Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/5IIUXEAZNtrYdUWTfkEpoGU9_is.roa
File: 5IIUXEAZNtrYdUWTfkEpoGU9_is.roa (raw, json)
Hash identifier: hGgqh1MUpciTEKawXPxZYEEAiYB7oibeQnzurhDNdRM=
Subject key identifier: E4:82:14:5C:40:19:36:DA:D8:75:45:93:7E:41:29:A0:65:3D:FE:2B
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01A01ED6C113A422B009CEE4747A91982496
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/5IIUXEAZNtrYdUWTfkEpoGU9_is.roa
Signing time: Thu 20 Aug 2026 11:03:05 +0000
ROA not before: Thu 20 Aug 2026 11:03:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60893
IP address blocks: 185.220.108.0/22 maxlen: 24
2a0b:efc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:d6:c1:13:a4:22:b0:09:ce:e4:74:7a:91:98:24:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Aug 20 11:03:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e482145c401936dad87545937e4129a0653dfe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:a3:81:41:9c:f7:84:10:e0:df:dc:fa:ce:
06:ba:2d:7a:ed:7d:50:3a:0d:ea:05:d6:df:b6:43:
2f:8e:55:16:df:44:a5:c0:32:f9:bf:32:9c:8d:aa:
b5:39:e1:5f:e1:dd:69:a5:12:34:c0:89:e9:41:26:
aa:65:da:a3:d5:95:09:fe:46:15:c7:83:e7:e0:86:
1b:34:42:24:0d:79:fd:c4:71:89:3d:62:45:04:2a:
ab:e0:c6:31:0e:f2:31:4f:ca:60:30:53:9e:5c:2a:
22:be:a1:8c:40:67:e9:15:01:93:56:e3:8c:0d:45:
23:71:78:98:17:6b:ef:58:b3:ca:c4:4c:e2:62:7b:
1e:60:f9:db:fa:d7:37:92:df:ad:26:ab:99:c6:c1:
f4:dd:02:c8:44:16:f0:05:f6:e2:c5:4c:88:e0:d2:
8d:7d:90:ad:82:01:a1:7e:90:8c:44:eb:51:79:69:
42:94:ea:99:05:f5:d9:fb:12:cc:53:e1:54:2f:61:
a6:9c:10:00:56:96:82:ae:c3:52:b8:8f:d4:a4:d8:
a8:ce:d9:80:66:8e:26:ca:83:55:62:9d:19:2e:af:
82:7a:61:af:22:c1:d0:52:a4:9c:2d:53:64:63:4f:
e4:5e:c6:c7:57:18:97:4e:6a:ce:25:1e:8b:fa:5d:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:14:5C:40:19:36:DA:D8:75:45:93:7E:41:29:A0:65:3D:FE:2B
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/5IIUXEAZNtrYdUWTfkEpoGU9_is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.108.0/22
IPv6:
2a0b:efc0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:36:a7:ec:26:a8:5a:e9:e7:3f:e5:6e:97:88:bb:07:fe:25:
6c:65:3e:4f:ee:83:82:b5:53:dd:fe:05:ff:37:84:72:1a:1a:
8d:8d:c1:27:30:2d:0c:d2:4b:98:c9:e0:c9:93:cf:3b:04:22:
64:55:ca:99:c9:a2:be:dc:7e:22:9f:ef:85:bc:43:05:1b:1a:
d0:96:39:da:ca:7d:e1:92:17:67:0c:cd:31:a2:5d:cf:54:7c:
48:a8:71:31:3a:01:e2:ab:38:bb:5e:ae:ec:b1:a8:73:d7:54:
29:8a:0e:93:f1:08:64:f7:1a:ec:fd:85:a8:ad:8b:d2:40:6b:
bd:5c:e8:ae:18:ae:38:f7:eb:58:9b:1e:9d:17:26:fb:22:1f:
ca:d5:a1:22:5b:b2:a4:cd:1f:d4:b2:a0:4e:05:1c:ce:3d:6d:
79:14:41:86:b5:6b:94:fd:96:d1:fc:f6:11:ea:88:a0:c7:17:
e4:6c:50:cd:39:26:9e:d7:ec:05:a2:6f:3f:6b:cf:c0:e0:fe:
cd:73:b1:20:fe:93:0d:1a:ea:ab:e3:0f:2e:d4:b4:ce:e3:a7:
40:9b:03:f2:6b:54:1c:ba:59:56:87:64:c2:7d:93:f6:17:93:
ef:94:33:c4:23:0d:42:28:bb:af:fb:0d:8f:c6:22:4b:7b:a7:
7d:cb:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:08 2026 by rpki-client