Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/IIq-xe4pmbRC1mfUfGo67qCK0IM.roa
File: IIq-xe4pmbRC1mfUfGo67qCK0IM.roa (raw, json)
Hash identifier: XA0vZ02Oqn6urExP7O2u8Wij3b8jlF+3XNVGIv13wXQ=
Subject key identifier: 20:8A:BE:C5:EE:29:99:B4:42:D6:67:D4:7C:6A:3A:EE:A0:8A:D0:83
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 019D4A895001CB7D4DCBE1BB587B9EA84CBE
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/IIq-xe4pmbRC1mfUfGo67qCK0IM.roa
Signing time: Wed 01 Apr 2026 19:33:26 +0000
ROA not before: Wed 01 Apr 2026 19:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213038
IP address blocks: 141.138.72.0/24 maxlen: 24
141.138.73.0/24 maxlen: 24
141.138.75.0/24 maxlen: 24
141.138.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4a:89:50:01:cb:7d:4d:cb:e1:bb:58:7b:9e:a8:4c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Apr 1 19:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208abec5ee2999b442d667d47c6a3aeea08ad083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:f4:16:ac:63:77:5e:32:c5:68:a4:79:5a:
0f:12:ad:19:5a:ca:b6:ba:9d:22:1f:8c:a7:c8:b5:
d6:cd:c8:79:ef:59:69:51:45:78:17:2d:31:c4:ce:
2d:2c:b4:5c:96:d1:b4:e7:1c:bd:29:dd:5a:1d:49:
5c:39:1d:bd:e3:3a:02:fe:58:da:b8:f8:76:11:7d:
16:76:e3:3a:c7:6b:8d:80:86:6e:f3:cd:2c:f0:0c:
6c:14:1c:53:4c:a1:cd:c7:0d:3c:91:db:ba:d6:df:
96:d0:78:22:57:87:9d:55:2f:0a:d5:a6:1b:03:f1:
57:36:02:dc:29:b2:fc:4f:c8:b5:51:c3:64:50:09:
7f:42:e3:08:43:b9:1f:f5:c9:ba:6a:b6:ef:a9:df:
74:d0:92:04:1b:4b:84:de:7e:6d:c3:ea:0d:e3:8b:
1c:e3:00:40:1b:48:4b:33:82:32:10:be:f9:f3:2c:
22:9d:79:fa:17:3f:b4:25:d6:36:bf:0b:51:9c:4b:
44:7a:d3:77:18:a9:64:90:02:b8:e0:52:35:90:87:
cf:4d:5e:48:76:54:46:ca:ba:c5:b0:42:f7:7c:81:
2a:9a:ce:cf:f9:51:44:3a:79:2b:7d:01:a9:da:e7:
6d:e0:cf:96:d6:1f:97:1e:3d:27:7d:5e:58:0c:ad:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8A:BE:C5:EE:29:99:B4:42:D6:67:D4:7C:6A:3A:EE:A0:8A:D0:83
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/IIq-xe4pmbRC1mfUfGo67qCK0IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.72.0/23
141.138.75.0-141.138.76.255
Signature Algorithm: sha256WithRSAEncryption
56:26:55:50:e2:07:c0:91:00:fd:79:a6:3e:16:9f:76:74:52:
18:2a:57:b2:4c:e2:7e:08:5e:50:48:57:b6:ab:31:8f:55:b4:
09:69:76:11:e0:0f:3a:16:80:c1:1f:02:d9:d1:1d:b9:b2:f3:
f3:7f:4f:1c:c7:82:15:cd:ef:25:12:db:6a:5a:a4:aa:ba:44:
27:6c:54:06:b9:37:56:bc:a6:f3:ad:29:cf:15:a8:87:a8:d3:
8e:b4:87:6e:37:61:4e:55:17:60:99:81:15:5e:ae:59:dd:6d:
26:fd:00:8f:d0:41:86:12:5e:69:a4:e4:8d:29:3e:75:ce:bf:
b6:14:07:e7:f0:c2:76:a1:b8:e6:11:34:46:5e:e7:09:7c:36:
fc:8f:5c:49:8a:70:9f:1e:e4:fd:2c:ad:52:eb:77:bd:88:a6:
a1:66:58:6d:6a:71:57:64:fa:35:2c:dd:61:04:da:5b:a9:9f:
5d:30:99:90:d3:91:0e:bd:9e:5b:f5:79:82:7b:82:8f:65:ad:
a6:c5:61:3c:06:3c:c1:d4:50:88:d3:48:ee:86:2d:0e:7b:93:
d1:47:b2:59:d1:08:7c:aa:c0:ff:23:16:b5:5b:7b:e3:f2:d0:
62:33:45:97:9a:70:10:6b:0a:dc:dd:53:bd:0e:8f:65:57:3f:
af:09:2a:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:13 2026 by rpki-client