Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/IlSgL8GSndNymLlpPxzljcnK020.roa
File: IlSgL8GSndNymLlpPxzljcnK020.roa (raw, json)
Hash identifier: YmWZXz7UWcWkfCAyMmfVuKJESzbPETQz87VrkgAThxM=
Subject key identifier: 22:54:A0:2F:C1:92:9D:D3:72:98:B9:69:3F:1C:E5:8D:C9:CA:D3:6D
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019E735D2E4574F5FAB35B92569BC7F561C0
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/IlSgL8GSndNymLlpPxzljcnK020.roa
Signing time: Fri 29 May 2026 10:52:26 +0000
ROA not before: Fri 29 May 2026 10:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 22
2.58.146.0/23 maxlen: 23
2.59.116.0/24 maxlen: 24
45.12.44.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.92.212.0/22 maxlen: 22
45.95.140.0/22 maxlen: 22
45.130.204.0/22 maxlen: 22
45.136.60.0/22 maxlen: 22
45.145.192.0/22 maxlen: 22
45.151.204.0/22 maxlen: 22
45.152.40.0/22 maxlen: 22
79.99.140.0/22 maxlen: 22
91.227.240.0/23 maxlen: 23
91.239.15.0/24 maxlen: 24
103.82.160.0/22 maxlen: 22
153.56.192.0/21 maxlen: 21
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.157.123.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
193.3.158.0/24 maxlen: 24
194.99.66.0/23 maxlen: 23
212.52.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:5d:2e:45:74:f5:fa:b3:5b:92:56:9b:c7:f5:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: May 29 10:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2254a02fc1929dd37298b9693f1ce58dc9cad36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:02:83:33:e4:54:c9:31:27:e6:ee:45:ef:
3f:b1:72:bc:08:5a:51:68:24:5b:48:8e:45:2c:71:
cf:dc:08:74:31:b7:fd:2c:85:6d:dc:ec:61:e1:8d:
07:fc:22:3c:21:70:87:ef:6a:ff:26:74:65:0a:d9:
b0:37:3d:22:4a:16:f8:2d:35:5c:e1:04:25:ac:72:
fb:db:65:45:f8:c0:3e:93:25:b0:39:49:60:61:7c:
53:bb:1c:be:4a:b7:e2:ac:6e:01:a1:bc:5f:75:c7:
44:e7:25:b8:25:ce:2f:0e:11:af:1f:c8:59:04:14:
dd:83:b1:d6:56:b6:a4:77:68:0e:e3:7c:00:3a:86:
0e:40:56:1a:88:77:98:c7:9b:7a:14:e8:a1:3b:c1:
b0:3f:c7:25:e3:c3:8a:fb:10:19:c9:2c:5a:32:19:
b0:ad:d7:9c:41:d2:5d:1b:37:f8:54:84:a7:85:2c:
c7:b2:03:2d:3c:13:f1:56:34:11:cf:d3:0c:31:6d:
e1:12:01:66:93:47:c7:d5:cb:79:91:da:54:ee:09:
72:9c:37:58:e8:47:6c:67:13:c7:2e:9a:a6:68:97:
ae:7e:91:92:06:5b:65:9a:a8:7f:c5:b2:a3:03:42:
8a:0a:c1:43:06:8b:ae:30:7b:f4:80:06:8d:ac:ea:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:A0:2F:C1:92:9D:D3:72:98:B9:69:3F:1C:E5:8D:C9:CA:D3:6D
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/IlSgL8GSndNymLlpPxzljcnK020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.58.146.0/23
2.59.116.0/24
45.12.44.0/22
45.67.44.0/22
45.86.192.0/22
45.92.212.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
45.152.40.0/22
79.99.140.0/22
91.227.240.0/23
91.239.15.0/24
103.82.160.0/22
153.56.192.0/21
185.39.11.0/24
185.57.176.0/22
185.157.123.0/24
185.232.89.0/24
193.3.158.0/24
194.99.66.0/23
212.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1f:28:66:57:48:bd:b2:f5:ee:81:fa:90:ca:28:2e:eb:80:
6a:10:a6:92:d2:65:c8:8f:80:ba:b5:8c:0a:d6:34:0f:50:95:
66:ef:c5:d0:2d:cb:86:40:fc:4d:33:f3:1b:59:1c:b3:dc:65:
73:52:ec:bd:49:1d:ef:6a:58:18:37:37:9e:ff:4b:6c:0d:c0:
9e:c1:3f:0e:4c:0f:78:93:5e:7d:31:fd:41:d6:5c:20:b5:98:
99:21:8c:78:1b:d4:67:c9:3e:8f:ea:c8:5b:1c:82:66:79:78:
b2:2b:ca:8e:06:6b:9f:e5:d0:58:bb:c9:30:7d:ef:90:2a:94:
55:8c:cd:6e:bf:f5:c2:2d:82:f1:1b:53:fb:3b:99:6b:a2:ac:
ac:d6:0f:99:b1:d0:51:c0:11:36:06:f5:fa:a7:b0:48:1e:02:
54:e8:0d:92:f9:ea:12:e1:af:ce:9b:bd:b6:50:c6:ce:f3:46:
3f:00:c5:de:f3:e9:72:5f:ab:ad:e5:d7:ed:0d:4d:ab:82:1a:
1f:b4:1e:9d:3f:f5:a9:6e:c2:6f:b9:dd:fc:3c:68:0a:a3:ee:
c7:4b:67:c7:2c:57:17:9d:46:46:35:fa:75:27:a9:cb:73:bf:
6d:55:6d:c4:ba:a6:84:09:b5:39:4d:06:e3:9a:46:f5:a6:9d:
ba:8d:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:56 2026 by rpki-client