Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/IEd03APIj9NfdUX_9wSXfsHLBLE.roa
File: IEd03APIj9NfdUX_9wSXfsHLBLE.roa (raw, json)
Hash identifier: 6bfdUmY4PnUkUo5aVX+MCpBWltngnnsq0PF3HT6YjOM=
Subject key identifier: 20:47:74:DC:03:C8:8F:D3:5F:75:45:FF:F7:04:97:7E:C1:CB:04:B1
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D87293F79DC3D5163BC196FAC54F5FD79
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/IEd03APIj9NfdUX_9wSXfsHLBLE.roa
Signing time: Mon 13 Apr 2026 14:05:20 +0000
ROA not before: Mon 13 Apr 2026 14:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 138.249.24.0/24 maxlen: 24
138.249.25.0/24 maxlen: 24
138.249.26.0/24 maxlen: 24
138.249.32.0/24 maxlen: 24
138.249.33.0/24 maxlen: 24
138.249.34.0/24 maxlen: 24
138.249.35.0/24 maxlen: 24
138.249.40.0/24 maxlen: 24
138.249.41.0/24 maxlen: 24
138.249.42.0/24 maxlen: 24
138.249.43.0/24 maxlen: 24
138.249.120.0/24 maxlen: 24
138.249.121.0/24 maxlen: 24
138.249.122.0/24 maxlen: 24
138.249.124.0/24 maxlen: 24
138.249.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:29:3f:79:dc:3d:51:63:bc:19:6f:ac:54:f5:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Apr 13 14:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=204774dc03c88fd35f7545fff704977ec1cb04b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:42:b1:a6:fe:2e:dd:27:14:a0:50:f7:6b:
c7:6e:88:52:5c:01:5b:fb:44:32:ad:59:eb:69:36:
d6:7c:74:0b:28:21:ae:b5:64:07:3c:b5:2d:d8:3c:
b3:66:30:b0:97:17:fa:e2:fd:b8:51:f6:11:96:26:
7b:3a:b1:be:d6:39:d3:b0:4a:9f:ff:30:59:24:c7:
d9:20:de:a4:6e:9c:85:d2:8d:65:86:04:f2:4b:1e:
68:47:60:cb:9a:99:07:38:cb:16:0e:ad:c9:42:17:
d0:d1:98:9c:5c:8e:05:36:e6:08:c0:e7:d5:9a:c9:
4f:de:31:e7:b6:4b:d1:57:5f:2b:dd:6f:75:2e:79:
1b:62:5b:c6:d3:2c:8a:0c:56:18:ef:5e:46:fc:a8:
55:f4:22:d7:dc:65:f5:73:ae:a5:4a:59:1c:0d:d4:
5e:8b:33:cb:a3:9e:44:aa:b5:51:00:e6:12:87:91:
40:ad:fc:4c:76:6d:6b:37:7e:45:58:1c:ff:74:ee:
50:1d:10:a4:fd:94:d6:82:57:9f:d7:6e:cc:53:11:
bf:3b:82:3e:5b:6e:6c:0c:48:f8:fb:45:9a:48:d9:
bf:fa:13:06:07:18:5b:dc:32:d3:58:4b:1e:3f:8c:
51:e5:50:18:39:4b:b5:f5:f9:25:a4:14:67:f4:81:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:74:DC:03:C8:8F:D3:5F:75:45:FF:F7:04:97:7E:C1:CB:04:B1
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/IEd03APIj9NfdUX_9wSXfsHLBLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.24.0-138.249.26.255
138.249.32.0/22
138.249.40.0/22
138.249.120.0-138.249.122.255
138.249.124.0/23
Signature Algorithm: sha256WithRSAEncryption
35:9f:dd:d6:74:f7:a2:f5:8b:fb:10:dc:f3:0a:ef:b3:0c:b7:
7b:5c:f9:46:f3:36:05:35:ef:d9:d6:ec:45:ba:2a:e8:77:b2:
50:28:42:32:0f:c8:6f:be:6f:1c:a0:3f:66:b7:50:df:c5:a1:
48:a9:56:96:9b:c3:fb:b5:37:8e:69:ee:0a:cd:5b:8c:18:4f:
a6:92:a3:74:cf:fe:89:96:28:29:0d:64:b0:a8:2e:ed:18:3d:
0c:71:7b:63:32:86:0e:1f:94:33:ab:a2:90:b9:0d:fd:ad:59:
34:5d:c2:de:c0:5b:f2:f5:5a:2f:57:bc:64:92:1c:db:b1:65:
64:c4:aa:12:39:f2:4d:54:60:db:95:b8:45:eb:1e:a2:75:eb:
76:4b:ae:0d:29:ce:88:03:e4:cf:1f:1d:a4:e0:30:74:d9:0b:
13:ec:7f:a4:0b:2a:0c:92:6f:2b:57:1e:86:64:44:ab:5b:2e:
c1:7d:91:19:3a:9f:b4:ab:7e:d4:bd:10:ad:65:52:54:47:43:
e2:ba:e4:48:90:f1:50:c6:50:e2:4f:d8:5b:a9:38:bd:fe:d8:
b6:ca:72:f8:df:68:b2:bf:1e:e9:06:3b:0b:20:41:be:e8:d1:
95:8b:6d:82:48:70:e0:b6:1e:cd:c3:b0:d6:96:1d:2d:c6:09:
c8:31:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:51 2026 by rpki-client