Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/IEMOFCudFWRoOj0oMBeDRZ790qI.roa
File: IEMOFCudFWRoOj0oMBeDRZ790qI.roa (raw, json)
Hash identifier: r7ZHDpS+UCDYjLpDFDf1u3arD0isROth0M8a4+LI0co=
Subject key identifier: 20:43:0E:14:2B:9D:15:64:68:3A:3D:28:30:17:83:45:9E:FD:D2:A2
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019F8F9B19060FA4284C4A617F8124C37259
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/IEMOFCudFWRoOj0oMBeDRZ790qI.roa
Signing time: Thu 23 Jul 2026 15:32:14 +0000
ROA not before: Thu 23 Jul 2026 15:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 139.19.0.0/16 maxlen: 16
141.5.0.0/16 maxlen: 24
192.68.254.0/24 maxlen: 24
2a02:d480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:9b:19:06:0f:a4:28:4c:4a:61:7f:81:24:c3:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Jul 23 15:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20430e142b9d1564683a3d28301783459efdd2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:c2:26:6e:4e:72:75:10:13:ac:2d:ab:f5:
a2:db:9f:99:38:78:ad:c5:6b:aa:b0:bc:af:0a:79:
24:47:8c:bf:a8:df:53:e1:2a:79:2c:e5:f7:dd:23:
2e:86:d2:84:6a:1f:e9:4c:83:25:06:c8:19:40:4a:
4f:62:4b:1c:33:d0:68:aa:65:97:d4:2c:18:fd:18:
1a:bb:39:bf:06:d2:4d:55:e0:3d:4d:08:ec:56:bf:
5f:54:8e:a6:8b:9e:3c:f4:6d:62:aa:7a:ac:3b:ad:
00:f7:44:97:3e:0e:51:23:ba:d7:43:ff:cf:08:82:
0d:a1:94:77:6d:e3:4b:e7:fa:03:3d:3f:c8:54:0b:
84:1d:e4:b0:23:6e:87:27:03:64:ef:73:55:39:b4:
5b:ae:ba:04:ff:13:79:27:01:b6:16:d2:5d:08:a0:
4a:db:88:ba:7f:66:d9:1f:84:f8:7f:60:7c:c4:9b:
25:da:aa:2e:68:70:33:fe:55:33:a5:be:dd:9c:d7:
38:c7:95:50:fc:9d:57:bc:8f:24:18:f2:63:a8:c3:
a2:42:5e:2b:6c:f1:06:c8:35:7a:a9:7a:9b:17:dd:
3e:bb:0d:c6:02:54:f4:2f:41:4c:8d:48:f9:fc:a7:
80:70:6d:97:98:f2:3a:e8:c4:5e:12:60:a6:d1:f2:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:0E:14:2B:9D:15:64:68:3A:3D:28:30:17:83:45:9E:FD:D2:A2
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/IEMOFCudFWRoOj0oMBeDRZ790qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.19.0.0/16
141.5.0.0/16
192.68.254.0/24
IPv6:
2a02:d480::/32
Signature Algorithm: sha256WithRSAEncryption
71:bd:fc:ba:02:2c:ce:e9:68:28:7a:1b:ea:b1:a4:b2:ec:5d:
8f:d6:c2:34:26:4e:7c:cd:6e:c9:56:d0:09:ea:68:ff:63:36:
eb:f5:2e:0b:0d:8d:0d:57:28:d3:0e:48:89:ae:c0:e3:8b:4c:
8d:47:4a:00:a1:e1:74:af:26:9a:fc:95:2f:a8:26:f3:f5:ab:
24:ca:7c:d3:ae:c8:5c:1a:cf:db:b6:d9:a6:01:0f:7b:57:ce:
c2:c4:46:d5:0e:6b:e1:2b:f0:af:47:8e:c8:95:7f:df:6f:05:
0b:87:44:28:ce:7b:28:1d:a2:99:b0:b8:57:bc:29:09:dd:90:
13:2f:31:ce:31:04:18:38:74:01:cf:df:46:15:b0:ac:5c:f8:
a2:e9:3d:f9:84:09:39:f1:60:dd:a0:dc:1c:b0:07:d7:87:1c:
4d:ca:4c:24:92:0c:ef:42:2a:df:af:4e:4b:8f:21:0d:35:07:
9f:00:8e:7c:4d:2c:22:94:53:d5:a3:d2:0b:13:7c:68:96:06:
56:59:37:ac:15:5b:e4:06:d6:05:80:c0:0b:14:16:81:40:aa:
b6:74:0f:0b:be:a6:81:dc:80:bd:59:53:12:c5:a8:db:76:4c:
7c:82:96:be:99:eb:09:c0:8d:6b:3e:bb:e9:cc:5f:39:1c:9f:
08:47:99:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PmxkGD6QoTEphf4Ekw3JZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx
ZDYyNDQwHhcNMjYwNzIzMTUzMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDQzMGUxNDJiOWQxNTY0NjgzYTNkMjgzMDE3ODM0NTllZmRkMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsvCJm5OcnUQE6wtq/Wi25+ZOHit
xWuqsLyvCnkkR4y/qN9T4Sp5LOX33SMuhtKEah/pTIMlBsgZQEpPYkscM9BoqmWX
1CwY/Rgauzm/BtJNVeA9TQjsVr9fVI6mi5489G1iqnqsO60A90SXPg5RI7rXQ//P
CIINoZR3beNL5/oDPT/IVAuEHeSwI26HJwNk73NVObRbrroE/xN5JwG2FtJdCKBK
24i6f2bZH4T4f2B8xJsl2qouaHAz/lUzpb7dnNc4x5VQ/J1XvI8kGPJjqMOiQl4r
bPEGyDV6qXqbF90+uw3GAlT0L0FMjUj5/KeAcG2XmPI66MReEmCm0fLG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBDDhQrnRVkaDo9KDAXg0We/dKiMB8GA1UdIwQY
MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt
NTBjMTZiZGQ1YzI0LzEvSUVNT0ZDdWRGV1JvT2owb01CZURSWjc5MHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0
LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwMAixMDAwCN
BQMEAMBE/jANBAIAAjAHAwUAKgLUgDANBgkqhkiG9w0BAQsFAAOCAQEAcb38ugIs
zuloKHob6rGksuxdj9bCNCZOfM1uyVbQCepo/2M26/UuCw2NDVco0w5Iia7A44tM
jUdKAKHhdK8mmvyVL6gm8/WrJMp8067IXBrP27bZpgEPe1fOwsRG1Q5r4Svwr0eO
yJV/328FC4dEKM57KB2imbC4V7wpCd2QEy8xzjEEGDh0Ac/fRhWwrFz4ouk9+YQJ
OfFg3aDcHLAH14ccTcpMJJIM70Iq369OS48hDTUHnwCOfE0sIpRT1aPSCxN8aJYG
Vlk3rBVb5AbWBYDACxQWgUCqtnQPC76mgdyAvVlTEsWo23ZMfIKWvpnrCcCNaz67
6cxfORyfCEeZeQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:28 2026 by rpki-client