Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/Iuspe14G5QMlx5dSWpRrg05Ny9A.roa
File: Iuspe14G5QMlx5dSWpRrg05Ny9A.roa (raw, json)
Hash identifier: 7VI2D5eUznCeqx3Pi1ABWFNpA0b/azhPfenbDmlUGG4=
Subject key identifier: 22:EB:29:7B:5E:06:E5:03:25:C7:97:52:5A:94:6B:83:4E:4D:CB:D0
Certificate issuer: /CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc
Certificate serial: 019B7DCAF2091AD72D479326687D59053675
Authority key identifier: 6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/Iuspe14G5QMlx5dSWpRrg05Ny9A.roa
Signing time: Fri 02 Jan 2026 08:20:10 +0000
ROA not before: Fri 02 Jan 2026 08:20:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56737
IP address blocks: 31.209.184.0/21 maxlen: 21
185.140.200.0/22 maxlen: 22
2a07:d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:f2:09:1a:d7:2d:47:93:26:68:7d:59:05:36:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc
Validity
Not Before: Jan 2 08:20:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22eb297b5e06e50325c797525a946b834e4dcbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:7e:bf:69:0a:42:24:5b:a3:c4:5a:ad:ba:
56:ae:a0:10:5e:cd:99:bc:b2:48:65:70:8c:58:3f:
48:fc:90:54:6f:96:a3:de:cd:f6:5a:70:cb:49:28:
11:5a:c4:ab:50:33:4c:af:ed:f9:76:93:b2:b0:1f:
0a:78:ee:a4:e6:01:d6:44:20:0d:8f:a4:09:fb:d3:
f4:89:0c:2b:4f:21:32:80:b8:0a:19:2f:e9:6d:c8:
f7:1d:3e:59:a0:88:ec:04:9b:14:75:95:c1:61:92:
60:2f:69:1f:c4:21:4a:f8:49:f9:c7:a5:47:5c:10:
93:56:b6:86:ad:e0:59:86:02:25:f5:54:65:6e:53:
7f:f3:93:e1:b5:d7:9b:7e:73:0c:cf:96:82:16:df:
e9:96:0a:de:78:47:59:a3:2c:d4:fd:99:17:f3:08:
9e:65:fd:4e:84:d5:ff:2b:66:aa:03:a4:71:a5:b1:
93:8c:e4:ae:b5:aa:70:bb:32:ee:bf:39:54:3b:d6:
d7:6a:13:ff:65:06:9f:7a:ec:60:7d:00:1a:35:b5:
62:42:31:b7:44:54:f8:f3:58:6e:eb:ac:1b:ac:2c:
f9:14:5d:38:68:4a:85:e3:53:27:8f:f9:91:74:d3:
7f:0a:7b:45:f0:8a:cd:f1:ab:0b:09:f0:69:02:3a:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EB:29:7B:5E:06:E5:03:25:C7:97:52:5A:94:6B:83:4E:4D:CB:D0
X509v3 Authority Key Identifier:
keyid:6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/Iuspe14G5QMlx5dSWpRrg05Ny9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.184.0/21
185.140.200.0/22
IPv6:
2a07:d00::/29
Signature Algorithm: sha256WithRSAEncryption
18:b8:61:a6:fc:f1:e1:dd:e3:9a:70:76:1a:8f:39:ad:5f:b3:
8c:d7:76:13:b7:29:01:84:38:78:01:34:df:ad:a1:ea:5b:32:
74:c9:84:f3:9a:ea:b1:ce:7b:6e:29:aa:e5:83:e7:70:7a:30:
21:cb:01:67:bc:b5:da:a3:6b:44:72:04:66:57:e3:6c:54:4d:
34:7c:bc:de:41:c9:60:cb:94:e2:02:8f:b9:07:c6:40:91:d1:
f7:61:bc:46:b6:5e:49:56:ba:7c:83:eb:86:93:b9:93:0a:d7:
f4:f4:42:94:26:14:2d:de:ff:d0:2b:f7:4c:fc:31:29:ab:ab:
25:28:a4:a2:3c:11:83:0b:14:b0:da:dc:a7:a4:2a:8e:fb:0e:
1a:86:b4:97:97:83:2c:aa:e5:b5:1a:5e:58:83:9c:2b:de:c4:
07:43:db:a9:73:6f:e5:21:d8:59:cf:3f:cc:95:14:f2:2b:3c:
f2:21:60:47:4f:e2:74:54:e1:46:18:56:35:e3:54:26:c4:b3:
8c:25:30:49:22:cb:8d:a2:bb:c6:b3:ed:b9:3a:a3:fb:f3:db:
77:30:cd:03:60:bb:2a:65:e0:8e:d8:6a:d2:97:56:fa:dc:dc:
91:4d:76:7a:9d:fd:44:d5:79:ca:c6:55:e3:92:05:d6:b0:08:
5b:fb:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:38 2026 by rpki-client