Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/lIirtorbjG9vYVKYts-V4a5QJGs.roa
File: lIirtorbjG9vYVKYts-V4a5QJGs.roa (raw, json)
Hash identifier: x7m9Ag9t2NY3XtAQGZGy5jrJ8bJO8545BASt7bBoX54=
Subject key identifier: 94:88:AB:B6:8A:DB:8C:6F:6F:61:52:98:B6:CF:95:E1:AE:50:24:6B
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019E1666332FBCA171AAEC374E8BDAD2A2B6
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/lIirtorbjG9vYVKYts-V4a5QJGs.roa
Signing time: Mon 11 May 2026 09:37:36 +0000
ROA not before: Mon 11 May 2026 09:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 212.180.24.0/23 maxlen: 23
212.180.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:66:33:2f:bc:a1:71:aa:ec:37:4e:8b:da:d2:a2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 11 09:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9488abb68adb8c6f6f615298b6cf95e1ae50246b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:a2:3f:59:46:25:97:a8:03:46:a6:50:71:
a7:35:18:8c:09:7a:33:59:1a:40:c1:19:be:c7:d2:
71:6f:13:71:91:ae:5c:d5:85:75:ca:2a:00:10:8e:
fc:0e:a1:1c:64:7d:43:87:13:8c:24:e7:03:af:34:
61:51:c5:dc:27:a8:ed:c4:92:29:38:43:99:53:f2:
e3:08:7d:1f:4a:0a:33:c4:3d:aa:c6:04:cc:80:a2:
cd:5e:e4:6a:bb:a0:07:3c:df:40:2a:f8:87:43:ee:
94:10:29:a1:01:c3:41:d6:66:4c:76:98:61:6a:a1:
03:d4:f5:be:15:cc:48:d4:48:d8:b6:3e:66:08:dd:
20:16:30:8a:3c:ae:77:f3:b3:9a:2a:b5:a6:88:5b:
c9:db:06:c7:97:67:e8:75:2b:21:1d:36:b3:39:3c:
da:96:90:fd:ca:e5:13:e1:ce:5b:72:88:88:b3:9f:
6c:20:56:65:6f:92:e2:c8:c2:24:3b:7d:11:fa:c0:
33:bf:ef:71:c9:8e:06:4d:77:1a:f0:0f:b6:e5:90:
28:a9:d5:3d:ee:f0:19:d6:4c:bf:78:d8:72:9d:48:
80:cc:ef:c3:66:fa:04:e4:d0:d0:36:b4:c4:47:7a:
b6:7d:bf:c6:f8:2d:cd:a7:c7:2b:a1:82:80:f3:38:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:AB:B6:8A:DB:8C:6F:6F:61:52:98:B6:CF:95:E1:AE:50:24:6B
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/lIirtorbjG9vYVKYts-V4a5QJGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.24.0/23
212.180.42.0/24
Signature Algorithm: sha256WithRSAEncryption
19:46:e2:a8:39:20:f0:41:2c:e9:34:ff:5b:39:7c:6d:74:f9:
56:b7:fe:38:7f:9b:3c:4b:42:31:af:46:d9:eb:f0:4e:b6:7d:
d8:78:40:2c:21:c7:b8:58:83:b3:45:ec:1b:21:7a:b9:e8:82:
5a:d4:fb:2e:c5:a7:2a:8d:2f:6c:77:1c:1a:8a:ba:a9:d0:75:
e7:9b:ce:01:83:cf:e2:b3:5c:e4:fd:7b:11:d7:30:a1:13:81:
8e:ff:2e:0d:ca:fe:bb:42:d1:8a:de:c9:d7:09:c2:6f:84:5b:
f4:de:c3:b4:72:bf:d2:74:fe:a1:03:19:21:44:9c:f8:4d:2a:
30:89:d7:03:ed:50:c2:0c:06:02:97:90:83:e8:44:fb:0a:36:
a6:7b:d7:60:0b:6d:29:80:54:5f:45:b8:eb:29:10:4c:4d:1c:
58:36:68:92:2f:ef:d6:3a:75:80:71:b5:26:95:d4:02:e9:87:
6c:4e:b7:3f:04:b8:6a:9c:5b:ad:37:d8:67:b5:97:a5:25:37:
3b:42:36:6e:60:8a:85:8d:ba:30:69:a4:0d:6c:28:da:b1:fe:
ac:fd:a5:6a:43:6a:ac:e2:ff:bc:60:a1:88:97:33:db:d0:e5:
a2:b5:2b:ef:6f:fc:7a:6a:c9:fb:81:c9:0c:c4:fc:41:f5:62:
c5:87:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:15 2026 by rpki-client