Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa
File: IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa (raw, json)
Hash identifier: rjt1GPioTzLz/WmxHMW/A6JbnHN5M/Apy60NB3OPgNY=
Subject key identifier: 20:AD:1E:F1:00:E6:1E:3D:E1:35:CA:F7:AA:52:FA:0E:AD:B6:38:15
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019C9719A80194374BC9AAFBE9073855E0AF
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa
Signing time: Wed 25 Feb 2026 23:19:26 +0000
ROA not before: Wed 25 Feb 2026 23:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206188
IP address blocks: 5.42.194.0/24 maxlen: 24
185.168.142.0/24 maxlen: 24
2a0d:df00::/29 maxlen: 29
2a12:14c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:19:a8:01:94:37:4b:c9:aa:fb:e9:07:38:55:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Feb 25 23:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ad1ef100e61e3de135caf7aa52fa0eadb63815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:54:2c:34:5c:58:dc:61:8f:84:85:49:cd:
b1:54:3f:bf:61:c3:42:13:7d:9f:01:a1:75:b5:fd:
58:06:11:1f:35:70:f4:e8:08:38:cf:26:d7:b2:54:
a7:e5:73:fa:7a:45:d4:c9:65:10:a4:cf:a3:c4:8f:
53:0b:de:49:46:a4:9d:c2:09:b6:83:94:c0:50:8e:
c8:c7:68:1e:1c:75:05:67:cc:c6:45:fe:4a:81:ef:
51:db:4c:b2:9b:4e:42:c2:33:9b:e7:2c:b1:8f:73:
58:47:1f:da:21:bf:1a:73:81:81:4a:fa:ee:52:51:
c7:2c:61:05:37:cb:df:dc:4e:a2:99:fd:53:4d:0b:
50:30:d5:02:29:f0:5f:8c:cc:8f:56:3a:e5:45:ea:
e5:8b:69:ff:88:35:ea:58:c8:02:32:3f:af:f4:9d:
be:fb:67:ca:84:dc:31:c4:00:27:d4:fe:f4:df:5d:
0f:bd:94:2e:a2:06:d4:4d:30:c8:63:cc:ac:44:a4:
fa:fd:38:d2:81:07:1e:e7:94:46:51:15:e2:0c:be:
4a:6f:8c:96:07:6d:0b:76:3c:07:23:e8:3d:48:5c:
13:dc:a6:23:17:2e:3a:42:91:f7:d1:8b:cb:22:fc:
b3:2a:ac:12:52:2b:60:ee:fc:00:9b:23:83:ba:0d:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:1E:F1:00:E6:1E:3D:E1:35:CA:F7:AA:52:FA:0E:AD:B6:38:15
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.194.0/24
185.168.142.0/24
IPv6:
2a0d:df00::/29
2a12:14c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:0e:5c:37:ad:b9:32:96:a3:ba:b4:0a:83:da:9a:66:b2:f7:
34:9f:bb:69:25:65:b5:b0:94:4a:73:9d:4b:18:eb:50:f3:e2:
e3:74:92:e5:e8:02:66:c8:ff:b8:16:2d:1d:9a:bf:98:a3:12:
3c:a2:b8:15:2d:7b:a4:0a:b0:be:c7:3b:1b:56:d3:6d:bd:93:
af:80:6b:79:26:60:43:f2:e3:49:f7:e3:0b:32:59:bb:d3:5b:
bc:ba:78:9d:c4:6f:c1:a9:8b:af:62:eb:35:5a:2c:b3:86:0a:
a9:c0:8e:ba:30:57:31:85:47:2a:2d:2f:51:11:a0:ae:4a:28:
4f:54:56:59:e6:eb:f9:fe:2d:9f:94:af:82:56:6d:1e:71:82:
dd:2c:19:88:f6:ae:2a:0d:25:1a:d9:78:f0:5f:3f:85:84:d5:
50:cd:82:61:bb:67:37:fe:40:45:f1:07:5d:3a:7e:9f:d8:9b:
5d:85:b4:9b:b3:11:d7:f6:e0:42:98:12:c4:f9:08:3f:44:74:
45:24:a4:29:ef:ef:33:16:b4:66:0b:0f:ec:44:3d:76:e5:9d:
d8:86:15:13:5d:8e:40:41:88:1f:1b:f8:91:6c:19:72:ef:0a:
ef:57:31:1c:d5:16:80:05:b8:51:43:fb:d1:e2:02:f8:8a:d0:
a4:61:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:39 2026 by rpki-client