Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cmN6Lsoe0Lo8LS4xfQLKzROcdoc.roa
File: cmN6Lsoe0Lo8LS4xfQLKzROcdoc.roa (raw, json)
Hash identifier: 8UKv+OxBso8cC1aDuxnUxRoyXO5Jon5GiwTQIZirObE=
Subject key identifier: 72:63:7A:2E:CA:1E:D0:BA:3C:2D:2E:31:7D:02:CA:CD:13:9C:76:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D29D6DBD4BE60809F35645C378AB41BD1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cmN6Lsoe0Lo8LS4xfQLKzROcdoc.roa
Signing time: Thu 26 Mar 2026 11:10:40 +0000
ROA not before: Thu 26 Mar 2026 11:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 83.143.113.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:d6:db:d4:be:60:80:9f:35:64:5c:37:8a:b4:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 26 11:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72637a2eca1ed0ba3c2d2e317d02cacd139c7687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:d0:1e:c5:02:44:57:6f:d1:3a:eb:d0:0f:
22:66:40:ba:37:8c:d6:52:e7:0f:95:be:07:03:40:
98:c3:33:5f:be:a3:ea:dd:a1:b6:eb:1e:00:68:0e:
91:fd:74:ee:2b:05:90:a1:29:d6:94:cd:52:b6:c9:
bb:be:b2:2d:23:8b:43:fb:e4:d2:51:80:a2:50:a0:
4b:5d:bd:73:f5:45:04:2e:6f:9b:6b:34:26:a3:39:
ea:e9:f2:15:0a:1b:d8:36:91:12:36:17:33:2f:4a:
b4:5c:c7:b8:46:02:82:e8:6f:d0:c0:06:48:73:55:
53:e7:29:12:d0:ba:68:34:5e:62:a1:c1:31:81:2e:
7d:63:6e:27:6a:d7:ee:53:34:e8:5f:71:48:dd:26:
67:48:a9:4c:f6:4a:1d:87:fc:9e:2d:39:ba:3e:f4:
30:5f:dc:ee:3c:5c:4f:82:c3:cd:d7:c4:11:b9:31:
b5:9a:75:47:f7:cf:7a:da:c5:c4:38:87:17:65:b7:
24:7f:6d:e7:65:57:d6:1a:20:84:dd:a8:72:8a:ba:
de:10:73:83:60:e9:9f:ab:a4:e7:0e:25:c0:41:8c:
09:eb:7d:50:b1:66:7c:77:03:fc:06:7e:f0:d5:4a:
a1:da:c7:d8:a5:c1:d2:8b:5b:87:e5:68:e7:38:4e:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:7A:2E:CA:1E:D0:BA:3C:2D:2E:31:7D:02:CA:CD:13:9C:76:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cmN6Lsoe0Lo8LS4xfQLKzROcdoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.113.0/24
85.209.135.0/24
87.120.88.0/24
87.121.218.0/24
109.206.243.0/24
185.246.222.0/24
194.113.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b6:53:00:ab:cb:ba:35:4b:ec:b8:6a:5b:05:ff:8c:94:d9:
ff:a0:76:fc:c7:52:91:58:11:b9:fd:5c:41:dd:1c:02:2e:6d:
23:2d:29:d5:0c:c2:cb:84:ef:d8:e9:91:57:ce:4b:cf:7b:1d:
c5:63:2b:29:b2:84:d5:f9:b8:69:70:ca:36:84:a0:8d:8f:fa:
59:6d:fb:11:71:58:41:b3:b5:36:a8:7b:4e:56:d2:08:1d:9b:
2a:7b:87:38:90:19:db:38:d0:b3:a0:38:29:55:93:87:29:eb:
78:71:ca:01:56:80:2e:ec:47:8f:8d:d6:61:29:ea:df:02:a8:
5d:69:8b:26:6c:c7:b4:e4:60:52:d6:77:47:25:20:b7:21:c4:
d8:57:7a:3d:76:a8:e7:ce:f9:42:1b:c3:f9:f4:91:95:1e:49:
81:c9:ec:09:55:c7:a4:ce:b1:5a:4d:47:cd:c7:88:4a:c2:67:
bf:ea:14:14:3e:c1:cd:d0:0a:d9:de:ae:86:0e:5f:af:7d:59:
ab:0d:fa:b3:c3:dc:ac:27:cc:ce:67:42:5e:ab:ed:ea:de:f6:
8c:23:77:5b:5b:ce:b5:36:e3:5d:1b:ff:50:b6:51:37:42:fb:
f9:af:1f:75:ea:88:a7:ec:39:da:7c:46:10:5d:7d:ed:7b:b3:
39:60:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:06 2026 by rpki-client