8d:69:d0:06:59:90:54:a9:ce:
cd:2a:1c:3c:83:8c:66:f7:27:0f:4b:91:ef:70:2f:
50:2b:bb:ab:cf:c0:fc:6a:d0:82:b4:c3:d7:fb:32:
d1:a7:66:81:bd:21:14:c4:20:29:b6:df:5c:04:e1:
a0:d4:30:24:0f:f9:aa:f4:da:51:ab:61:6a:3a:c0:
b1:20:9a:a2:6a:09:94:19:b5:bc:df:7a:ee:53:80:
46:e4:ac:3b:1b:57:b7:1f:f1:b6:97:02:2b:dd:82:
0f:9d:9e:99:f6:60:e0:16:92:fb:ba:ed:bb:39:25:
29:98:56:99:70:7e:28:4f:58:f3:5a:b9:27:6b:81:
f5:69:93:6e:32:82:11:9b:0a:a0:eb:2c:06:34:88:
8a:3f:f2:27:5d:4f:ff:9a:78:fe:65:b7:1f:11:c2:
21:fc:ed:95:9a:18:12:5c:ec:f7:13:68:73:94:83:
f0:32:f5:06:69:d9:d9:55:92:e3:93:6b:34:db:3b:
2d:c2:1a:d9:76:47:57:c5:08:fc:99:56:4b:02:f6:
8f:94:b5:cd:33:e6:53:1b:ce:41:b3:8b:ec:01:69:
5a:ec:02:72:6f:da:aa:61:e1:97:9e:bc:61:35:3c:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2A:BB:DC:46:3C:48:D1:0C:2C:68:D6:69:7E:1C:71:0A:B5:2C:AC
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8iq73EY8SNEMLGjWaX4ccQq1LKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:c9:22:e7:6a:f3:11:ad:b3:b0:c0:96:6c:6a:b9:39:04:e0:
c2:c2:1b:07:21:c2:6a:2e:78:20:e0:5d:32:00:76:0a:b8:17:
8c:50:76:b4:12:c7:da:45:e9:b3:28:6c:98:a6:aa:63:e0:10:
00:51:18:a2:36:87:18:b4:9c:84:b8:8f:fb:96:c6:4b:31:4e:
5d:89:55:74:6d:35:12:81:63:b0:0e:fd:6f:d2:58:e3:fb:03:
66:15:6e:f5:3f:ea:11:9a:45:ca:8c:91:0e:d9:78:7f:02:19:
b1:34:f2:0a:28:fe:7c:f3:28:b4:2a:23:70:dd:8c:c0:8a:32:
0e:61:32:7c:5d:0c:3c:6f:6c:d5:a5:1d:b8:5b:b4:8c:20:c3:
93:22:55:c1:e9:71:01:27:5b:c7:8f:9b:d0:ca:80:2e:c7:d7:
ab:2f:9b:ef:cd:0b:62:de:34:a9:0a:4b:61:8c:d2:f3:4c:53:
ff:5b:1f:2a:4a:41:45:cc:22:30:cc:24:96:3b:4a:91:b9:3f:
2b:47:8a:79:50:6b:09:a7:91:08:e3:e7:f2:f3:85:32:83:aa:
9f:0a:45:63:93:ee:d2:af:cd:42:88:92:da:bb:61:fa:4d:73:
c2:43:af:1d:b6:2e:23:7a:d0:bb:01:b4:71:fc:50:8e:83:d3:
44:00:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:16:42 2026 by rpki-client