Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/IAE8GGEet8vnOy86a4Pl0t2IxIY.roa
File: IAE8GGEet8vnOy86a4Pl0t2IxIY.roa (raw, json)
Hash identifier: lB8GOpaeZj6cYWMehbLSIz/zXRuF4JutqhvwkMmG1eM=
Subject key identifier: 20:01:3C:18:61:1E:B7:CB:E7:3B:2F:3A:6B:83:E5:D2:DD:88:C4:86
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 019D25981B598783333F093BE704846BBB55
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/IAE8GGEet8vnOy86a4Pl0t2IxIY.roa
Signing time: Wed 25 Mar 2026 15:23:38 +0000
ROA not before: Wed 25 Mar 2026 15:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49321
IP address blocks: 62.3.43.0/24 maxlen: 24
91.196.155.0/24 maxlen: 24
146.19.146.0/24 maxlen: 24
185.128.225.0/24 maxlen: 24
185.245.56.0/23 maxlen: 24
194.93.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:98:1b:59:87:83:33:3f:09:3b:e7:04:84:6b:bb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Mar 25 15:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20013c18611eb7cbe73b2f3a6b83e5d2dd88c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:2b:f6:d4:7c:8e:01:fd:7a:e9:48:7e:0b:
05:ca:ae:74:fe:f2:0e:d1:1e:a8:68:23:f2:39:39:
ac:cf:0e:bc:e8:92:49:f1:34:91:7b:9f:71:8c:c1:
a2:60:93:32:17:c9:a6:d0:b2:92:c6:44:c0:00:8a:
d8:f4:95:0b:eb:c6:fc:f5:19:af:4e:66:c1:6a:8b:
22:4b:55:ba:3d:e1:a4:b3:ac:0f:6d:99:0e:83:f6:
31:d2:88:a9:8e:34:63:24:48:b0:5b:c8:2e:80:4e:
b9:5e:fc:52:64:61:aa:d3:ac:53:a3:61:f8:87:6f:
a5:5a:b9:a0:f0:3f:7c:7a:09:04:c5:f6:8d:4b:61:
c0:64:06:6f:b2:f4:e0:ba:28:4f:2a:83:73:c6:1e:
fe:8c:18:ba:0e:af:ad:9a:24:bb:7d:5a:4e:f7:0f:
cd:5e:97:6c:c4:f5:ef:2b:d6:b9:f9:57:eb:2c:61:
5b:1a:63:c0:4e:0d:e0:38:88:c2:31:f8:87:43:fe:
9b:ee:ac:79:d1:65:8f:33:eb:96:80:e3:25:47:4b:
f6:a5:72:f6:8d:8b:26:ec:75:84:12:54:13:07:5e:
24:f1:56:55:e3:2c:c7:a1:0f:dc:97:8f:3b:4a:dd:
f1:1c:c7:bc:5e:f8:2c:7c:0d:af:77:61:7b:83:d2:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:3C:18:61:1E:B7:CB:E7:3B:2F:3A:6B:83:E5:D2:DD:88:C4:86
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/IAE8GGEet8vnOy86a4Pl0t2IxIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.43.0/24
91.196.155.0/24
146.19.146.0/24
185.128.225.0/24
185.245.56.0/23
194.93.68.0/22
Signature Algorithm: sha256WithRSAEncryption
15:71:37:5d:33:a7:be:b8:77:2e:d0:56:7b:1e:5d:eb:09:08:
33:e4:d6:cf:70:11:07:c8:60:1f:48:29:5b:ff:e2:2b:bc:f0:
75:c6:44:95:c8:c6:60:dd:9e:3d:d7:99:0c:3e:3e:50:4e:1b:
d9:1f:34:ae:97:2a:e4:dc:94:9e:38:49:1b:40:2e:3e:5e:8d:
ff:fd:d9:52:06:2d:0a:40:cd:6b:1e:06:75:19:15:27:39:dd:
49:7b:17:df:cf:99:d2:aa:74:4e:3f:46:56:62:e2:1f:06:cc:
7a:55:f2:8c:fa:96:12:66:3c:de:35:fc:81:1d:c4:9e:55:7d:
74:c1:1b:4c:0b:ec:55:41:4d:69:1a:2d:79:07:ff:47:cc:e1:
f9:e3:e7:1a:d4:c4:6b:3b:64:14:3c:22:37:a5:a3:3d:15:66:
22:94:bc:b2:2b:1f:56:2a:49:35:29:8a:fd:9f:a1:53:0f:13:
2b:e8:24:62:e3:0b:92:a6:a3:ae:37:e5:9b:56:19:ba:2d:78:
ca:0a:7f:23:1b:13:2d:59:18:fb:8a:2b:44:cb:68:ef:d7:e1:
3e:a0:be:a9:9b:26:84:4c:8b:4a:b3:28:91:0e:eb:34:28:8a:
2f:bc:60:c4:d8:b8:d4:c9:e5:a7:cf:48:6f:12:d4:33:e0:11:
ae:af:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:49 2026 by rpki-client