Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/Ilsu3j1HcduIS3mVbyAA6W0zMDk.roa
File: Ilsu3j1HcduIS3mVbyAA6W0zMDk.roa (raw, json)
Hash identifier: Oa42gONJ36FalR4DeeBhP+xKwVUD/h5ilW/8u9DzXyA=
Subject key identifier: 22:5B:2E:DE:3D:47:71:DB:88:4B:79:95:6F:20:00:E9:6D:33:30:39
Certificate issuer: /CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Certificate serial: 019F2368F289C8671C309E48A85E7856777B
Authority key identifier: 00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/Ilsu3j1HcduIS3mVbyAA6W0zMDk.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197991
IP address blocks: 5.144.144.0/21 maxlen: 24
149.126.32.0/20 maxlen: 24
178.132.59.0/24 maxlen: 24
178.132.60.0/22 maxlen: 24
2a0d:a5c0::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:89:c8:67:1c:30:9e:48:a8:5e:78:56:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=225b2ede3d4771db884b79956f2000e96d333039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c5:50:9f:05:c1:49:b9:e5:b8:ec:04:a7:47:
46:db:6b:f5:20:61:58:1b:f6:32:8f:a9:40:48:a0:
28:70:68:33:e5:8c:b0:91:50:da:d4:14:20:a7:ba:
b9:57:48:54:80:ab:1a:dc:a4:e6:45:a9:77:8c:53:
7e:35:4a:c3:22:1c:81:26:99:f1:d5:4a:3e:22:11:
4d:ad:27:84:e3:db:b3:9b:34:08:30:56:bd:9a:7d:
d3:2a:fb:36:2b:af:22:c3:c1:a8:74:0c:a6:ab:43:
e3:73:9c:c5:f3:ad:ac:8a:62:be:36:76:1c:bc:a6:
93:87:1e:1c:8e:b7:ca:d7:7a:ed:98:cb:ab:a9:b0:
d8:53:28:fa:08:f7:90:b6:32:b1:34:fd:79:81:6f:
11:0e:f4:d6:e9:79:c7:1f:26:7a:ce:cc:cf:85:d0:
8a:7b:11:92:d4:d0:ce:38:e6:a1:97:a3:ef:e1:a2:
ae:ab:86:4c:c7:81:21:d1:5d:aa:e6:51:b3:07:9e:
f8:e8:58:58:6c:44:d3:4b:a4:3a:4c:2e:13:ab:49:
1b:38:a3:e6:c0:dc:b1:b3:58:2c:50:c9:5b:e1:9b:
b6:5b:39:11:0c:88:2e:20:5e:5f:4f:1d:df:c5:98:
ef:2b:c8:cd:f8:a6:cd:83:20:b1:34:a3:54:5f:93:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:2E:DE:3D:47:71:DB:88:4B:79:95:6F:20:00:E9:6D:33:30:39
X509v3 Authority Key Identifier:
keyid:00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/Ilsu3j1HcduIS3mVbyAA6W0zMDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.144.0/21
149.126.32.0/20
178.132.59.0-178.132.63.255
IPv6:
2a0d:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
92:83:c3:fe:b5:c8:00:95:ba:98:e1:59:91:c6:48:0c:40:f5:
a3:7f:51:eb:d0:32:72:83:cf:27:67:3d:05:0b:8f:71:f1:0c:
40:b7:49:1d:94:81:88:45:56:5e:c7:d4:a7:01:0f:19:24:8d:
32:ba:32:12:82:40:ed:8b:83:d1:fe:0f:99:56:7d:14:ea:8a:
18:44:39:c7:7f:f4:3f:d5:8e:12:59:df:e4:0f:e3:e2:17:6b:
7d:5e:ed:d8:ec:51:7e:56:05:50:fd:9f:bd:ff:a8:42:8d:7b:
bb:2a:a7:44:ea:0a:52:9d:59:3c:c5:58:fb:26:df:28:90:26:
48:f5:1f:41:ee:ec:a5:4e:6d:22:2b:b4:86:f8:10:f6:dc:c4:
7c:f9:63:e6:76:a7:d9:a6:8b:a3:b8:83:7b:31:5e:55:04:4d:
13:ec:0d:1e:dc:1f:9f:53:41:8e:70:29:9e:fb:d2:bf:d4:7f:
d2:c2:44:66:b8:2e:38:61:54:cb:5a:2b:b5:ae:d8:4e:a2:ee:
ad:1a:65:a5:b5:5a:a6:fe:e1:32:6c:db:04:16:8f:d1:77:27:
2b:57:91:4d:7c:7b:37:8e:d7:8e:fd:c1:1f:2f:5c:85:8e:53:
c3:09:7b:d7:13:0e:da:57:d9:20:04:c1:e4:63:61:a9:71:35:
03:78:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:13 2026 by rpki-client