Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/IIgGJVuuP6WOZKQ44Wy-VvIKe3I.roa
File: IIgGJVuuP6WOZKQ44Wy-VvIKe3I.roa (raw, json)
Hash identifier: kEGKuXQnbNboSCJS0YbLwgpXdleLSO+hLRxNQaI+AOg=
Subject key identifier: 20:88:06:25:5B:AE:3F:A5:8E:64:A4:38:E1:6C:BE:56:F2:0A:7B:72
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019D0A3871D7D25CB77EBBC80AC0CB18B4E6
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/IIgGJVuuP6WOZKQ44Wy-VvIKe3I.roa
Signing time: Fri 20 Mar 2026 07:49:24 +0000
ROA not before: Fri 20 Mar 2026 07:49:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.119.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:38:71:d7:d2:5c:b7:7e:bb:c8:0a:c0:cb:18:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Mar 20 07:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208806255bae3fa58e64a438e16cbe56f20a7b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:17:48:b5:b8:4a:54:ca:4b:81:35:47:f0:
a0:46:d9:39:8c:e0:b0:47:a7:a3:54:dd:0b:0b:ce:
e2:6f:55:13:33:98:26:c0:77:bb:fa:20:53:21:fb:
89:ae:77:48:31:18:da:30:e1:9a:3c:9b:ca:38:6b:
6e:6e:b1:1b:3f:98:d1:ed:4f:db:7c:8b:6a:96:7e:
51:37:3e:e2:74:80:69:82:9b:d4:60:88:c2:58:fc:
56:4c:26:10:1b:ad:9b:a5:70:3b:46:59:ce:c4:cc:
05:b8:fb:7a:d0:82:46:fe:c1:5b:5a:90:79:26:cc:
5e:ec:3f:f3:d4:1b:41:f7:66:6d:93:9b:a7:ba:90:
ab:6b:8f:aa:ce:e8:37:f5:03:54:2f:ac:1f:2f:87:
c9:c1:fb:4b:98:b7:ea:03:0b:a6:ed:fd:b6:16:e7:
6b:2e:6d:99:28:19:70:85:e0:07:90:82:43:b7:3f:
7a:45:72:02:1f:da:09:f3:79:fa:1f:11:af:85:22:
68:77:04:4a:c1:8c:cb:87:24:a7:8f:e6:a9:8a:1e:
43:ac:fb:f0:8d:42:05:e3:25:e7:d0:f8:01:e9:8d:
31:d5:be:15:77:2e:33:fa:6a:7c:e8:b8:47:f4:29:
b4:1d:fa:bc:3d:c6:e8:ea:ff:c2:b7:d3:f9:9d:45:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:88:06:25:5B:AE:3F:A5:8E:64:A4:38:E1:6C:BE:56:F2:0A:7B:72
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/IIgGJVuuP6WOZKQ44Wy-VvIKe3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.119.0/24
77.111.123.0/24
91.190.187.0/24
92.61.103.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:7c:c1:58:a9:e6:25:50:a2:7e:f9:34:d5:9b:f5:30:a4:0e:
3e:31:13:13:c0:8d:f9:b8:1c:53:4a:53:f9:c5:1f:be:ca:6f:
50:16:be:f4:24:11:4f:8c:77:15:49:af:0e:4a:9b:e9:35:03:
70:aa:38:4f:78:e8:1f:c3:c9:bc:83:e3:56:84:67:3c:ca:9e:
97:16:3c:56:01:92:95:41:6a:f9:9a:a6:d7:80:0a:c9:43:f7:
25:47:e1:a7:15:84:f6:56:e9:06:66:6c:cb:70:46:b3:93:08:
df:21:14:fd:d3:9c:eb:44:3e:37:8a:87:9b:56:2d:b0:76:7f:
81:b7:41:1f:f0:6b:2b:70:6e:3b:1a:e5:c9:fa:b7:26:41:b5:
a5:1a:f4:bd:06:69:c8:9a:2d:8b:74:4d:0c:93:94:8a:93:3a:
44:89:98:48:80:9e:e0:7e:c2:39:30:4e:41:eb:8e:79:83:57:
9e:9a:83:68:a8:22:35:5f:bc:3a:98:73:dc:98:cb:5a:b2:f0:
0c:df:40:1b:36:ec:67:7a:a5:9e:51:06:59:20:2f:72:04:1a:
c0:fe:ef:cf:30:7c:73:cc:0c:2d:77:11:24:fe:b8:4e:e6:e8:
31:d8:c6:a9:79:24:b7:15:f0:a3:b3:5f:f2:85:86:26:0c:91:
1c:44:f6:64
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ0KOHHX0ly3frvICsDLGLTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwMzIwMDc0OTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDg4MDYyNTViYWUzZmE1OGU2NGE0MzhlMTZjYmU1NmYyMGE3YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqAXSLW4SlTKS4E1R/CgRtk5jOCw
R6ejVN0LC87ib1UTM5gmwHe7+iBTIfuJrndIMRjaMOGaPJvKOGtubrEbP5jR7U/b
fItqln5RNz7idIBpgpvUYIjCWPxWTCYQG62bpXA7RlnOxMwFuPt60IJG/sFbWpB5
Jsxe7D/z1BtB92Ztk5unupCra4+qzug39QNUL6wfL4fJwftLmLfqAwum7f22Fudr
Lm2ZKBlwheAHkIJDtz96RXICH9oJ83n6HxGvhSJodwRKwYzLhySnj+apih5DrPvw
jUIF4yXn0PgB6Y0x1b4Vdy4z+mp86LhH9Cm0Hfq8Pcbo6v/Ct9P5nUUbKQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCCIBiVbrj+ljmSkOOFsvlbyCntyMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvSUlnR0pWdXVQNldPWktRNDRXeS1WdklLZTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATW91AwQA
TW93AwQATW97AwQAW767AwQAXD1nAwQAXD1qAwQAXD1tAwQCuXDwMA0GCSqGSIb3
DQEBCwUAA4IBAQB7fMFYqeYlUKJ++TTVm/UwpA4+MRMTwI35uBxTSlP5xR++ym9Q
Fr70JBFPjHcVSa8OSpvpNQNwqjhPeOgfw8m8g+NWhGc8yp6XFjxWAZKVQWr5mqbX
gArJQ/clR+GnFYT2VukGZmzLcEazkwjfIRT905zrRD43ioebVi2wdn+Bt0Ef8Gsr
cG47GuXJ+rcmQbWlGvS9BmnImi2LdE0Mk5SKkzpEiZhIgJ7gfsI5ME5B6455g1ee
moNoqCI1X7w6mHPcmMtasvAM30AbNuxneqWeUQZZIC9yBBrA/u/PMHxzzAwtdxEk
/rhO5ugx2MapeSS3FfCjs1/yhYYmDJEcRPZk
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:31 2026 by rpki-client