Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IQWeYFVXcFpjQy8Xjolf1tFTIMw.roa
File: IQWeYFVXcFpjQy8Xjolf1tFTIMw.roa (raw, json)
Hash identifier: +JOP2bBCtP3VGPxMNSHHzBVK2l15P3ycdoAj85Jf27Q=
Subject key identifier: 21:05:9E:60:55:57:70:5A:63:43:2F:17:8E:89:5F:D6:D1:53:20:CC
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D2181AB6705A8D3F4D82D7D5C7364E4A6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IQWeYFVXcFpjQy8Xjolf1tFTIMw.roa
Signing time: Tue 24 Mar 2026 20:20:39 +0000
ROA not before: Tue 24 Mar 2026 20:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 5.182.116.0/24 maxlen: 24
45.15.255.0/24 maxlen: 24
45.86.3.0/24 maxlen: 24
45.90.44.0/24 maxlen: 24
45.90.47.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
46.149.174.0/24 maxlen: 24
83.171.212.0/22 maxlen: 22
178.212.78.0/24 maxlen: 24
185.253.2.0/24 maxlen: 24
188.64.140.0/24 maxlen: 24
188.93.136.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
212.115.48.0/24 maxlen: 24
212.115.50.0/24 maxlen: 24
213.166.92.0/24 maxlen: 24
213.166.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:81:ab:67:05:a8:d3:f4:d8:2d:7d:5c:73:64:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 24 20:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21059e605557705a63432f178e895fd6d15320cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:09:7e:a8:4b:9f:a2:43:53:f1:bd:ce:15:
ad:00:dc:a3:dd:63:4a:4e:5a:ca:96:ac:a8:41:06:
26:c9:e8:e4:23:a0:ef:61:bc:18:2a:89:ca:d6:57:
59:61:20:0b:85:e7:d4:2e:aa:f9:13:b4:cb:0d:f8:
66:08:97:79:48:57:b0:45:89:22:a4:00:db:b2:a1:
8d:c8:6b:21:9b:e6:67:c6:eb:05:d4:20:91:80:4d:
ae:77:ac:df:45:21:6c:a0:fe:5e:3c:17:62:f6:52:
e2:9a:17:4b:ec:7f:04:42:d9:58:18:d7:e8:60:4a:
ad:74:7d:c2:07:ff:ff:d0:16:c9:ab:15:e8:9b:46:
13:19:d9:71:30:38:3a:17:8c:86:0d:ec:0e:90:50:
f3:d6:3a:2e:45:d7:f0:4a:ae:c2:72:98:13:e7:cb:
a1:82:9c:b9:83:a9:44:93:6a:95:74:15:77:c6:59:
84:b3:98:e7:40:8b:c1:cc:70:b0:be:19:7e:c9:9f:
43:28:e1:eb:cb:9d:fd:28:0a:2d:bc:f3:17:0d:01:
34:f7:c6:e6:48:f4:5f:f2:2d:7c:34:7f:dc:b9:b3:
7a:d0:86:fe:4e:32:bf:a3:ae:be:dc:f6:f7:e4:fb:
9c:0f:12:75:18:63:42:45:47:46:47:10:89:e0:d7:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:9E:60:55:57:70:5A:63:43:2F:17:8E:89:5F:D6:D1:53:20:CC
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IQWeYFVXcFpjQy8Xjolf1tFTIMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
45.15.255.0/24
45.86.3.0/24
45.90.44.0/24
45.90.47.0/24
45.128.130.0/23
46.149.174.0/24
83.171.212.0/22
178.212.78.0/24
185.253.2.0/24
188.64.140.0/24
188.93.136.0/24
212.60.6.0/24
212.107.24.0/24
212.115.48.0/24
212.115.50.0/24
213.166.92.0/24
213.166.95.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f3:e3:09:78:2f:c2:b7:b7:42:92:25:33:cb:d7:f8:c6:6e:
ba:36:58:f1:de:63:69:ce:62:47:17:94:bd:c5:cf:b2:5f:ae:
8f:68:71:6e:a3:2c:36:c4:f2:20:26:48:9a:52:01:b7:e0:3e:
73:8b:24:2b:14:07:16:af:d3:29:0e:1b:17:45:50:02:b5:5c:
72:f6:57:5c:2c:89:e3:aa:2a:fb:43:73:2c:bb:aa:ed:a3:6c:
f9:dc:78:2f:4c:69:0d:84:98:8c:65:19:3e:06:be:93:b5:f0:
82:78:f6:4c:44:41:64:44:c8:0e:b0:43:6a:5e:dd:62:11:3a:
22:78:25:61:51:b1:3f:0a:52:ba:4c:e6:7a:ed:5a:ee:57:8a:
e6:45:21:88:0a:2b:f1:b1:b0:d2:18:6c:80:b4:82:f9:11:ad:
62:43:99:da:7c:96:bc:d9:f2:f3:a9:16:7a:03:27:a7:52:51:
6b:a9:f5:f6:03:72:bb:08:a1:2d:17:59:68:d3:c2:c0:3f:7d:
c8:57:0b:24:d8:f7:1c:75:f6:6d:e5:34:af:fc:a2:80:56:95:
e1:ec:ea:72:94:58:21:e7:2d:41:fe:b4:9a:51:8b:b9:1b:45:
83:7b:b1:58:28:b3:85:23:02:cc:6b:f1:20:13:bf:98:90:e9:
11:af:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:35 2026 by rpki-client