Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/67cb4CVEd93Kal1WB78eaZaXMaQ.roa
File: 67cb4CVEd93Kal1WB78eaZaXMaQ.roa (raw, json)
Hash identifier: ZcMr0wkok+GwKeLBJ19lhnn1dS3XMFc3UKTI/fu+EjQ=
Subject key identifier: EB:B7:1B:E0:25:44:77:DD:CA:6A:5D:56:07:BF:1E:69:96:97:31:A4
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019F85026508061C86A7296BC11A287B9B55
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/67cb4CVEd93Kal1WB78eaZaXMaQ.roa
Signing time: Tue 21 Jul 2026 14:09:14 +0000
ROA not before: Tue 21 Jul 2026 14:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 103.108.88.0/23 maxlen: 23
103.137.162.0/23 maxlen: 23
189.81.64.0/23 maxlen: 23
189.81.72.0/23 maxlen: 23
189.81.76.0/23 maxlen: 23
189.104.128.0/23 maxlen: 23
189.104.140.0/23 maxlen: 23
189.104.184.0/23 maxlen: 23
195.64.97.0/24 maxlen: 24
205.188.6.0/23 maxlen: 23
205.188.62.0/23 maxlen: 23
205.188.148.0/22 maxlen: 22
205.188.152.0/22 maxlen: 22
205.188.228.0/22 maxlen: 22
205.188.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:02:65:08:06:1c:86:a7:29:6b:c1:1a:28:7b:9b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 21 14:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebb71be0254477ddca6a5d5607bf1e69969731a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:62:db:61:4b:88:02:99:d4:a7:6f:79:14:
ab:f3:af:e7:ce:4f:af:d0:80:7c:a9:83:ef:9e:64:
e1:aa:ae:07:6a:ed:5d:59:55:be:88:96:1a:17:ac:
38:d3:67:ff:ca:5f:28:26:be:a6:6f:c5:ba:ee:5d:
32:55:79:a5:fe:3d:8a:d3:7d:6d:bf:dc:0b:00:ab:
22:9f:d2:9b:8d:fe:0d:c9:3a:f0:fa:ec:a9:23:2a:
97:6e:08:57:30:5d:8c:ed:bf:7a:3a:5e:ce:05:ef:
65:e2:4d:f4:a9:ab:89:cf:b2:ba:98:23:c2:58:52:
7b:0e:77:76:b4:31:d9:23:6e:2c:bf:87:9a:dd:0c:
f5:d9:a7:9c:fc:d6:2e:b0:bd:c7:72:6b:39:16:95:
79:f5:53:79:e2:e3:c5:1a:bf:79:6c:7c:ca:7c:8f:
2f:b8:0b:f2:e6:49:92:65:fb:d0:81:ff:d2:0b:35:
2c:01:60:2a:90:b2:30:8a:c6:5e:69:48:5e:48:21:
03:22:03:49:fb:2d:56:14:17:58:8c:56:5d:ff:42:
b2:8d:57:ed:ba:fa:50:47:0b:fd:91:dd:76:5e:16:
b3:13:24:3e:df:9e:aa:59:d8:c0:c4:f9:f6:61:ef:
3c:33:5f:62:91:70:f8:7f:a6:21:a8:29:cf:07:bf:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:1B:E0:25:44:77:DD:CA:6A:5D:56:07:BF:1E:69:96:97:31:A4
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/67cb4CVEd93Kal1WB78eaZaXMaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.88.0/23
103.137.162.0/23
189.81.64.0/23
189.81.72.0/23
189.81.76.0/23
189.104.128.0/23
189.104.140.0/23
189.104.184.0/23
195.64.97.0/24
205.188.6.0/23
205.188.62.0/23
205.188.148.0-205.188.155.255
205.188.228.0/22
205.188.250.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:74:0d:30:45:48:fa:8f:1b:47:7d:53:7c:e3:d6:b0:ab:27:
f9:cf:26:dd:32:d1:bb:aa:f0:a6:5b:d3:db:82:2f:8e:d1:f5:
ea:58:dc:87:61:ec:e1:5b:d8:e4:c5:45:8c:b5:cf:82:df:dd:
4a:ba:5d:af:69:7c:ce:36:c3:e9:79:fa:97:44:2c:f1:08:de:
54:3b:a5:67:8f:fc:c9:9b:85:b9:f8:20:9b:eb:4b:56:41:51:
f9:55:aa:92:2a:c5:0e:e7:0a:7e:55:04:6a:e1:bd:3c:3d:15:
32:74:4f:12:6c:91:11:ee:00:1e:6a:43:df:2e:f5:b0:47:73:
dc:1f:1e:cf:76:eb:8f:33:2c:2b:98:2c:87:0a:5a:4b:be:63:
9d:93:a4:7e:6b:7f:4e:26:50:cd:0b:0e:1c:e8:3b:be:75:7b:
0d:19:ae:dc:11:5a:91:c3:6a:49:00:7c:3d:42:d6:67:21:9f:
38:3f:7c:95:d9:fb:a0:a4:97:41:bd:fe:0a:31:74:2b:ab:d7:
33:31:e2:5b:7a:72:1b:88:2d:08:52:d2:4a:7f:09:e7:74:4a:
a2:be:c4:6b:8a:a5:0c:74:5c:d5:77:8f:b5:5d:6f:c4:34:b6:
76:08:dd:ac:7e:fb:54:1a:90:0e:61:14:2e:46:74:f4:89:6e:
d9:3b:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:15 2026 by rpki-client