Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/izsJArVTYPgXkzsVm7JYevOPbrI.roa
File: izsJArVTYPgXkzsVm7JYevOPbrI.roa (raw, json)
Hash identifier: Tyovzx3ds4LVJvPRH4maivG6LcFx8jAmSg+LlJ2SMVw=
Subject key identifier: 8B:3B:09:02:B5:53:60:F8:17:93:3B:15:9B:B2:58:7A:F3:8F:6E:B2
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 019D43CC554138BB7E31B18485BED9ECE28F
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/izsJArVTYPgXkzsVm7JYevOPbrI.roa
Signing time: Tue 31 Mar 2026 12:09:17 +0000
ROA not before: Tue 31 Mar 2026 12:09:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210117
IP address blocks: 5.59.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:cc:55:41:38:bb:7e:31:b1:84:85:be:d9:ec:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Mar 31 12:09:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b3b0902b55360f817933b159bb2587af38f6eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:fc:e8:e9:10:91:4d:16:2e:31:58:da:ae:
fc:db:40:8c:45:f1:34:fd:53:a9:bf:13:60:c1:72:
22:db:4a:2a:9c:41:75:03:b5:4b:50:26:84:91:70:
1f:d5:49:bd:a0:5b:48:43:00:f3:08:dc:2a:f0:ed:
29:a7:ce:59:5a:53:9a:b3:9d:2b:8b:34:7d:4f:b6:
1f:ec:d5:59:69:a1:89:3b:d1:e0:4a:38:65:d1:d8:
58:bc:31:73:bb:a6:53:9b:aa:e6:ce:21:f9:23:17:
3a:4e:68:42:69:27:f2:a7:a9:31:6f:49:75:24:85:
e9:3c:9f:13:ca:bf:9b:c3:31:f2:c9:77:ac:d0:f5:
44:d4:ae:6c:09:6b:f9:f1:e4:ae:19:20:46:19:58:
66:12:08:b9:19:d0:ab:18:f0:d8:0a:61:b0:3a:0b:
ba:3d:6b:40:f2:2c:2b:a6:2d:85:40:f2:1a:3a:f6:
11:98:bf:de:ae:43:c2:a0:28:10:a2:6f:ff:3b:24:
a1:53:92:ee:4d:c6:ed:a8:56:87:df:06:6a:9a:75:
53:f3:de:5a:9b:5d:57:99:8d:2d:b0:ea:d8:e6:87:
ab:78:c1:14:a0:c3:b3:5c:05:f5:6a:5e:aa:c4:22:
14:6e:65:ae:04:b2:c9:72:b9:5f:59:d9:d0:3c:72:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:09:02:B5:53:60:F8:17:93:3B:15:9B:B2:58:7A:F3:8F:6E:B2
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/izsJArVTYPgXkzsVm7JYevOPbrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d8:7a:ad:07:94:00:fe:4e:1d:60:b3:4e:d0:30:dd:eb:9c:
a8:c4:9e:8f:f6:5d:7f:c6:9a:fd:35:af:e6:81:03:8d:90:73:
2f:d9:3b:b7:d7:b8:1e:ec:10:a9:5e:f2:5d:2a:d1:f0:c4:1b:
49:39:1e:bd:5b:1d:82:03:14:39:55:f4:d3:b6:fb:fe:72:09:
80:45:7a:b0:89:1c:6c:ef:78:07:15:1c:46:d9:05:4b:89:10:
82:5b:99:4c:55:36:d9:f8:88:a0:28:e1:7b:88:a1:f5:e2:15:
8a:f5:6b:aa:28:ea:8c:c5:56:88:3c:a6:57:ad:cc:a5:29:24:
3b:aa:69:de:59:06:2c:55:92:80:01:5b:4f:e1:73:6d:80:d5:
8e:b7:11:0a:49:b2:55:55:89:25:be:4c:b5:05:f5:69:cd:5a:
b6:db:2a:5e:50:23:30:39:12:2f:ad:be:af:1f:5f:9f:91:fc:
41:20:7e:43:54:2b:c3:d2:2c:fc:2e:87:f3:a0:af:23:ca:ea:
be:27:a1:39:f1:fc:12:12:41:25:15:09:7d:69:9a:23:a0:36:
85:b6:46:15:1a:a9:90:57:e3:cc:cd:82:da:3a:a3:d1:dd:6d:
85:e8:6c:49:35:d9:20:e7:de:27:98:de:ad:b0:65:9e:b5:96:
15:8a:1c:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1DzFVBOLt+MbGEhb7Z7OKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjYwMzMxMTIwOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjNiMDkwMmI1NTM2MGY4MTc5MzNiMTU5YmIyNTg3YWYzOGY2ZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7z86OkQkU0WLjFY2q7820CMRfE0
/VOpvxNgwXIi20oqnEF1A7VLUCaEkXAf1Um9oFtIQwDzCNwq8O0pp85ZWlOas50r
izR9T7Yf7NVZaaGJO9HgSjhl0dhYvDFzu6ZTm6rmziH5Ixc6TmhCaSfyp6kxb0l1
JIXpPJ8Tyr+bwzHyyXes0PVE1K5sCWv58eSuGSBGGVhmEgi5GdCrGPDYCmGwOgu6
PWtA8iwrpi2FQPIaOvYRmL/erkPCoCgQom//OyShU5LuTcbtqFaH3wZqmnVT895a
m11XmY0tsOrY5oereMEUoMOzXAX1al6qxCIUbmWuBLLJcrlfWdnQPHJ2WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIs7CQK1U2D4F5M7FZuyWHrzj26yMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvaXpzSkFyVlRZUGdYa3pzVm03Sllldk9QYnJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTvdMA0G
CSqGSIb3DQEBCwUAA4IBAQDJ2HqtB5QA/k4dYLNO0DDd65yoxJ6P9l1/xpr9Na/m
gQONkHMv2Tu317ge7BCpXvJdKtHwxBtJOR69Wx2CAxQ5VfTTtvv+cgmARXqwiRxs
73gHFRxG2QVLiRCCW5lMVTbZ+IigKOF7iKH14hWK9WuqKOqMxVaIPKZXrcylKSQ7
qmneWQYsVZKAAVtP4XNtgNWOtxEKSbJVVYklvky1BfVpzVq22ypeUCMwORIvrb6v
H1+fkfxBIH5DVCvD0iz8LofzoK8jyuq+J6E58fwSEkElFQl9aZojoDaFtkYVGqmQ
V+PMzYLaOqPR3W2F6GxJNdkg594nmN6tsGWetZYVihyc
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:49 2026 by rpki-client