Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/It5cbOgz2y72fjZZnZVlVg4gUp4.roa
File: It5cbOgz2y72fjZZnZVlVg4gUp4.roa (raw, json)
Hash identifier: a450t8uMkdYjk8suu61d1NDEpbQ077pWciP2jMuUUw8=
Subject key identifier: 22:DE:5C:6C:E8:33:DB:2E:F6:7E:36:59:9D:95:65:56:0E:20:52:9E
Certificate issuer: /CN=d9ff036345ed95672647e536681f360f2dfa83ff
Certificate serial: 019EFE3DFA6DF812A448CBE3C50BB9DF28F2
Authority key identifier: D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/It5cbOgz2y72fjZZnZVlVg4gUp4.roa
Signing time: Thu 25 Jun 2026 10:05:35 +0000
ROA not before: Thu 25 Jun 2026 10:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197385
IP address blocks: 5.154.182.0/24 maxlen: 24
46.247.38.0/24 maxlen: 24
46.247.39.0/24 maxlen: 24
193.143.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:3d:fa:6d:f8:12:a4:48:cb:e3:c5:0b:b9:df:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff036345ed95672647e536681f360f2dfa83ff
Validity
Not Before: Jun 25 10:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22de5c6ce833db2ef67e36599d9565560e20529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:c6:88:8b:67:66:e0:e3:9b:7e:da:de:62:
6a:92:dd:ab:28:7d:65:a1:a4:ce:3c:35:b9:85:7e:
51:8c:fd:9a:09:b3:27:9e:d6:97:0c:20:34:4b:59:
c2:e2:58:24:6c:bb:f9:28:15:d6:6f:5f:d5:8c:d8:
55:02:5c:a9:0c:90:ea:bd:9d:30:62:df:af:ce:f3:
a2:50:63:17:df:24:27:74:cf:dc:62:8e:a3:64:19:
c7:c1:6b:76:05:ec:ae:18:7e:db:ed:b5:1d:39:aa:
fe:c6:66:98:24:65:6a:89:53:bc:45:98:cd:66:8f:
71:ca:a8:c9:cd:00:15:c5:68:27:e7:9c:b7:59:5f:
fc:26:ba:d1:47:3a:c4:02:25:5b:7a:94:b1:23:2e:
1d:11:b6:0a:7a:40:0a:c0:33:07:cc:7b:df:e9:cd:
b5:77:4c:e4:c6:12:ec:87:b7:7e:52:ab:cf:25:83:
51:c8:58:17:4a:03:7e:54:33:8e:d4:96:bf:0d:a8:
02:19:a2:d4:de:0b:5b:bc:d7:92:80:42:04:d0:f1:
3c:3f:c0:50:cf:99:0d:25:15:81:97:93:ff:51:77:
bb:2c:bb:9b:9e:fd:66:63:6e:2f:d3:b6:1b:81:ff:
e6:26:0e:7f:b1:c3:a6:b1:67:b7:20:cd:5b:4d:16:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:5C:6C:E8:33:DB:2E:F6:7E:36:59:9D:95:65:56:0E:20:52:9E
X509v3 Authority Key Identifier:
keyid:D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/It5cbOgz2y72fjZZnZVlVg4gUp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.182.0/24
46.247.38.0/23
193.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
08:10:1d:58:3e:38:55:3a:5e:d9:31:cd:9a:05:cb:44:07:b1:
1a:21:0a:91:3d:8a:c8:14:ae:4a:9f:3a:8f:2d:ec:dd:0f:a2:
f4:e6:30:63:74:08:c1:ab:60:56:d7:6e:1f:58:1a:c1:bb:73:
f7:92:d6:50:c2:f6:06:16:f2:0b:46:4b:3d:31:ef:3b:16:e1:
c4:de:46:f3:cd:94:d1:a8:7c:9a:0a:4a:94:73:9f:1d:9f:69:
2f:6b:19:bf:ad:66:2f:8b:7c:49:da:88:19:cf:fb:1b:8c:99:
db:82:ae:d7:7a:4b:6f:a3:9a:95:02:63:1a:8d:78:5d:a1:2c:
b4:76:38:93:53:99:d1:e8:8a:5a:80:a4:6a:42:ec:71:90:37:
c9:8f:12:eb:19:b6:b1:d4:ce:2c:c8:d3:f4:47:15:7e:70:db:
b8:43:51:a2:e5:ca:ea:09:93:7f:2e:3c:96:58:3a:09:42:d6:
7a:86:ca:ba:12:70:0a:e6:42:fa:56:cf:21:44:f5:81:a7:45:
2c:d9:31:eb:6d:b0:40:99:ef:56:57:9e:1d:84:5d:59:7c:5e:
f7:cd:c3:3c:b3:4d:bc:bd:71:e6:1b:90:41:19:ce:39:7c:54:
7a:a6:6d:25:66:c7:a7:17:29:c9:6f:36:28:69:bf:ad:38:90:
cf:50:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:40 2026 by rpki-client