Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IS6qF60yni3ANNewV2jVanIr_SI.roa
File: IS6qF60yni3ANNewV2jVanIr_SI.roa (raw, json)
Hash identifier: tCAUs+RgDDZ80GGfWxjoCo2EBKIL9gwwksfLpYF1d+Q=
Subject key identifier: 21:2E:AA:17:AD:32:9E:2D:C0:34:D7:B0:57:68:D5:6A:72:2B:FD:22
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019FA7E73289A2FF3576941D1D2F52933D04
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IS6qF60yni3ANNewV2jVanIr_SI.roa
Signing time: Tue 28 Jul 2026 08:46:14 +0000
ROA not before: Tue 28 Jul 2026 08:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201341
IP address blocks: 189.81.14.0/23 maxlen: 23
189.81.16.0/23 maxlen: 23
189.81.18.0/23 maxlen: 23
189.81.20.0/23 maxlen: 23
189.81.22.0/23 maxlen: 23
189.81.30.0/23 maxlen: 23
189.81.38.0/23 maxlen: 23
189.81.42.0/23 maxlen: 23
189.81.46.0/23 maxlen: 23
189.81.50.0/23 maxlen: 23
189.81.52.0/23 maxlen: 23
189.81.56.0/23 maxlen: 23
189.81.110.0/23 maxlen: 23
189.81.116.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.128.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.138.0/23 maxlen: 23
189.81.146.0/23 maxlen: 23
189.81.154.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.166.0/23 maxlen: 23
189.81.172.0/23 maxlen: 23
189.81.174.0/23 maxlen: 23
189.81.176.0/23 maxlen: 23
189.81.178.0/23 maxlen: 23
189.81.184.0/23 maxlen: 23
189.81.188.0/23 maxlen: 23
189.81.190.0/23 maxlen: 23
189.81.198.0/23 maxlen: 23
189.81.200.0/23 maxlen: 23
189.81.208.0/23 maxlen: 23
189.81.212.0/23 maxlen: 23
189.81.216.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.240.0/23 maxlen: 23
189.81.244.0/23 maxlen: 23
189.81.248.0/23 maxlen: 23
189.81.252.0/23 maxlen: 23
189.104.8.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.24.0/23 maxlen: 23
189.104.26.0/23 maxlen: 23
189.104.28.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.38.0/23 maxlen: 23
189.104.40.0/23 maxlen: 23
189.104.44.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.58.0/23 maxlen: 23
189.104.62.0/23 maxlen: 23
189.104.70.0/23 maxlen: 23
189.104.72.0/23 maxlen: 23
189.104.74.0/23 maxlen: 23
189.104.76.0/23 maxlen: 23
189.104.82.0/23 maxlen: 23
189.104.86.0/23 maxlen: 23
189.104.88.0/23 maxlen: 23
189.104.110.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.166.0/23 maxlen: 23
189.104.176.0/23 maxlen: 23
189.104.188.0/23 maxlen: 23
189.104.190.0/23 maxlen: 23
189.104.194.0/23 maxlen: 23
189.104.206.0/23 maxlen: 23
189.104.214.0/23 maxlen: 23
189.104.216.0/23 maxlen: 23
189.104.222.0/23 maxlen: 23
189.104.228.0/23 maxlen: 23
189.104.230.0/23 maxlen: 23
189.104.232.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.240.0/23 maxlen: 23
189.104.248.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
205.188.108.0/23 maxlen: 23
205.188.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e7:32:89:a2:ff:35:76:94:1d:1d:2f:52:93:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 28 08:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=212eaa17ad329e2dc034d7b05768d56a722bfd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:08:1d:d1:0e:77:7e:99:67:f7:72:18:f1:
12:cb:57:ce:d7:a6:4c:a7:c7:0b:d5:6f:6b:f2:3e:
ff:b4:5e:f0:39:7a:28:f2:91:45:6e:aa:fc:63:72:
0d:68:d6:ae:46:92:b7:50:9f:67:ab:61:99:3d:ae:
d9:2f:77:8c:52:2e:28:0b:ec:77:8d:ce:b6:be:93:
5a:23:01:c0:fd:c9:44:92:98:14:64:3e:ef:9d:f7:
24:a0:a3:7a:8f:c1:60:71:7d:13:e9:de:b5:aa:17:
54:67:bb:48:ff:de:3f:ed:c1:3b:92:20:43:85:d2:
ec:af:7f:10:42:76:4d:70:47:04:72:41:6b:42:ff:
ab:b7:9c:47:de:d2:3f:c3:68:29:83:1b:5f:11:0d:
48:93:71:7a:3d:6f:bc:0d:56:51:3c:5f:df:44:35:
11:d2:c7:c0:db:f5:e7:11:0f:17:f8:99:d0:03:c8:
80:7e:15:99:f0:23:b7:6d:aa:93:77:44:18:26:06:
fe:3e:50:69:ef:36:80:95:5b:14:ec:4e:77:d0:39:
c4:b0:43:74:cf:7a:b9:e1:a3:40:5e:ba:a8:0c:f8:
8f:5d:eb:88:19:94:e1:ea:c8:32:2e:8f:9d:c7:d8:
f6:28:19:12:b7:42:1c:02:9e:7e:1f:88:a1:36:bd:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:AA:17:AD:32:9E:2D:C0:34:D7:B0:57:68:D5:6A:72:2B:FD:22
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IS6qF60yni3ANNewV2jVanIr_SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.14.0-189.81.23.255
189.81.30.0/23
189.81.38.0/23
189.81.42.0/23
189.81.46.0/23
189.81.50.0-189.81.53.255
189.81.56.0/23
189.81.110.0/23
189.81.116.0/23
189.81.120.0/23
189.81.128.0/22
189.81.136.0/22
189.81.146.0/23
189.81.154.0/23
189.81.158.0/23
189.81.166.0/23
189.81.172.0-189.81.179.255
189.81.184.0/23
189.81.188.0/22
189.81.198.0-189.81.201.255
189.81.208.0/23
189.81.212.0/23
189.81.216.0/23
189.81.228.0/23
189.81.240.0/23
189.81.244.0/23
189.81.248.0/23
189.81.252.0/23
189.104.8.0/23
189.104.14.0/23
189.104.24.0/21
189.104.38.0-189.104.41.255
189.104.44.0/23
189.104.56.0/22
189.104.62.0/23
189.104.70.0-189.104.77.255
189.104.82.0/23
189.104.86.0-189.104.89.255
189.104.110.0/23
189.104.154.0/23
189.104.166.0/23
189.104.176.0/23
189.104.188.0/22
189.104.194.0/23
189.104.206.0/23
189.104.214.0-189.104.217.255
189.104.222.0/23
189.104.228.0-189.104.233.255
189.104.236.0/23
189.104.240.0/23
189.104.248.0/22
205.188.108.0/23
205.188.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c5:42:a1:b7:c9:37:9b:8c:65:f4:46:90:e3:e8:d1:ce:1f:
d2:14:b8:64:14:3a:46:c6:f6:9b:e6:8e:05:f1:e1:e7:b3:91:
60:84:8d:ac:2e:99:c7:09:e9:69:10:1f:9a:0d:33:3f:02:8a:
4a:fc:7a:29:61:a0:c3:0f:b4:23:a3:7d:18:a4:38:46:0a:36:
25:72:23:c8:8c:24:ce:3d:87:f3:7d:dd:c9:71:6c:d2:dd:d5:
e9:fb:a2:7c:94:83:0b:15:cf:b7:28:5a:b4:dc:5d:65:cf:c9:
50:04:02:ab:d7:1a:4d:ef:c3:02:fa:7a:d0:ac:9f:c6:01:48:
d7:be:5a:0c:c3:78:23:2e:a7:79:68:3c:99:48:08:f5:c2:85:
f7:a6:ae:d5:57:f1:27:f3:a7:78:6e:7d:e8:6a:b4:92:f8:69:
dd:69:8f:b2:83:e7:fa:de:9b:06:f1:08:7f:1b:01:73:bf:ca:
9d:d1:d9:1f:35:4f:14:1f:12:13:84:92:49:7d:57:9a:b6:fa:
99:ed:26:6d:37:11:06:dc:1e:b7:b5:f8:61:d5:3e:62:97:9d:
61:55:1e:85:a4:bd:c4:90:08:ef:bd:f1:22:a7:fe:29:4a:7a:
2d:c9:30:e1:f7:57:1d:fe:95:f7:b7:3d:81:bf:74:93:07:92:
ba:d9:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:06 2026 by rpki-client