Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/iacNAwFg_4HGoGsTJn6LHRPtlFA.roa
File: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (raw, json)
Hash identifier: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=
Subject key identifier: 89:A7:0D:03:01:60:FF:81:C6:A0:6B:13:26:7E:8B:1D:13:ED:94:50
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019F40DBA291E52E6E29737B670071D08B7B
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/iacNAwFg_4HGoGsTJn6LHRPtlFA.roa
Signing time: Wed 08 Jul 2026 08:32:43 +0000
ROA not before: Wed 08 Jul 2026 08:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58065
IP address blocks: 5.34.241.0/24 maxlen: 24
5.157.6.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
5.157.19.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
5.157.26.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
107.150.91.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
178.216.53.0/24 maxlen: 24
178.216.55.0/24 maxlen: 24
2a02:5740:4::/48 maxlen: 48
2a02:5740:9::/48 maxlen: 48
2a02:5740:14::/48 maxlen: 48
2a02:5740:24::/48 maxlen: 48
2a02:5740:26::/48 maxlen: 48
2a02:5740:153::/48 maxlen: 48
2a02:5740:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:db:a2:91:e5:2e:6e:29:73:7b:67:00:71:d0:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jul 8 08:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89a70d030160ff81c6a06b13267e8b1d13ed9450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:a3:fe:06:bf:bd:c0:61:4f:f4:62:7c:3c:
ca:d8:cd:76:e4:66:8f:71:3e:f4:92:e7:7f:b5:d7:
79:54:c7:4b:83:b3:10:90:5c:51:a2:68:b8:66:cc:
18:b8:88:b9:7d:17:58:ed:0f:3c:f8:13:53:44:f9:
51:8d:f1:a0:0a:2a:95:0b:2a:a6:28:43:52:21:d4:
90:6b:55:d4:e6:4a:a8:1b:27:e6:af:24:24:b6:4a:
ae:06:32:76:2d:0d:b1:e0:66:7e:92:b0:3e:2c:0f:
f1:48:1d:e6:be:25:a2:65:37:79:ab:4a:cf:06:e7:
d8:b0:f5:cc:01:86:7c:d7:0d:75:63:a0:d4:6d:d5:
7f:1b:fa:60:dc:b4:b0:d5:d9:af:8c:b5:95:25:60:
a2:8c:60:8f:c0:73:08:2d:0f:c2:b8:d3:5b:75:5d:
30:66:40:7b:a4:00:95:52:3e:d5:88:8a:62:11:01:
b9:d3:7c:9c:05:2b:19:3f:e9:fc:3b:32:dd:60:93:
be:64:f8:1c:95:af:1c:00:d6:ac:c7:4e:4b:0a:f2:
32:2a:2a:be:71:c5:83:79:63:78:f6:5a:a2:5a:8c:
10:91:33:6a:76:9c:40:19:d3:4e:c0:cf:82:9c:46:
c8:73:17:be:45:49:56:b1:1b:57:f2:83:b2:48:cf:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:0D:03:01:60:FF:81:C6:A0:6B:13:26:7E:8B:1D:13:ED:94:50
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/iacNAwFg_4HGoGsTJn6LHRPtlFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.241.0/24
5.157.6.0/24
5.157.11.0/24
5.157.19.0/24
5.157.21.0/24
5.157.23.0-5.157.24.255
5.157.26.0/24
5.157.29.0/24
5.157.32.0-5.157.34.255
5.157.37.0/24
5.157.43.0/24
5.157.51.0/24
5.157.53.0/24
5.157.55.0/24
5.157.57.0/24
23.92.115.0-23.92.116.255
23.92.126.0/24
37.72.186.0/24
104.160.3.0/24
104.160.11.0/24
104.160.16.0/23
107.150.64.0/23
107.150.67.0/24
107.150.69.0-107.150.71.255
107.150.88.0/22
107.150.93.0/24
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
178.216.53.0/24
178.216.55.0/24
IPv6:
2a02:5740:4::/48
2a02:5740:9::/48
2a02:5740:14::/48
2a02:5740:24::/48
2a02:5740:26::/48
2a02:5740:153::/48
2a02:5740:200::/48
Signature Algorithm: sha256WithRSAEncryption
06:f4:18:21:25:87:85:42:a1:8a:aa:c3:ee:16:3a:2e:2a:a4:
68:92:b8:2b:17:1e:7f:99:c9:b6:04:55:dd:58:59:14:df:a6:
4d:d6:9b:85:c8:fa:f3:f4:f8:ac:0a:ab:21:19:a8:21:63:ff:
39:19:e3:2d:ca:a3:5b:6a:5b:37:be:ea:86:33:22:58:c9:46:
7a:9a:4c:d7:7f:8a:33:4d:96:a0:25:b6:16:88:73:cc:9c:01:
10:ed:14:fb:f2:88:ef:53:6b:06:05:8f:eb:f3:dc:72:e8:ad:
5d:9b:ec:33:9d:f8:1b:b7:b5:34:4e:14:ac:63:22:f9:e8:ac:
ae:c4:d4:f7:c0:52:da:e0:d4:9f:d1:66:5a:10:16:2f:92:b5:
11:de:74:c2:6d:37:8d:75:70:bb:ec:ef:06:da:98:9f:96:78:
18:37:bc:30:c1:2b:44:4c:09:5d:b1:6f:10:ca:35:a7:cb:0c:
e3:13:09:c1:40:94:78:94:a9:26:66:32:21:2f:4d:be:5a:7d:
33:6c:b2:a7:e8:cd:07:ad:5b:32:c0:01:1d:ca:c5:ab:5a:3f:
d0:ca:b1:de:a7:c0:70:b8:b1:2a:61:a5:0b:99:26:6c:95:b3:
30:0e:90:ac:27:df:d1:86:95:27:55:d6:ee:d1:ac:ec:eb:bc:
d7:06:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:46 2026 by rpki-client