Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/iJ2dkGge62Vh8toLziz4BBDFsIU.roa
File: iJ2dkGge62Vh8toLziz4BBDFsIU.roa (raw, json)
Hash identifier: FGUiRuQcTHwY2x/0lhI9Cq7axh0DNfE+YZZ6Pi8PjoE=
Subject key identifier: 88:9D:9D:90:68:1E:EB:65:61:F2:DA:0B:CE:2C:F8:04:10:C5:B0:85
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019B7EA53FC1C91F591ECD869A90DEDF028B
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/iJ2dkGge62Vh8toLziz4BBDFsIU.roa
Signing time: Fri 02 Jan 2026 12:18:37 +0000
ROA not before: Fri 02 Jan 2026 12:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3920
IP address blocks: 37.49.224.0/24 maxlen: 24
37.49.225.0/24 maxlen: 24
37.49.226.0/24 maxlen: 24
37.49.227.0/24 maxlen: 24
37.49.228.0/24 maxlen: 24
37.49.229.0/24 maxlen: 24
84.247.19.0/24 maxlen: 24
185.209.15.0/24 maxlen: 24
2a13:adc0::/48 maxlen: 48
2a13:adc0:1::/48 maxlen: 48
2a13:adc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:3f:c1:c9:1f:59:1e:cd:86:9a:90:de:df:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jan 2 12:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889d9d90681eeb6561f2da0bce2cf80410c5b085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:06:99:1a:e8:09:95:cc:26:d4:7f:0f:fc:
85:8b:92:96:db:ae:2c:85:ab:d9:7a:cd:93:58:c2:
e3:88:5d:73:1d:13:2b:a2:36:5a:ed:16:d9:f4:e9:
99:c2:00:3e:6b:a6:3a:3f:eb:b3:24:07:81:26:2a:
78:64:1b:08:7d:19:35:dd:8e:24:ad:21:b8:84:b7:
a9:2f:c5:01:37:0e:82:97:56:79:95:6c:13:7d:9d:
f3:0d:b2:9a:41:5e:44:77:b2:e2:5e:9e:71:4d:93:
49:39:53:a0:7c:2f:8f:d6:3b:18:3c:13:34:00:61:
01:fb:6c:2f:d2:2a:57:91:84:d0:00:60:bc:a5:21:
90:e8:8a:30:58:68:73:1c:02:9b:96:d6:d9:65:ab:
6c:2b:74:d3:f1:73:90:99:e2:0e:9e:fe:0c:38:d3:
8e:87:82:7e:4a:3a:38:2c:e0:e7:4e:2c:f1:28:5d:
72:5f:5b:0f:67:96:5c:da:ed:b9:6f:9e:28:4d:6b:
a1:71:d7:b5:ea:38:10:e2:cf:4b:4f:4e:0f:a9:49:
21:dd:15:d4:8f:83:1e:02:fa:20:ce:1e:ab:d7:8f:
82:8d:33:1a:0f:07:34:f1:08:df:fd:01:44:03:65:
a4:6d:95:85:03:a7:9a:53:61:79:7e:d1:43:51:02:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:9D:90:68:1E:EB:65:61:F2:DA:0B:CE:2C:F8:04:10:C5:B0:85
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/iJ2dkGge62Vh8toLziz4BBDFsIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.224.0-37.49.229.255
84.247.19.0/24
185.209.15.0/24
IPv6:
2a13:adc0::-2a13:adc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:6b:9f:cd:ba:16:55:b4:18:56:74:dd:64:28:26:23:7d:5d:
4b:97:69:15:e1:7e:a7:09:83:0c:6a:1a:83:52:89:34:eb:79:
be:2f:a8:61:87:31:c6:1b:d8:6e:a6:03:79:eb:c8:27:c4:bd:
60:93:30:77:eb:69:79:e5:4b:83:c2:f9:74:bf:be:52:05:08:
a6:73:7c:f2:2d:3c:5d:c4:2b:bf:aa:7e:65:27:5c:ce:23:ff:
a9:58:91:d2:27:c8:10:61:46:0c:fe:c2:0d:fd:6a:d1:ab:43:
58:28:2e:65:a7:61:6e:22:49:9d:29:0e:68:59:07:0f:5a:3d:
cc:b5:2d:6b:6a:2b:79:2b:cb:fb:d1:38:d0:4e:73:25:52:06:
e5:02:f3:2a:77:3e:b8:ec:f7:08:6d:28:be:09:05:2c:a8:fe:
5a:99:d6:ec:24:b4:93:0c:ff:05:5c:c6:97:5a:4d:53:34:be:
98:5f:d6:2e:4d:e4:b6:ad:a8:dd:3c:39:e5:6e:40:db:5c:6a:
ba:26:a4:8b:bc:95:7d:47:2f:00:ff:ed:73:8d:05:df:14:d2:
a0:38:9e:07:94:28:fd:b5:e3:2d:46:a4:a9:6f:c7:01:1a:98:
c2:b4:eb:cb:53:8f:fe:c6:87:82:43:12:95:bb:f2:0f:73:71:
9b:8c:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:27 2026 by rpki-client