Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/iAcU8TmU3XO9pInkys3o4nP2d1o.roa
File: iAcU8TmU3XO9pInkys3o4nP2d1o.roa (raw, json)
Hash identifier: 8kLlqWjTG7qODVMxiGmAdLlFMj+sGZZsSvd11HBghdw=
Subject key identifier: 88:07:14:F1:39:94:DD:73:BD:A4:89:E4:CA:CD:E8:E2:73:F6:77:5A
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019E8383B477BA7519C6A99FF8D7DBD5BB01
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/iAcU8TmU3XO9pInkys3o4nP2d1o.roa
Signing time: Mon 01 Jun 2026 14:08:27 +0000
ROA not before: Mon 01 Jun 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201589
IP address blocks: 5.101.36.0/24 maxlen: 24
5.101.37.0/24 maxlen: 24
5.101.38.0/24 maxlen: 24
5.101.39.0/24 maxlen: 24
5.101.71.0/24 maxlen: 24
31.184.232.0/24 maxlen: 24
31.184.233.0/24 maxlen: 24
31.184.234.0/24 maxlen: 24
31.184.235.0/24 maxlen: 24
91.108.187.0/24 maxlen: 24
185.238.152.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:83:b4:77:ba:75:19:c6:a9:9f:f8:d7:db:d5:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jun 1 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=880714f13994dd73bda489e4cacde8e273f6775a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:a9:4d:03:68:00:5e:60:63:1e:03:87:a3:
99:15:8e:7a:1c:66:9c:f5:56:7c:d8:6f:a4:27:9b:
b8:a8:6a:24:82:6d:85:de:96:86:c2:94:20:08:16:
86:d2:f2:26:6b:7a:99:cf:fd:7b:53:98:b9:df:48:
e4:45:53:4c:69:3f:61:b3:75:ba:18:72:c7:a1:1e:
62:5b:3d:18:2f:c5:2b:d0:5c:0a:0e:70:2c:20:51:
08:f0:fb:bf:8f:fc:9a:f2:b7:6b:2b:48:9a:14:48:
9a:9f:64:9a:06:b5:6e:72:1b:92:8b:c5:a9:7f:4c:
36:8a:fe:e6:23:e0:2b:af:bf:e4:0a:f2:6e:f0:36:
26:41:ca:ee:f3:25:65:94:82:2e:71:8c:73:4e:c6:
c5:82:2f:88:6b:10:11:f3:07:f8:e3:a0:e8:7e:22:
51:a3:53:05:bc:93:b2:8d:1c:a8:13:f0:a7:9a:4a:
c6:35:f5:f2:0d:06:43:9a:33:c1:ca:86:3a:cb:35:
9d:7c:51:e9:43:9f:e5:33:f7:c3:a4:84:6b:3e:ef:
15:f0:3c:fe:1b:76:7f:95:5e:9d:79:0d:30:cd:21:
c1:9b:b9:36:ba:e2:6b:f0:16:7d:3f:8e:5e:7e:b8:
97:80:0f:c8:14:b7:21:c4:a9:9d:90:b7:7f:14:1a:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:07:14:F1:39:94:DD:73:BD:A4:89:E4:CA:CD:E8:E2:73:F6:77:5A
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/iAcU8TmU3XO9pInkys3o4nP2d1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.36.0/22
5.101.71.0/24
31.184.232.0/22
91.108.187.0/24
185.238.152.0/24
185.238.155.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5a:63:12:8a:c3:7e:a3:d7:3c:d1:79:80:b3:3a:0b:bf:8c:
b4:e5:5f:af:49:84:8e:30:6b:91:30:f7:fd:36:00:4f:38:6d:
ab:00:c5:2e:e5:19:0e:ca:d5:cf:b6:1c:d2:e0:c4:cc:30:3b:
2d:40:4c:8b:99:5d:2c:c2:b6:c3:a3:36:f0:1d:d8:6a:60:f3:
5d:76:52:2c:6c:76:46:38:58:b0:21:a6:21:e0:7a:20:5f:41:
b8:2d:ea:a3:c4:8d:77:f7:77:41:96:51:1f:aa:3d:51:b8:01:
c9:ae:9e:b7:4b:9f:d0:c6:ed:ac:61:c5:ee:c1:9b:c7:58:43:
40:4e:59:ec:be:cd:d2:7d:3c:f2:a9:c8:ac:28:23:6e:45:8d:
63:59:4c:45:11:ed:c2:1b:fc:ee:87:39:2c:5f:cc:e6:0a:54:
0d:ca:5a:40:5d:0a:fa:db:50:61:ff:61:ef:59:0a:f4:f1:8b:
98:ec:40:83:0b:bf:6f:20:33:9a:c7:f6:00:e5:0f:db:3f:46:
0f:d5:4a:45:ce:7f:ae:12:aa:5a:de:66:29:b0:50:bf:20:c1:
25:cc:cf:0d:9d:b0:c5:bc:a4:07:a3:4b:e6:04:a4:04:eb:2f:
53:ad:b2:a1:fe:23:7a:60:aa:52:2d:88:36:18:7c:b2:11:fb:
4a:c0:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:27:22 2026 by rpki-client