Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/IiAeO2I-L2tf7rMIF2juoXeMbLY.roa
File: IiAeO2I-L2tf7rMIF2juoXeMbLY.roa (raw, json)
Hash identifier: JmZ2NrH0vJYn+iMdiyzKeHQIz8w/tqafDfwWJt2HWW4=
Subject key identifier: 22:20:1E:3B:62:3E:2F:6B:5F:EE:B3:08:17:68:EE:A1:77:8C:6C:B6
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 019EEF079DAA233B3B321D09ADA38545156A
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/IiAeO2I-L2tf7rMIF2juoXeMbLY.roa
Signing time: Mon 22 Jun 2026 11:11:54 +0000
ROA not before: Mon 22 Jun 2026 11:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202
IP address blocks: 5.134.208.0/21 maxlen: 21
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 23
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 23
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/21 maxlen: 21
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 23
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/30 maxlen: 30
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc::/32 maxlen: 32
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
2a02:dcd::/32 maxlen: 32
2a02:dce::/32 maxlen: 32
2a02:dcf::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:07:9d:aa:23:3b:3b:32:1d:09:ad:a3:85:45:15:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jun 22 11:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22201e3b623e2f6b5feeb3081768eea1778c6cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:89:6a:28:f0:5e:ca:fd:34:e1:33:76:de:
eb:9c:4c:9f:13:9a:cd:de:c5:a7:22:dd:a3:7f:ca:
b6:2a:eb:bd:68:32:0f:35:d0:1a:4d:77:83:e0:be:
e9:54:4c:fd:26:9b:53:4d:84:f7:75:5a:ad:a8:fa:
a3:82:22:2a:81:41:73:3a:7d:36:28:3c:28:82:a2:
17:e2:13:71:b5:0e:de:2c:b6:47:cb:eb:01:aa:04:
a8:67:73:cc:a1:da:b1:04:ef:7d:7f:c0:fd:92:d7:
f7:24:81:96:36:fa:80:e8:1a:24:ac:9f:5d:a8:05:
f6:cf:77:45:08:02:09:96:65:80:6a:a0:82:c1:1a:
45:44:ac:be:05:0c:64:bc:15:fa:25:7f:e6:42:23:
22:b3:d1:9b:d4:67:ea:be:d3:54:a3:44:ed:fa:4e:
e4:3c:c3:14:6d:38:8e:5e:9d:15:f2:1a:e3:8b:ee:
38:a3:b5:f4:cb:7d:1d:f1:c4:a8:83:92:26:75:b3:
ff:53:49:7b:1d:dc:a8:c2:c9:60:62:60:1d:4d:5b:
f3:50:b3:d4:56:21:d1:41:5e:27:e9:33:54:f9:d5:
3a:8c:b0:b7:22:9e:86:f3:b4:44:b5:1b:d2:ad:69:
79:e8:c0:e4:cf:aa:46:2d:e0:bb:e2:37:83:ee:9e:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:20:1E:3B:62:3E:2F:6B:5F:EE:B3:08:17:68:EE:A1:77:8C:6C:B6
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/IiAeO2I-L2tf7rMIF2juoXeMbLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/29
Signature Algorithm: sha256WithRSAEncryption
37:d8:5d:66:70:33:b8:27:8c:14:c1:df:e4:fd:92:78:14:c4:
61:81:e5:fe:25:79:f0:52:b2:de:b3:28:78:8f:3a:7a:12:de:
b9:86:55:6a:53:43:40:9d:13:18:a0:c7:d8:94:55:b6:8d:a1:
63:2f:7b:00:0e:b0:ac:a6:49:73:50:81:56:63:b4:89:1b:ca:
bd:84:90:2c:ba:ce:26:65:70:04:c5:ad:3a:63:80:99:ce:84:
e7:cb:a5:1a:bc:28:2b:01:78:47:f6:85:cf:2b:2c:f5:21:61:
8e:4d:59:77:c0:44:cb:99:64:a8:0e:99:03:a3:6b:c2:ff:c8:
d9:ba:88:d4:b9:ec:15:0c:04:13:cc:70:9c:d0:33:36:5c:89:
ae:19:11:36:c1:00:6d:1e:11:bc:0b:e8:af:bb:4b:3c:be:1d:
1d:90:fc:2b:0a:6a:65:03:9f:bc:b2:bf:af:e2:aa:f7:9b:87:
00:5c:55:3a:34:d6:82:52:7e:89:ff:15:cf:be:38:f1:53:75:
6d:db:4e:3f:4a:99:12:c0:83:07:3a:65:c3:c8:a0:df:45:30:
88:69:ce:f3:0f:ac:ed:3a:b8:d9:c8:6d:5a:28:3c:26:15:42:
ed:cc:d6:13:28:bd:9f:bc:e5:a3:97:1c:b0:14:be:a9:43:90:
28:43:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:46 2026 by rpki-client