Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/U2pLLOkiHMn0rCPB16cgMVj-e5k.roa
File: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (raw, json)
Hash identifier: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=
Subject key identifier: 53:6A:4B:2C:E9:22:1C:C9:F4:AC:23:C1:D7:A7:20:31:58:FE:7B:99
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019D90D6A9BADBF9228AF1C6107E98669614
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/U2pLLOkiHMn0rCPB16cgMVj-e5k.roa
Signing time: Wed 15 Apr 2026 11:11:20 +0000
ROA not before: Wed 15 Apr 2026 11:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 2.59.216.0/24 maxlen: 24
2.59.217.0/24 maxlen: 24
2.59.218.0/24 maxlen: 24
171.22.182.0/24 maxlen: 24
171.22.183.0/24 maxlen: 24
188.119.123.0/24 maxlen: 24
193.35.227.0/24 maxlen: 24
213.109.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:d6:a9:ba:db:f9:22:8a:f1:c6:10:7e:98:66:96:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 15 11:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536a4b2ce9221cc9f4ac23c1d7a7203158fe7b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:6a:46:8e:49:bb:76:0d:f6:ad:29:7e:bb:
ae:60:36:3c:5f:a3:68:31:fb:76:20:fc:0e:2c:1f:
a7:ad:e2:23:cf:33:be:32:3c:96:d8:13:a3:0a:0a:
1f:79:25:c1:0f:41:f7:54:b2:d3:f9:90:e2:35:8e:
b8:ad:d3:de:6f:e5:76:bd:2c:b4:c0:f7:c6:eb:09:
83:44:6f:45:9a:6f:55:8d:b5:b3:cc:a6:8f:a4:89:
9b:3b:5a:a6:32:c6:17:31:e2:c7:0c:29:e2:d5:77:
23:ac:e0:ed:00:ef:57:27:b6:d3:d5:65:2f:a0:b6:
53:d6:58:a5:74:5f:5b:5e:b2:be:fe:de:62:bc:8d:
c5:f6:fe:bb:cb:26:13:0a:de:e2:82:d6:51:04:aa:
ae:dd:d8:25:c8:a0:3d:fb:a2:cd:e6:47:75:eb:20:
dc:d9:c5:77:68:09:a9:c1:d1:03:4a:48:6b:8b:c0:
2e:9c:02:b9:ab:c0:6a:b0:af:a2:f6:35:8d:2e:0f:
2d:9a:a6:4b:3f:91:a7:d4:bc:f8:c6:4d:b8:d5:29:
02:a5:60:e0:97:2a:f8:57:9b:da:ae:9c:73:bd:65:
b0:f9:29:c2:90:94:8c:27:ba:c9:26:3c:cd:5b:91:
5d:35:c8:35:5a:c8:e5:d5:ad:a7:c4:fd:6b:36:76:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:4B:2C:E9:22:1C:C9:F4:AC:23:C1:D7:A7:20:31:58:FE:7B:99
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/U2pLLOkiHMn0rCPB16cgMVj-e5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.216.0-2.59.218.255
171.22.182.0/23
188.119.123.0/24
193.35.227.0/24
213.109.203.0/24
Signature Algorithm: sha256WithRSAEncryption
86:71:b4:9a:eb:6e:fb:65:a3:bc:a2:22:7a:f5:3e:80:54:73:
9b:ec:cb:3f:f3:ee:7d:01:78:1c:c7:dd:57:44:1f:8d:9c:33:
3c:36:59:d5:b8:b6:cb:ef:ec:1a:2b:d5:51:35:61:ec:19:86:
a1:45:3d:cd:97:d3:38:df:b7:9d:5d:ba:d6:55:46:cc:f4:a4:
61:b8:e2:2c:8c:7c:da:c1:35:33:36:e2:45:ce:7c:c9:2c:bd:
74:2d:f6:9b:f1:c8:57:36:17:58:95:0c:2c:89:6a:da:c4:e8:
e7:b3:85:9d:74:8c:df:c6:aa:78:c1:01:ba:ec:44:5c:d3:f7:
e4:e5:dd:b2:0b:e0:ea:34:f9:3d:bc:e2:bd:ef:e9:30:cb:d4:
11:42:db:4b:9e:9c:f0:b9:5f:60:7f:50:42:35:a1:f3:26:b7:
2f:b0:fb:20:c6:9b:db:64:9f:48:c8:6b:88:09:24:af:05:eb:
65:8b:e7:8f:36:8c:b4:83:3c:ce:4d:6c:78:db:7a:90:1e:89:
3a:da:11:d1:6d:4e:19:26:f7:b9:d0:fa:ff:58:01:94:eb:40:
e7:48:d8:c0:08:54:65:c9:5f:db:9d:8f:68:80:4c:dc:0e:e4:
08:f6:b2:8c:cd:b2:c0:21:cf:0a:42:83:2c:24:99:da:d1:fd:
34:90:7f:0b
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ2Q1qm62/kiivHGEH6YZpYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjYwNDE1MTExMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzZhNGIyY2U5MjIxY2M5ZjRhYzIzYzFkN2E3MjAzMTU4ZmU3Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK5qRo5Ju3YN9q0pfruuYDY8X6No
Mft2IPwOLB+nreIjzzO+MjyW2BOjCgofeSXBD0H3VLLT+ZDiNY64rdPeb+V2vSy0
wPfG6wmDRG9Fmm9VjbWzzKaPpImbO1qmMsYXMeLHDCni1XcjrODtAO9XJ7bT1WUv
oLZT1lildF9bXrK+/t5ivI3F9v67yyYTCt7igtZRBKqu3dglyKA9+6LN5kd16yDc
2cV3aAmpwdEDSkhri8AunAK5q8BqsK+i9jWNLg8tmqZLP5Gn1Lz4xk241SkCpWDg
lyr4V5varpxzvWWw+SnCkJSMJ7rJJjzNW5FdNcg1Wsjl1a2nxP1rNnaR+wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFNqSyzpIhzJ9KwjwdenIDFY/nuZMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvVTJwTExPa2lITW4wckNQQjE2Y2dNVmotZTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAMCO9gD
BAACO9oDBAGrFrYDBAC8d3sDBADBI+MDBADVbcswDQYJKoZIhvcNAQELBQADggEB
AIZxtJrrbvtlo7yiInr1PoBUc5vsyz/z7n0BeBzH3VdEH42cMzw2WdW4tsvv7Bor
1VE1YewZhqFFPc2X0zjft51dutZVRsz0pGG44iyMfNrBNTM24kXOfMksvXQt9pvx
yFc2F1iVDCyJatrE6OezhZ10jN/GqnjBAbrsRFzT9+Tl3bIL4Oo0+T284r3v6TDL
1BFC20uenPC5X2B/UEI1ofMmty+w+yDGm9tkn0jIa4gJJK8F62WL5482jLSDPM5N
bHjbepAeiTraEdFtThkm97nQ+v9YAZTrQOdI2MAIVGXJX9udj2iATNwO5Aj2sozN
ssAhzwpCgywkmdrR/TSQfws=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:59 2026 by rpki-client