Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/Ihlb6TMBZzdM2msP85mC6C7Tb9s.roa
File: Ihlb6TMBZzdM2msP85mC6C7Tb9s.roa (raw, json)
Hash identifier: C2sKJQtjBRRMbWL99kznod9g3VbH4JLuuFtryMZLOS4=
Subject key identifier: 22:19:5B:E9:33:01:67:37:4C:DA:6B:0F:F3:99:82:E8:2E:D3:6F:DB
Certificate issuer: /CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Certificate serial: 019F2368A56DB78BA6F4F46727A92B5A2D4F
Authority key identifier: 07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/Ihlb6TMBZzdM2msP85mC6C7Tb9s.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34993
IP address blocks: 37.148.252.0/22 maxlen: 22
89.248.208.0/24 maxlen: 24
89.248.210.0/23 maxlen: 23
141.98.220.0/22 maxlen: 22
185.57.148.0/22 maxlen: 22
185.151.188.0/22 maxlen: 22
193.25.122.0/23 maxlen: 23
193.25.168.0/23 maxlen: 23
2a0a:1580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a5:6d:b7:8b:a6:f4:f4:67:27:a9:2b:5a:2d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22195be9330167374cda6b0ff39982e82ed36fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:0a:b9:38:66:f8:15:c4:fb:b3:8d:27:c0:
cc:b7:7c:d7:46:65:9b:5f:c2:e4:e0:62:41:8b:db:
45:b4:8b:ec:32:45:40:de:b9:6e:4a:2c:a8:5e:52:
cd:2c:e3:20:7e:83:2e:dd:13:53:8a:ae:a8:2e:31:
00:6a:e1:3d:66:8a:69:b3:0e:74:bf:6a:40:41:df:
32:45:fc:15:eb:f0:f2:52:97:cb:3e:95:c5:b4:fc:
72:f8:87:0c:d8:e1:ee:01:62:94:9a:c9:05:43:8c:
ec:db:54:40:b5:74:0f:16:7b:7d:4b:12:6c:4f:98:
67:cb:6e:21:a3:4c:69:cf:45:2e:54:21:db:c5:16:
9c:da:9f:fc:c4:54:f0:43:83:e3:8a:bf:79:c4:73:
60:8b:34:a3:b2:ca:d9:c1:d7:e3:9f:61:57:7e:32:
7d:53:80:56:64:72:90:9e:bd:1c:0b:92:9a:93:eb:
97:84:5f:0d:48:3a:82:58:33:a9:b3:80:54:ce:ee:
0f:ea:29:64:dd:4a:6f:16:96:1f:b4:a6:81:88:ae:
d9:b7:20:da:37:00:82:3a:fb:81:e1:1a:d3:13:0f:
54:30:36:02:48:31:45:fd:36:fc:26:98:67:f0:0e:
8f:ff:f9:df:63:f3:51:3b:54:35:fa:98:db:a0:17:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:19:5B:E9:33:01:67:37:4C:DA:6B:0F:F3:99:82:E8:2E:D3:6F:DB
X509v3 Authority Key Identifier:
keyid:07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/Ihlb6TMBZzdM2msP85mC6C7Tb9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.252.0/22
89.248.208.0/24
89.248.210.0/23
141.98.220.0/22
185.57.148.0/22
185.151.188.0/22
193.25.122.0/23
193.25.168.0/23
IPv6:
2a0a:1580::/29
Signature Algorithm: sha256WithRSAEncryption
21:cb:7c:18:31:8c:70:40:18:c4:7e:f3:e8:db:43:8f:20:0b:
ea:1f:19:75:4d:6a:46:af:b5:98:1c:0e:af:95:d9:6d:67:de:
e9:12:72:02:ab:9c:b6:59:72:fa:09:58:4c:b6:d3:6b:45:07:
e2:8c:a1:38:99:81:be:64:de:74:7f:da:45:72:45:a2:95:23:
6d:79:39:6b:d6:ff:7c:72:df:5f:fd:fc:ac:86:4e:ad:48:38:
5f:64:06:dc:76:ab:85:b5:6c:7f:c1:b8:77:be:bb:48:c0:3b:
c8:52:5f:c8:0f:c5:73:89:84:fa:55:19:06:36:f2:8f:86:5c:
ff:d7:e9:07:af:50:ae:89:8b:ec:6d:90:a2:e2:eb:af:ef:71:
26:40:05:79:9a:e8:12:2b:2c:31:0a:13:c5:4c:2a:a5:12:d4:
0e:d1:6f:ab:c5:e8:35:58:7b:e6:2c:ef:ab:53:b4:0b:21:f0:
0e:1e:c3:2e:f4:37:e0:6e:11:0c:50:af:4a:8a:75:ee:d9:46:
1d:dd:80:ff:ad:c7:73:a6:7b:88:c8:56:b2:59:96:44:e7:75:
49:aa:20:91:1b:9f:da:14:43:ae:2a:64:68:e6:54:6d:f3:31:
b8:b3:fa:c3:f6:74:cc:88:df:b6:bf:b7:d5:13:d9:8a:f4:12:
8c:cb:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:21 2026 by rpki-client