Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/I5dgfWLzUhO_tgeDjwIsqP2nt4c.roa
File: I5dgfWLzUhO_tgeDjwIsqP2nt4c.roa (raw, json)
Hash identifier: Rqtf2OSGhWaje0nl0At6cS3dvpLNo1vVyhuPsyxiwPo=
Subject key identifier: 23:97:60:7D:62:F3:52:13:BF:B6:07:83:8F:02:2C:A8:FD:A7:B7:87
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019C95F85A9026FAE7AEA9CFD3C14D557F88
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/I5dgfWLzUhO_tgeDjwIsqP2nt4c.roa
Signing time: Wed 25 Feb 2026 18:03:27 +0000
ROA not before: Wed 25 Feb 2026 18:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:f8:5a:90:26:fa:e7:ae:a9:cf:d3:c1:4d:55:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 25 18:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2397607d62f35213bfb607838f022ca8fda7b787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:74:57:bf:ae:50:ec:9e:90:63:78:24:a4:
91:1f:b5:25:50:e4:20:f9:cb:6d:eb:72:58:f5:22:
5f:e0:1b:e9:ac:bc:1a:bb:30:9c:4e:40:bc:e9:62:
e8:25:d9:9c:f0:79:35:d1:be:54:c9:1e:8c:75:ed:
aa:af:cd:59:63:e5:20:4f:e8:84:b8:67:8b:16:86:
33:65:2d:22:02:0b:df:af:b3:72:f5:8b:d5:2e:45:
87:2b:97:0d:2c:a2:a1:06:02:bf:58:87:4d:16:17:
92:0d:7e:4b:97:59:d4:14:7b:39:62:4d:c9:e7:c8:
a3:a8:19:e9:4d:e9:86:ca:17:5d:1f:a4:47:03:f7:
44:4e:da:7a:53:3a:d0:88:f5:ee:75:0d:fb:4a:5c:
d8:2a:63:c9:b0:33:5c:b4:72:8c:64:e6:81:1d:3b:
e4:b7:f2:f9:b1:3f:de:f1:78:0b:e8:bb:2c:73:44:
51:5f:8c:68:b4:9c:41:26:04:13:ee:7f:3c:8a:4e:
19:b2:5a:a5:bf:56:93:5e:a4:ef:b5:a2:30:6f:27:
27:d9:e1:b0:19:ea:a4:20:b5:cd:a6:52:d1:37:75:
a4:7f:03:53:ee:2a:84:98:a9:7d:46:0f:e7:c8:0c:
c4:0e:b4:bc:d1:2b:e1:d9:ce:b3:4d:be:7f:eb:1c:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:60:7D:62:F3:52:13:BF:B6:07:83:8F:02:2C:A8:FD:A7:B7:87
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/I5dgfWLzUhO_tgeDjwIsqP2nt4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0-194.143.207.255
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.196.0-195.114.198.255
195.114.203.0/24
195.114.205.0/24
213.220.0.0/24
213.220.6.0/24
213.220.11.0/24
213.220.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a8:e5:b3:f0:9c:55:c4:89:11:66:5c:af:fa:8b:4c:0b:6a:
ec:fd:40:6d:58:dc:31:a9:c1:ce:a3:31:9c:27:af:80:b1:d8:
e7:f1:a7:1e:64:3a:c8:67:eb:bc:c3:15:77:2e:90:94:3d:80:
86:e5:62:55:44:d9:c9:48:5d:e1:d6:75:e3:39:b2:1e:14:bd:
5e:f7:2b:36:c3:d5:32:b4:6c:32:41:23:e3:5a:88:a4:d8:59:
9b:26:4b:12:e5:a4:f6:e6:a0:79:a8:e1:f6:94:36:0e:b0:81:
1a:6b:99:f1:93:4e:1d:69:42:43:a1:10:d7:f8:15:12:02:17:
d4:0e:78:f6:ca:62:44:4d:45:c5:47:e7:64:76:90:5b:08:24:
b5:55:c5:6b:4f:1b:3f:02:59:69:e9:8c:77:79:d6:cd:b4:31:
36:b0:81:d2:d9:f3:50:aa:24:69:33:6d:5d:9c:f6:a9:f8:bc:
32:0d:d9:22:07:07:71:3d:12:7b:ff:94:29:8c:45:19:86:d0:
01:fd:9e:b2:35:37:91:0a:58:4f:1a:3f:c7:41:71:21:22:64:
b2:50:4e:e2:d9:91:b7:90:60:3c:5c:72:00:0d:6e:f5:ed:81:
a5:a8:2d:1f:b7:e7:bf:0f:3d:38:61:5b:b6:05:0b:eb:c0:43:
ba:03:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:59 2026 by rpki-client