Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/irId0COEYw7aKHAO1_EyLrYXpp0.roa
File: irId0COEYw7aKHAO1_EyLrYXpp0.roa (raw, json)
Hash identifier: 7+faGUD7LHnG4arr/clo8qL3um8HyyqboWUjaQQkIWc=
Subject key identifier: 8A:B2:1D:D0:23:84:63:0E:DA:28:70:0E:D7:F1:32:2E:B6:17:A6:9D
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 019CACF0C7E5293D24D432E6E00369BE5B5B
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/irId0COEYw7aKHAO1_EyLrYXpp0.roa
Signing time: Mon 02 Mar 2026 05:06:26 +0000
ROA not before: Mon 02 Mar 2026 05:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62382
IP address blocks: 80.72.216.0/21 maxlen: 21
80.72.216.0/24 maxlen: 24
80.72.217.0/24 maxlen: 24
80.72.218.0/24 maxlen: 24
80.72.219.0/24 maxlen: 24
80.72.220.0/24 maxlen: 24
80.72.221.0/24 maxlen: 24
185.37.188.0/22 maxlen: 22
193.143.96.0/23 maxlen: 23
193.143.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:f0:c7:e5:29:3d:24:d4:32:e6:e0:03:69:be:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Mar 2 05:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ab21dd02384630eda28700ed7f1322eb617a69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:8c:3c:e6:fe:05:13:04:27:d7:68:f7:17:
04:9e:33:83:c6:9b:7d:c5:c7:c3:7a:66:69:43:63:
dd:c9:41:1d:49:9a:c4:a5:6d:20:cc:0c:23:33:4b:
7b:fa:0f:41:17:53:5e:4d:07:07:f3:95:be:3f:7a:
72:5f:0d:99:7e:6d:44:53:e4:e3:ab:8a:28:f7:b0:
b6:7e:44:e4:fa:2b:31:a9:83:c7:2c:5c:00:05:ee:
01:d1:b3:42:b6:09:db:25:40:51:b5:bb:ae:d4:9c:
fe:51:e1:79:d2:1d:0c:1c:0e:0d:80:67:f5:ed:45:
71:b5:ce:02:4b:0c:f5:ec:1d:11:a1:4d:ea:1d:08:
83:4b:3f:13:a3:9b:f0:6c:d0:bc:e9:ac:40:8b:27:
9b:86:cb:e0:b4:fe:a7:4a:55:8a:47:87:7a:5a:28:
24:14:85:1f:96:cf:4d:ea:29:d2:c0:71:36:63:fe:
ce:f5:f9:ad:eb:8b:86:6d:3f:23:06:18:ec:d5:61:
07:00:95:0c:5e:c8:4c:0d:f3:a3:f1:8b:91:9c:4b:
ae:92:a5:6a:79:58:77:1d:67:c5:70:e0:d6:d0:31:
a0:81:cc:2a:ee:4e:31:27:de:a9:d0:20:2f:24:fa:
e0:da:ec:55:39:36:00:9a:ef:3f:14:e8:d6:39:c5:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:1D:D0:23:84:63:0E:DA:28:70:0E:D7:F1:32:2E:B6:17:A6:9D
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/irId0COEYw7aKHAO1_EyLrYXpp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.216.0/21
185.37.188.0/22
193.143.96.0/23
193.143.250.0/23
Signature Algorithm: sha256WithRSAEncryption
77:d9:09:b0:fe:91:31:39:c6:03:88:ab:a7:c1:ae:67:9f:7a:
44:69:67:82:4e:86:39:c5:eb:5a:04:51:ff:a6:6e:0d:1d:8f:
67:c1:dc:da:b7:62:9d:38:db:98:9f:52:31:92:3e:11:aa:6c:
95:77:1e:05:34:6e:31:2d:63:36:d6:df:c9:e2:ba:80:4d:89:
bd:3d:9e:34:25:46:7d:26:00:70:b9:13:a2:5d:9f:28:12:04:
1c:ff:ac:a1:02:4a:e3:8f:50:5d:c8:cd:e2:ae:d1:6d:5e:45:
91:a3:15:2a:0d:ee:36:a9:62:75:70:1d:4b:3c:86:22:ce:af:
d0:33:e9:80:b3:39:dc:6e:87:eb:b4:66:7e:94:44:9a:a1:4c:
27:c9:8e:c2:fa:f8:4b:7e:f2:89:34:ef:2f:a2:8e:29:80:a0:
8b:71:25:0b:fa:41:7c:c2:a3:64:cd:35:55:3e:43:37:34:76:
40:23:95:91:e0:a7:38:5e:b2:cd:c7:e1:96:b1:04:cb:b4:2e:
3f:0d:e7:5c:0f:71:13:33:22:e0:99:3a:67:9b:93:ef:c7:ac:
43:01:3d:bf:6e:58:3f:2b:4d:3d:02:d1:c6:81:03:15:32:2c:
cf:be:92:9e:fd:dd:3a:8f:46:dc:2d:41:39:c8:f4:2d:d8:e7:
81:9e:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:05 2026 by rpki-client