Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/IVxozb3aky8T2vxQz78ZpJ9En0g.roa
File: IVxozb3aky8T2vxQz78ZpJ9En0g.roa (raw, json)
Hash identifier: qnnxuMzzgk+NwHcYP1qJgAC3Y4zOPpFa8GphL9ABcCI=
Subject key identifier: 21:5C:68:CD:BD:DA:93:2F:13:DA:FC:50:CF:BF:19:A4:9F:44:9F:48
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019CFBBCA374C5E880F642856B61B541232C
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/IVxozb3aky8T2vxQz78ZpJ9En0g.roa
Signing time: Tue 17 Mar 2026 12:19:29 +0000
ROA not before: Tue 17 Mar 2026 12:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44143
IP address blocks: 37.19.104.0/21 maxlen: 21
77.243.16.0/20 maxlen: 20
95.86.4.0/22 maxlen: 22
95.86.8.0/22 maxlen: 22
95.86.48.0/21 maxlen: 21
95.86.60.0/22 maxlen: 22
185.37.24.0/22 maxlen: 22
188.120.96.0/20 maxlen: 20
188.120.96.0/21 maxlen: 21
188.120.104.0/21 maxlen: 21
188.120.112.0/21 maxlen: 21
188.120.112.0/22 maxlen: 22
188.120.116.0/22 maxlen: 22
198.143.176.0/21 maxlen: 21
2a00:61c0::/29 maxlen: 29
2a00:61c0::/32 maxlen: 32
2a00:61c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:bc:a3:74:c5:e8:80:f6:42:85:6b:61:b5:41:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Mar 17 12:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=215c68cdbdda932f13dafc50cfbf19a49f449f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:41:b8:d8:c6:1f:28:81:9f:c1:f8:b3:ee:
39:73:f0:a3:61:e0:00:d7:d9:e3:e0:8b:c8:c2:7d:
18:27:f3:8a:83:80:d9:02:ff:61:63:1a:9f:b5:a7:
fd:24:09:65:b2:42:f0:26:ae:c7:81:f7:22:85:45:
57:42:d6:16:5e:f7:17:95:4e:55:ca:95:ba:a0:65:
e2:7b:30:aa:12:32:93:3d:53:e6:06:a4:2e:65:81:
21:8f:59:e5:96:14:b2:1a:a7:49:24:01:9b:0f:fa:
05:de:52:bc:d5:4e:03:79:1e:01:95:94:5b:3f:cf:
e2:e7:01:16:48:49:63:5d:00:f4:2a:cd:69:de:f9:
e8:8a:ae:4d:04:2f:fb:cc:c0:a3:c9:5c:30:ae:d2:
a6:75:2d:4f:a0:a2:63:be:44:66:58:08:1a:5e:8d:
44:cc:93:03:42:1f:a8:1f:32:87:3c:45:f4:de:8b:
05:f8:17:9e:ad:25:7e:83:9f:01:71:43:8a:2c:01:
39:2a:30:72:7f:f3:5e:71:31:29:fb:16:38:45:8a:
e9:a2:b6:f2:f8:fb:df:2e:c1:ba:fa:19:d2:ac:13:
e5:3a:ea:fb:5b:54:3a:d2:82:99:3e:39:74:65:fc:
7b:51:7f:7c:a2:5f:b8:19:9b:77:20:ad:91:74:f0:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:68:CD:BD:DA:93:2F:13:DA:FC:50:CF:BF:19:A4:9F:44:9F:48
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/IVxozb3aky8T2vxQz78ZpJ9En0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.104.0/21
77.243.16.0/20
95.86.4.0-95.86.11.255
95.86.48.0/21
95.86.60.0/22
185.37.24.0/22
188.120.96.0-188.120.119.255
198.143.176.0/21
IPv6:
2a00:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:ef:22:14:47:6d:2d:d5:b4:8a:ca:c5:50:7c:3f:59:c7:8a:
9f:b6:47:54:b9:0d:10:46:f4:42:f3:0b:4e:2e:93:69:93:b4:
da:c6:14:55:d3:6d:b8:27:f9:fb:92:42:4e:52:f8:79:90:95:
f9:a2:d9:e9:c1:1d:e3:e5:6a:45:eb:a2:50:e7:07:4f:8f:49:
4a:9e:9b:0b:96:9a:28:44:ad:da:c9:7a:6d:77:4a:17:1b:c7:
d0:f7:91:31:12:ac:53:3a:2c:5b:71:22:05:28:29:c8:c3:74:
3e:dc:f4:d6:74:d4:10:22:d3:ff:62:4c:41:10:90:7b:2c:34:
58:93:ad:95:f3:64:5c:b3:75:67:e2:bd:53:d9:b0:14:7b:25:
53:3f:43:b1:fb:26:7c:23:8d:b0:91:0b:9e:6c:7c:59:f7:99:
e6:22:d2:6f:e6:3e:0e:d1:18:ff:0e:7e:a2:ff:26:c4:8a:a5:
f7:36:69:f5:62:31:f6:c2:e8:85:40:e9:cc:a2:16:a4:6d:e3:
53:cd:3a:c3:a0:c5:76:38:2f:c1:8c:43:9b:a8:2c:53:6b:b9:
90:5e:fe:af:ee:43:b9:7d:c7:a0:3e:49:1c:13:de:da:d0:ac:
8c:1b:dc:df:c4:5a:8d:9e:08:6f:32:ed:8d:21:f2:3c:24:46:
73:02:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:15 2026 by rpki-client