Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/IiyuIlMGsUkYZ7wpHMxX7qrX6N0.roa
File: IiyuIlMGsUkYZ7wpHMxX7qrX6N0.roa (raw, json)
Hash identifier: GoYu+ojhw596ME8scKg5pzNrj//iQ6zXyEttIm5j4WQ=
Subject key identifier: 22:2C:AE:22:53:06:B1:49:18:67:BC:29:1C:CC:57:EE:AA:D7:E8:DD
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 019C656A05096BD91E7F6DD0B67F7D6BB163
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/IiyuIlMGsUkYZ7wpHMxX7qrX6N0.roa
Signing time: Mon 16 Feb 2026 07:46:12 +0000
ROA not before: Mon 16 Feb 2026 07:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21107
IP address blocks: 62.101.144.0/21 maxlen: 21
81.93.92.0/24 maxlen: 24
89.111.225.0/24 maxlen: 24
94.250.37.0/24 maxlen: 24
94.250.38.0/23 maxlen: 23
94.250.38.0/24 maxlen: 24
94.250.40.0/22 maxlen: 22
94.250.44.0/22 maxlen: 22
94.250.48.0/21 maxlen: 24
94.250.56.0/22 maxlen: 24
94.250.64.0/20 maxlen: 20
94.250.64.0/24 maxlen: 24
94.250.65.0/24 maxlen: 24
94.250.66.0/24 maxlen: 24
94.250.67.0/24 maxlen: 24
94.250.68.0/22 maxlen: 22
94.250.68.0/24 maxlen: 24
94.250.69.0/24 maxlen: 24
94.250.70.0/24 maxlen: 24
94.250.71.0/24 maxlen: 24
94.250.72.0/21 maxlen: 21
94.250.80.0/22 maxlen: 22
94.250.80.0/23 maxlen: 23
94.250.82.0/23 maxlen: 23
94.250.88.0/21 maxlen: 24
94.250.96.0/20 maxlen: 20
94.250.112.0/24 maxlen: 24
94.250.113.0/24 maxlen: 24
94.250.114.0/24 maxlen: 24
94.250.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:6a:05:09:6b:d9:1e:7f:6d:d0:b6:7f:7d:6b:b1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Feb 16 07:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=222cae225306b1491867bc291ccc57eeaad7e8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:71:9b:2a:29:37:89:7c:98:c7:e9:31:3f:
18:f8:15:75:aa:36:07:e4:89:b2:9a:8a:7b:bd:6a:
44:f5:51:63:fa:e7:c0:6f:2e:d6:51:a0:87:38:cc:
83:1d:d6:4e:ce:35:c5:20:b7:87:45:c8:ce:98:c9:
e1:51:41:cd:2a:20:e4:ae:fa:b9:53:7c:ef:76:13:
e2:91:8d:1f:1a:60:bd:30:b6:da:a0:9d:5e:2f:8a:
83:f6:54:63:08:0b:a2:75:1a:21:49:b8:9b:56:ae:
40:c5:49:68:5b:89:97:48:53:09:43:58:c5:4b:b8:
a4:5d:48:e7:a7:39:f9:bd:d7:0a:62:2f:9a:21:92:
98:8c:89:b3:a6:86:70:e3:75:41:4e:26:50:4d:2c:
63:87:75:b3:7a:27:38:5e:ba:76:6f:9e:c5:fc:e8:
a6:05:35:d8:3d:7b:1f:64:74:04:cb:98:2f:85:fd:
a0:27:a0:d0:bc:2e:2b:b3:16:0d:c0:49:f7:61:f2:
eb:48:81:38:99:1c:34:ca:a2:96:56:67:5c:2b:6c:
21:f6:5b:d2:42:cb:61:29:3e:bd:40:76:f1:ef:c2:
dd:dd:03:50:e5:62:b1:c9:67:8e:c4:bc:f7:3f:83:
54:6f:43:84:c7:d0:1d:7f:6a:f0:8a:9d:f9:e6:03:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:AE:22:53:06:B1:49:18:67:BC:29:1C:CC:57:EE:AA:D7:E8:DD
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/IiyuIlMGsUkYZ7wpHMxX7qrX6N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.144.0/21
81.93.92.0/24
89.111.225.0/24
94.250.37.0-94.250.59.255
94.250.64.0-94.250.83.255
94.250.88.0-94.250.115.255
Signature Algorithm: sha256WithRSAEncryption
5b:2d:13:cb:bc:82:13:7b:87:0c:ac:49:89:5c:2e:7f:08:5f:
5d:ee:96:8c:6a:14:d9:a6:60:15:aa:37:c0:9c:ca:a2:ec:0f:
89:01:4a:4d:a8:9a:b8:fa:48:aa:8c:07:a7:bd:80:c2:c0:c7:
02:e5:c0:13:7a:1b:1c:25:cb:5f:90:2d:2b:b2:c7:28:60:60:
29:cd:92:c6:0d:10:aa:2d:18:ef:69:ae:ec:45:db:62:48:3d:
b3:dd:95:75:a7:6b:16:ef:63:c4:31:9c:ed:20:62:0d:26:27:
7f:1f:b4:f0:49:3b:5c:1a:6f:5d:02:c5:db:96:39:08:7d:5b:
ce:93:03:c3:b8:8d:1e:40:67:cf:d0:0f:64:b2:86:a3:b1:9e:
47:d8:b1:6a:3c:87:25:f9:a7:a8:c1:14:62:4f:e7:f4:01:64:
c4:d2:a1:e6:10:03:e5:03:9b:61:24:57:a0:fa:5e:32:c5:2d:
23:54:3e:2e:0d:50:37:df:e7:3c:29:49:1f:88:7b:d6:82:dd:
c9:18:06:05:65:7f:7f:a2:8d:15:d2:5c:4e:2d:08:ea:ab:85:
4b:60:36:d3:a4:b4:f8:48:48:8b:f1:8b:e1:c0:ee:4d:ef:9b:
2c:8f:b6:98:bf:a0:02:08:07:3c:0a:ab:96:fc:b5:55:09:8f:
67:ec:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:21:13 2026 by rpki-client