Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa
File: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (raw, json)
Hash identifier: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=
Subject key identifier: 21:E5:19:A4:0F:DC:45:AA:F3:9A:60:0A:97:59:93:35:E4:B6:C3:A4
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 019EB07EF841596EF958639584FCBD947B34
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa
Signing time: Wed 10 Jun 2026 07:46:11 +0000
ROA not before: Wed 10 Jun 2026 07:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39458
IP address blocks: 93.189.0.0/21 maxlen: 21
185.85.84.0/22 maxlen: 22
2a03:8c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:7e:f8:41:59:6e:f9:58:63:95:84:fc:bd:94:7b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Jun 10 07:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e519a40fdc45aaf39a600a97599335e4b6c3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:2c:d3:51:6e:41:03:68:87:fa:72:ec:44:
86:a4:3c:78:9b:62:2d:87:63:5d:a6:12:c0:c3:ef:
f6:21:c8:b0:55:b5:2d:21:dd:43:80:34:f7:8d:f2:
25:90:24:ba:31:73:18:c0:07:af:ec:09:f3:12:7a:
8d:30:23:5d:dd:eb:72:37:dd:44:a7:81:75:7d:42:
b6:21:34:7f:40:b6:5d:4f:10:9b:e6:80:51:d8:1b:
90:ac:7f:74:1c:c7:a1:9e:bd:a5:f9:2f:4e:4f:4c:
cf:03:ac:ca:64:28:01:22:d7:71:76:d7:a0:53:3b:
d1:cb:4d:a4:ea:be:7e:a2:0e:22:e5:de:74:3e:ea:
f5:bb:2a:75:f2:8a:ff:5b:6e:29:38:69:ef:a9:ea:
f7:5d:d7:46:73:51:1f:2c:f8:79:10:1d:32:90:0a:
b2:61:0f:4f:40:56:6c:d6:fc:6f:c9:34:e7:b2:cb:
73:89:ce:53:ea:76:7a:b8:c4:2a:50:b3:99:a8:71:
aa:f4:2d:eb:24:62:5c:15:96:53:ae:cc:9c:0f:54:
37:1d:c4:b0:29:21:3a:25:94:5a:32:35:a4:f5:0e:
1c:bd:43:29:60:cc:05:7b:25:79:b9:c8:9b:e2:ff:
57:31:d6:89:5b:85:7e:cd:80:ec:bf:8e:b4:71:40:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:19:A4:0F:DC:45:AA:F3:9A:60:0A:97:59:93:35:E4:B6:C3:A4
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.0.0/21
185.85.84.0/22
IPv6:
2a03:8c00::/32
Signature Algorithm: sha256WithRSAEncryption
86:7e:83:b0:98:c9:d8:4f:ae:b1:0a:51:a4:cc:b3:0b:c3:55:
19:56:66:bd:2a:95:41:94:5d:f8:17:32:5f:09:9c:0b:e4:08:
27:8a:e8:a4:0a:d7:7c:e0:8f:32:0e:85:61:53:cd:a0:33:36:
80:2f:d9:cd:47:31:51:77:05:c1:87:44:85:53:94:d2:46:47:
03:86:41:66:d4:61:b8:c5:40:f2:52:8c:ea:19:3b:d6:be:ab:
60:78:e7:ec:c6:ae:75:c5:af:e4:e0:5f:c3:3c:85:2c:37:8b:
1c:35:17:8b:ed:d7:b1:b4:61:4c:c5:1c:fc:98:cc:89:5b:63:
5c:2a:44:c8:66:b9:34:0d:17:4c:18:44:72:70:17:b5:33:a0:
9d:17:06:a7:74:a7:cf:cb:59:83:08:4f:eb:75:5c:c3:ef:83:
48:3d:c3:7a:0d:63:86:0a:e1:91:49:fc:ad:9c:41:34:14:2e:
e9:43:0e:0b:e2:d9:0e:2e:fb:95:bb:9c:b3:3a:e7:60:79:46:
42:c9:47:be:f4:6a:9c:aa:c6:90:19:ec:96:7a:33:41:cc:19:
92:d6:d9:81:e1:71:58:d7:03:d8:e6:b1:11:40:e3:02:8e:d9:
63:9a:0b:46:e2:3a:bd:ec:b9:9f:4c:19:02:1f:61:dd:e2:f5:
6d:bb:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:59 2026 by rpki-client