Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa
File: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (raw, json)
Hash identifier: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=
Subject key identifier: F8:89:41:D8:2A:61:16:12:75:12:CD:80:BA:3E:98:F0:FB:FF:C1:C1
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019F17B374A4E3132AB2C124D0B256FDA01C
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa
Signing time: Tue 30 Jun 2026 08:44:24 +0000
ROA not before: Tue 30 Jun 2026 08:44:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36454
IP address blocks: 65.98.5.0/24 maxlen: 24
65.181.112.0/24 maxlen: 24
65.181.116.0/24 maxlen: 24
65.181.123.0/24 maxlen: 24
65.181.124.0/24 maxlen: 24
65.181.125.0/24 maxlen: 24
65.181.127.0/24 maxlen: 24
69.57.189.0/24 maxlen: 24
69.72.136.0/24 maxlen: 24
162.208.8.0/24 maxlen: 24
162.208.9.0/24 maxlen: 24
162.208.10.0/24 maxlen: 24
162.208.11.0/24 maxlen: 24
185.181.253.0/24 maxlen: 24
185.181.254.0/24 maxlen: 24
185.181.255.0/24 maxlen: 24
192.243.96.0/24 maxlen: 24
192.243.97.0/24 maxlen: 24
192.243.98.0/24 maxlen: 24
192.243.99.0/24 maxlen: 24
192.243.100.0/24 maxlen: 24
192.243.101.0/24 maxlen: 24
192.243.102.0/24 maxlen: 24
192.243.103.0/24 maxlen: 24
192.243.104.0/24 maxlen: 24
192.243.105.0/24 maxlen: 24
192.243.106.0/24 maxlen: 24
192.243.107.0/24 maxlen: 24
192.243.108.0/24 maxlen: 24
192.243.109.0/24 maxlen: 24
192.243.111.0/24 maxlen: 24
192.250.224.0/20 maxlen: 20
192.250.226.0/24 maxlen: 24
192.250.227.0/24 maxlen: 24
192.250.236.0/24 maxlen: 24
194.39.123.0/24 maxlen: 24
194.39.148.0/24 maxlen: 24
194.39.149.0/24 maxlen: 24
195.250.25.0/24 maxlen: 24
198.38.90.0/24 maxlen: 24
199.175.48.0/24 maxlen: 24
199.175.49.0/24 maxlen: 24
199.175.50.0/24 maxlen: 24
199.175.51.0/24 maxlen: 24
199.175.52.0/24 maxlen: 24
199.175.53.0/24 maxlen: 24
199.175.54.0/24 maxlen: 24
199.175.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:b3:74:a4:e3:13:2a:b2:c1:24:d0:b2:56:fd:a0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 30 08:44:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f88941d82a6116127512cd80ba3e98f0fbffc1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:bc:49:00:f1:8b:5b:1e:a6:74:11:70:f3:
b6:e5:26:71:7b:d3:7e:e9:c8:8f:f6:ac:d1:c4:54:
50:07:b0:78:31:84:a9:a2:a4:60:cc:35:6f:24:ee:
04:f3:09:96:a6:fb:d2:0f:9d:ea:eb:48:44:63:93:
e1:45:41:72:31:4f:04:c8:da:43:80:8a:83:3f:5f:
7a:0e:94:f0:01:de:b2:04:c8:e6:f2:bf:aa:9f:91:
10:9a:21:53:e0:7a:37:bf:38:10:0e:57:87:a9:46:
35:1b:a3:f6:79:fb:2e:47:43:7e:b3:bf:00:1a:e3:
d8:a1:55:17:43:01:e6:22:f1:14:7a:57:52:a5:35:
93:25:fc:3f:37:c3:0b:61:57:70:70:3c:6e:f1:3e:
d7:ac:83:71:3e:be:d8:9e:0a:1e:7a:cc:d5:92:08:
90:b3:ae:88:46:17:3f:f6:7a:de:78:01:70:36:b5:
32:b3:a4:e6:d9:2a:0c:e5:30:f5:11:a6:1f:c6:53:
b5:b7:81:d2:10:71:a0:65:71:a4:f7:c5:f4:a8:76:
ba:22:39:cb:03:ea:c2:c0:f7:5f:8b:5f:bb:c0:a6:
1c:52:76:c0:b2:c9:a4:b1:54:bd:3f:79:39:51:f9:
e3:9c:d9:e9:ce:c7:04:e7:b5:8f:bb:6a:50:f2:10:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:41:D8:2A:61:16:12:75:12:CD:80:BA:3E:98:F0:FB:FF:C1:C1
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.5.0/24
65.181.112.0/24
65.181.116.0/24
65.181.123.0-65.181.125.255
65.181.127.0/24
69.57.189.0/24
69.72.136.0/24
162.208.8.0/22
185.181.253.0-185.181.255.255
192.243.96.0-192.243.109.255
192.243.111.0/24
192.250.224.0/20
194.39.123.0/24
194.39.148.0/23
195.250.25.0/24
198.38.90.0/24
199.175.48.0/21
Signature Algorithm: sha256WithRSAEncryption
85:df:6f:e8:9f:e0:95:f8:91:9e:1f:47:d6:ec:0a:19:c4:a2:
f0:8d:b9:d5:e4:08:5b:12:1e:1a:3c:da:d7:b2:50:63:8e:2b:
9f:b8:3c:d8:d6:3d:87:22:f3:05:6d:54:42:d6:8f:4c:fa:33:
4b:d6:37:07:de:8f:e2:b4:ae:ae:0e:ae:a5:d9:30:af:5b:3f:
4a:76:e4:cf:cd:da:5c:18:30:5e:4a:70:6b:e0:4f:02:18:79:
36:bc:db:93:5d:c7:a7:11:5d:e8:6e:de:d8:49:77:d1:75:8f:
e1:f6:23:59:f4:0d:65:63:b1:f8:b9:ab:b5:b9:56:b7:00:7c:
c2:c5:bb:4d:2b:f4:9e:e0:d7:da:50:a6:26:0a:e6:cb:ad:b7:
7b:0a:85:cd:9b:08:99:28:da:a6:99:be:8f:40:ba:d1:96:96:
f0:84:c6:4f:51:a3:b6:ec:3c:ca:79:b5:e0:9d:ff:9d:4a:d8:
9c:4b:d2:ed:bb:86:63:41:aa:ba:a6:f9:86:c1:6d:3c:1f:b7:
82:e5:2d:c3:fc:72:4c:38:dd:36:c1:8b:c9:d3:bc:ee:05:3b:
27:d8:ed:b1:71:79:e4:12:2f:4b:8b:64:8b:82:ba:fa:cc:d6:
6d:3e:49:67:c2:c2:df:f3:bf:4e:5c:2c:25:29:8d:f5:13:84:
60:85:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:45 2026 by rpki-client