Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/iPKJwckHS7fTX2BYHqvx9q3JA4g.roa
File: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (raw, json)
Hash identifier: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=
Subject key identifier: 88:F2:89:C1:C9:07:4B:B7:D3:5F:60:58:1E:AB:F1:F6:AD:C9:03:88
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019F7E307CF285196FE2DB1239C3BA82F1A4
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/iPKJwckHS7fTX2BYHqvx9q3JA4g.roa
Signing time: Mon 20 Jul 2026 06:22:14 +0000
ROA not before: Mon 20 Jul 2026 06:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
195.5.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:30:7c:f2:85:19:6f:e2:db:12:39:c3:ba:82:f1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jul 20 06:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88f289c1c9074bb7d35f60581eabf1f6adc90388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:9f:9a:3b:e1:9d:c4:eb:f6:ee:c7:c8:d0:
87:ac:dc:cd:99:91:3c:48:01:d3:3c:4a:c0:0b:75:
a1:32:4d:89:da:9b:77:02:15:d2:6d:4b:a7:5b:1e:
48:64:60:5b:de:1a:5b:7e:d0:a2:07:08:50:5a:81:
f1:91:86:2e:83:75:4c:7a:e1:fe:f7:9b:19:4a:5d:
70:3a:e9:e3:4a:50:de:4b:55:2e:e1:30:8e:54:3c:
30:18:d3:0a:ca:5e:fb:f3:28:07:01:c0:2d:f0:e1:
cc:53:fa:3a:46:cf:ca:0f:ca:8d:63:35:a0:f6:51:
b7:9f:0c:83:80:67:95:15:2f:35:3e:d2:95:19:b8:
3b:60:6d:81:08:33:f2:c1:99:93:8d:6f:7f:43:4d:
a6:21:fb:ea:f1:2b:de:65:d5:97:17:d2:9b:c8:00:
bb:f5:ed:8c:1e:2e:0c:99:15:5d:5d:fc:03:77:4f:
a4:b8:11:03:6f:a4:ff:79:7e:04:3f:ca:6c:13:bc:
a4:50:97:3f:22:08:16:b2:17:ff:b8:fe:e5:83:73:
18:61:94:e3:9b:e3:31:1f:ed:0f:57:d0:e4:30:ec:
aa:0d:82:2e:b3:43:b8:27:74:2b:ad:f3:84:c5:9c:
8e:7c:38:c1:51:d6:1c:3c:c6:dd:43:37:03:de:d7:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F2:89:C1:C9:07:4B:B7:D3:5F:60:58:1E:AB:F1:F6:AD:C9:03:88
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/iPKJwckHS7fTX2BYHqvx9q3JA4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
45.158.83.0/24
195.5.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8e:35:80:c1:7c:fd:3d:fd:70:95:42:0a:af:c3:37:14:ab:
1b:0e:11:34:4a:48:9a:1a:10:db:8c:ab:79:4d:db:b0:76:44:
b7:66:7d:a6:92:a3:b5:ca:0f:8a:23:d7:98:5e:9a:23:4e:cc:
43:33:1d:5c:6f:f9:4a:cc:40:f5:a6:56:7b:e2:60:51:d2:9c:
5a:32:60:3c:60:b1:9c:90:d3:bc:e0:a2:a7:c8:9a:79:3b:08:
3f:b9:10:62:ce:39:e2:01:7e:68:e9:d6:6e:39:26:b3:f9:67:
b2:e6:99:e1:1d:bf:dc:37:a2:b9:fb:8f:c3:89:6f:95:fb:6f:
67:10:92:9d:c2:f8:ff:80:ed:f0:9d:88:2b:8d:8c:e4:98:92:
08:83:bb:75:b1:d7:9b:c9:0d:03:69:07:73:22:6b:ff:13:15:
95:67:da:7f:10:47:26:37:df:2d:f3:69:c3:11:20:7d:0b:8b:
37:79:01:8f:98:2c:7c:ca:18:94:bd:24:6e:16:56:36:fe:07:
36:85:cc:5b:de:f4:35:26:06:3d:12:c6:3f:f4:4c:97:e6:94:
93:49:2e:54:89:ee:db:d8:37:08:14:cc:96:95:11:f4:7f:66:
48:93:f4:25:d9:2c:9d:e0:6a:62:6a:2e:6a:66:9a:d7:1b:ed:
ce:41:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:54 2026 by rpki-client