Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa
File: ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa (raw, json)
Hash identifier: 1p7OVkFIK8eU+7iB9pcEKKjlG4sNNxXEXZnDzToZ8Ac=
Subject key identifier: 8A:86:BB:3F:57:B5:48:26:1D:DC:17:1F:17:1B:48:FB:D3:FA:3F:69
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019947D17D6EB818AC187355BD5164B89B9E
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa
Signing time: Sun 14 Sep 2025 10:42:15 +0000
ROA not before: Sun 14 Sep 2025 10:42:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:d1:7d:6e:b8:18:ac:18:73:55:bd:51:64:b8:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Sep 14 10:42:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a86bb3f57b548261ddc171f171b48fbd3fa3f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:e4:ef:26:25:fb:cf:a2:28:46:12:ef:0e:
00:d4:77:02:b8:9d:03:75:fe:e5:ca:ff:e4:b0:ea:
4b:da:92:30:47:00:ae:67:10:18:c0:84:52:d8:b3:
90:01:6c:28:fa:85:87:36:44:da:60:61:02:39:7c:
fc:07:61:2a:fc:e5:42:00:59:ff:2f:40:c3:a1:5f:
6b:7c:ea:df:1a:64:5f:b5:c0:44:de:86:2e:90:67:
c6:97:4b:ed:35:69:87:21:79:71:83:00:cd:f3:16:
83:b0:8d:a9:57:d2:7e:9a:3b:94:1b:6e:11:c7:ec:
2d:30:f0:f4:c8:89:eb:8d:82:0b:0e:d4:39:2d:6a:
85:37:c8:bd:09:d7:91:65:6c:9b:52:41:f0:35:a4:
f6:41:d2:3e:e3:ef:ca:f4:1b:b5:42:4b:68:ff:82:
7c:91:c4:6c:cc:01:d2:f7:51:8f:96:e8:85:07:ba:
29:cb:cc:47:14:d9:6e:4a:14:91:4a:6c:0a:fe:cc:
35:68:8a:06:c5:8c:cc:fd:78:dc:c8:bc:e5:62:65:
4e:62:52:93:41:e2:5e:b9:95:57:2a:1d:c9:7c:49:
11:10:05:32:99:6e:da:71:0c:36:e1:4b:82:c7:f9:
c3:2d:57:28:0f:5e:c6:09:93:07:58:83:12:59:b0:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:BB:3F:57:B5:48:26:1D:DC:17:1F:17:1B:48:FB:D3:FA:3F:69
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.97.0-212.126.98.255
212.126.100.0-212.126.102.255
212.126.104.0/21
212.126.113.0/24
212.126.116.0-212.126.127.255
IPv6:
2a04:2dc0:1::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
09:cc:47:a1:e5:0f:fd:ee:c8:fe:44:9b:cd:b6:e7:35:8d:88:
36:a9:e4:9d:bf:8a:90:f0:3b:3c:92:cc:71:03:18:5d:6b:38:
53:ce:68:1e:27:97:f9:cb:55:73:f4:29:ca:f2:d1:5d:ac:f4:
a8:8d:90:9c:33:29:13:3c:d2:3d:7c:3a:57:e1:2c:18:77:e5:
4e:61:08:e0:66:57:cb:76:9b:e9:b7:65:db:75:04:9b:10:07:
98:d5:21:86:04:de:a0:bf:36:ed:4d:24:19:62:2a:28:f3:3e:
d0:2a:38:0c:e9:85:06:83:46:69:74:78:18:28:4c:4b:72:bf:
6a:f8:f8:ce:e2:86:83:f9:11:10:f7:f9:d3:44:96:eb:cb:86:
52:dc:ea:71:18:6c:bc:96:a7:59:78:8b:22:e7:7d:32:5a:24:
60:43:91:31:f7:07:69:0b:2f:2f:cb:0b:63:36:32:cd:07:c6:
b1:7e:78:f7:1f:7a:6e:73:1c:67:fa:5c:ee:18:3a:ca:27:7f:
a0:4f:87:ce:0c:42:00:c8:1d:0a:17:15:f9:a5:63:aa:8f:aa:
b7:9e:b3:76:b4:9a:8e:0b:6f:d6:af:47:8d:74:aa:ee:16:fd:
ed:35:f7:ff:f3:2f:7c:32:f6:14:b3:99:47:6f:60:20:b3:36:
e4:24:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:36 2025 by rpki-client