Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IscdJhK13SbGg-mO1awIT1zVlIY.roa
File: IscdJhK13SbGg-mO1awIT1zVlIY.roa (raw, json)
Hash identifier: mxiYgDjEWzo4ikBAEks0u5o4/f6cJ0vesNp9+NA9oW0=
Subject key identifier: 22:C7:1D:26:12:B5:DD:26:C6:83:E9:8E:D5:AC:08:4F:5C:D5:94:86
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019D585396E0261398B6831B79A416A39494
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IscdJhK13SbGg-mO1awIT1zVlIY.roa
Signing time: Sat 04 Apr 2026 11:49:26 +0000
ROA not before: Sat 04 Apr 2026 11:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214785
IP address blocks: 45.134.144.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
103.211.100.0/24 maxlen: 24
103.211.102.0/24 maxlen: 24
172.110.212.0/24 maxlen: 24
172.110.213.0/24 maxlen: 24
172.110.214.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
185.245.1.0/24 maxlen: 24
185.245.2.0/24 maxlen: 24
193.107.216.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
194.120.164.0/24 maxlen: 24
194.145.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:58:53:96:e0:26:13:98:b6:83:1b:79:a4:16:a3:94:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 4 11:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22c71d2612b5dd26c683e98ed5ac084f5cd59486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:35:1b:cf:52:07:c5:e7:61:70:45:64:44:
8c:bc:82:c8:05:e2:45:c9:67:6a:98:cc:a9:d3:9a:
1a:d8:fc:d1:ef:0d:fa:03:1d:a8:2a:96:dd:fe:c4:
77:b6:a3:5a:9a:89:25:b7:cd:d3:5e:88:ae:47:b7:
d8:8e:cb:73:a0:2c:db:b4:2d:3e:ab:97:e2:57:55:
f2:5c:f5:2c:7b:e4:62:65:2a:e9:41:4b:2b:ab:32:
7f:49:23:42:9b:12:2e:61:de:b4:7e:05:a3:58:66:
92:39:75:16:21:8d:92:d0:09:fe:6e:eb:6f:da:77:
9c:b8:90:1b:89:7f:1c:e8:0e:62:54:d7:ee:3d:d8:
3f:94:a9:f6:d2:1e:30:76:1b:a9:31:72:42:16:ac:
cd:9f:16:43:b0:73:aa:59:f2:84:8b:eb:80:3b:63:
9e:8a:36:1e:44:74:4d:16:8c:6b:3f:b1:c3:70:3a:
ea:51:77:2d:a6:0b:d7:4e:d5:53:82:8a:f1:b0:fc:
89:20:81:bf:40:c3:0d:6a:22:08:b1:47:34:ab:cf:
91:88:8f:09:48:30:9b:a9:ed:5a:1e:d7:0d:aa:30:
b4:50:de:f8:86:b4:99:7b:d7:bf:f9:a3:66:d7:c8:
dd:bc:9c:3f:8b:cc:fa:60:e4:af:aa:39:22:9a:dc:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C7:1D:26:12:B5:DD:26:C6:83:E9:8E:D5:AC:08:4F:5C:D5:94:86
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IscdJhK13SbGg-mO1awIT1zVlIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
45.155.224.0/24
103.211.100.0/24
103.211.102.0/24
172.110.212.0-172.110.214.255
185.235.164.0/24
185.245.1.0-185.245.2.255
193.107.216.0/24
194.120.144.0/24
194.120.164.0/24
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:55:b7:d8:bc:50:11:dc:dc:eb:4f:36:ec:ff:58:b0:f2:d6:
98:ff:6e:cd:a1:b3:fb:62:9d:ba:2b:44:82:ab:58:39:09:69:
2c:06:8c:1a:0f:96:b8:44:d4:41:63:02:b8:28:78:d4:30:69:
c5:df:2b:61:a8:c5:5d:f5:ca:76:da:a6:c4:de:28:7b:7f:1d:
a9:56:bd:d3:2b:1e:46:90:39:21:68:27:7d:69:ec:8b:1c:8e:
7a:8a:46:62:d5:b5:23:6c:0b:ec:1a:13:aa:1b:4c:af:59:52:
a1:f6:b8:51:ad:ff:69:30:47:b6:c1:32:81:10:ef:5c:2d:44:
df:60:a2:58:4f:28:b3:d5:8b:36:de:ae:3d:4a:2f:74:c2:5e:
33:68:02:32:42:df:78:78:47:05:78:30:42:c6:24:85:dc:fc:
b5:6f:ae:5c:29:54:80:9c:2a:95:9f:9f:c0:d3:09:2c:e4:56:
9f:f8:01:15:4d:62:b9:cb:d2:11:07:a4:7d:61:20:1d:47:c0:
b8:45:ef:5a:5e:21:ae:dc:05:65:a6:c7:f6:21:f1:21:b3:7a:
5c:5c:e6:65:5b:b7:c7:9a:12:52:36:52:21:ed:b2:1d:c0:b2:
60:f2:8d:62:f3:e1:38:40:7e:06:76:ca:c4:47:b8:c1:00:dc:
28:b7:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:15 2026 by rpki-client