Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/IjderT6nXtIpA99Tp6NOOQ9phws.roa
File: IjderT6nXtIpA99Tp6NOOQ9phws.roa (raw, json)
Hash identifier: I2knOHSrhZA9EGnPHvptBBAnno21H4rgwdjmDK/vgw4=
Subject key identifier: 22:37:5E:AD:3E:A7:5E:D2:29:03:DF:53:A7:A3:4E:39:0F:69:87:0B
Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial: 019F65EA5FDCB31AE498E819C4EC3D42ED63
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/IjderT6nXtIpA99Tp6NOOQ9phws.roa
Signing time: Wed 15 Jul 2026 13:14:46 +0000
ROA not before: Wed 15 Jul 2026 13:14:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35665
IP address blocks: 46.18.96.0/24 maxlen: 24
46.18.97.0/24 maxlen: 24
46.18.98.0/24 maxlen: 24
46.18.99.0/24 maxlen: 24
46.18.100.0/24 maxlen: 24
46.18.101.0/24 maxlen: 24
46.18.102.0/24 maxlen: 24
46.18.103.0/24 maxlen: 24
152.89.96.0/22 maxlen: 22
185.177.224.0/22 maxlen: 22
195.160.188.0/24 maxlen: 24
195.160.189.0/24 maxlen: 24
213.108.232.0/23 maxlen: 23
213.108.234.0/23 maxlen: 23
213.108.236.0/23 maxlen: 23
213.108.238.0/23 maxlen: 23
2a02:2778::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:ea:5f:dc:b3:1a:e4:98:e8:19:c4:ec:3d:42:ed:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Validity
Not Before: Jul 15 13:14:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22375ead3ea75ed22903df53a7a34e390f69870b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:c0:f9:6b:78:87:86:04:87:14:16:42:0b:
80:45:56:46:81:29:6a:43:25:b8:86:fe:3f:3a:13:
dc:9b:0f:cc:fa:d2:ac:62:dd:bf:8b:7e:a0:c5:c5:
30:f5:62:08:8a:fa:3a:75:2b:ea:91:1d:72:2d:1a:
0b:21:5d:8b:8d:f9:e7:2c:f0:65:24:5f:c5:47:06:
4c:c2:58:80:30:53:e5:f3:63:f4:c4:d6:53:9c:1d:
b7:f3:6c:7b:f3:4a:db:0e:f1:73:6e:b8:19:51:34:
42:a8:23:a6:88:54:19:fe:12:28:79:93:1f:98:80:
e6:e8:06:28:0e:78:c7:af:bd:93:f5:93:4b:93:fd:
af:6b:90:24:83:1b:c7:6c:b1:bb:b5:ea:7c:82:6e:
5b:f9:6f:9b:ee:1d:bf:f0:bb:cb:19:99:86:34:3b:
49:f9:e4:08:de:94:1e:11:93:e2:a3:d6:78:8b:6d:
e6:da:d9:de:dd:4f:0c:00:45:ae:2e:a5:71:a5:45:
00:c4:48:33:32:56:fc:ea:b8:16:98:e9:97:bf:60:
0a:38:70:88:ae:74:db:b5:92:05:30:27:7e:88:f3:
77:f8:5b:67:e0:94:4d:f2:b5:af:cb:9b:c8:0c:a5:
5e:f8:a4:5b:77:2c:40:db:2a:01:98:30:8b:3e:9f:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:5E:AD:3E:A7:5E:D2:29:03:DF:53:A7:A3:4E:39:0F:69:87:0B
X509v3 Authority Key Identifier:
keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/IjderT6nXtIpA99Tp6NOOQ9phws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.96.0/21
152.89.96.0/22
185.177.224.0/22
195.160.188.0/23
213.108.232.0/21
IPv6:
2a02:2778::/32
Signature Algorithm: sha256WithRSAEncryption
6f:1d:d0:2f:24:4b:ad:2b:27:ec:45:6a:e4:a0:d6:0f:f3:0a:
7f:08:37:e5:90:e2:cc:52:d5:75:13:82:3d:68:53:b8:f8:e6:
2b:b7:c1:03:52:d2:d7:5c:87:fc:1e:38:9b:02:b7:a5:bb:85:
a3:b7:5b:e1:12:d9:98:41:42:b6:51:43:9c:4a:d6:42:47:56:
36:c8:60:35:0e:15:6e:2a:8a:03:1c:e5:3c:b5:5a:10:bc:be:
e2:76:c4:79:f7:ad:f5:d8:58:41:55:d6:3d:7c:11:15:36:73:
79:3d:47:64:0f:13:90:47:28:2f:32:39:cc:e3:be:99:aa:53:
ad:38:ae:29:6e:cc:94:8b:ca:01:e9:0a:83:4c:8a:ff:ad:30:
3f:45:ba:ce:b7:f4:e7:eb:57:7f:28:09:a0:ae:2b:59:c4:71:
7e:ea:c7:4c:c4:65:0e:81:39:53:ad:1a:ce:a3:d2:0e:38:cf:
60:8c:cd:92:8b:ee:68:6a:2c:ce:74:c6:00:30:d6:ca:eb:f0:
4a:39:a0:48:e3:bc:d4:09:a5:e3:ea:86:7f:50:0a:04:6e:8f:
e5:32:27:03:d8:e1:85:dc:36:6b:6e:55:7c:f3:3f:75:56:89:
79:4d:cd:f0:c6:e5:a1:15:06:c6:74:d5:21:4d:ea:34:ee:54:
02:2e:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:57 2026 by rpki-client