Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/IWOP76e3mSYfx_IEdPrdxinDyFQ.roa
File: IWOP76e3mSYfx_IEdPrdxinDyFQ.roa (raw, json)
Hash identifier: VvuBWUh2GC77OqmEMIARUSDSRBEfVSoivBdhUIBtDow=
Subject key identifier: 21:63:8F:EF:A7:B7:99:26:1F:C7:F2:04:74:FA:DD:C6:29:C3:C8:54
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E07132B0BE863303D8F3DBE7FBDBA45FE
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/IWOP76e3mSYfx_IEdPrdxinDyFQ.roa
Signing time: Fri 08 May 2026 10:12:37 +0000
ROA not before: Fri 08 May 2026 10:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204794
IP address blocks: 189.13.116.0/24 maxlen: 24
189.13.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:13:2b:0b:e8:63:30:3d:8f:3d:be:7f:bd:ba:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: May 8 10:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21638fefa7b799261fc7f20474faddc629c3c854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:36:41:30:5a:b7:be:3b:7f:ad:b3:52:11:
d6:86:78:ce:44:52:c2:09:92:ac:74:28:f4:8d:5f:
c2:58:95:e8:75:9e:4a:f5:4c:f0:f6:ff:06:19:0b:
4c:71:6e:ec:c1:d0:28:45:44:fa:19:b4:0a:2b:f8:
85:79:a1:80:3c:18:27:1f:71:1c:02:56:64:ed:b5:
37:05:b4:49:96:c9:06:4c:bc:41:fa:90:4d:5a:bd:
94:22:fd:8c:dc:cc:25:ef:b3:0d:db:b0:46:3e:91:
42:a4:5e:92:a9:a3:90:0d:d2:a5:47:f5:af:10:b6:
cf:61:89:1f:67:73:66:a5:dc:d5:f1:66:48:3b:68:
5e:75:51:65:e9:0d:04:7d:5e:ad:2e:0e:a2:5b:92:
6a:69:48:26:48:69:06:7c:bc:78:8a:af:bf:6e:32:
9c:e7:d3:7c:d4:5c:a3:f6:81:66:e2:b4:61:bc:9f:
fe:d5:35:3f:6c:9f:74:e0:75:6d:8c:33:ad:94:1e:
57:ac:d7:fd:a0:5b:35:7c:51:bd:e8:52:25:aa:2f:
7d:f8:b0:f8:02:ee:e2:99:f4:ee:f8:3e:b5:d6:2a:
35:ee:b1:3e:13:97:65:c1:0c:df:7b:2e:7a:aa:10:
bd:5b:2e:91:56:9b:78:be:69:89:74:42:17:2a:d3:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:8F:EF:A7:B7:99:26:1F:C7:F2:04:74:FA:DD:C6:29:C3:C8:54
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/IWOP76e3mSYfx_IEdPrdxinDyFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.116.0/23
Signature Algorithm: sha256WithRSAEncryption
72:07:a7:56:db:cf:39:60:58:fb:a7:29:b2:68:14:4a:c5:4d:
d8:cd:09:c7:f4:91:46:93:0a:94:7a:0f:98:98:26:c4:ab:79:
2b:30:84:80:b2:d5:f0:58:f7:0b:50:1a:b6:6c:eb:e6:8c:0d:
01:09:f5:45:69:ab:ef:29:4a:d8:a3:5f:ac:2a:00:52:29:d9:
2d:56:58:b1:eb:dd:07:6d:67:89:10:51:6e:c5:72:c4:a0:34:
29:c1:12:32:66:53:78:04:60:67:86:6a:28:e0:6a:af:1a:74:
ea:2f:5d:2a:27:60:5d:a6:ff:39:be:31:00:db:92:da:3a:3b:
02:7f:c6:5b:dd:2f:03:c6:12:3b:42:07:64:d5:d6:24:f2:49:
9c:a7:2a:10:f3:ef:8a:9e:68:94:45:25:59:54:ea:06:96:91:
73:c5:c6:8d:83:7c:f0:8b:99:6b:83:62:55:9d:bc:94:88:12:
c7:04:d7:cd:9d:1f:c3:9c:26:2a:bf:43:12:07:29:0e:a1:52:
27:a5:85:83:77:f7:f5:fc:55:8c:b0:5f:4e:14:92:41:10:42:
63:72:c5:7a:bf:00:8a:8f:b3:5e:63:a0:df:fe:14:be:c4:93:
fd:dd:f7:3a:3d:91:ce:92:2e:aa:31:ae:39:b6:89:9a:0c:57:
a1:c7:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:35 2026 by rpki-client