Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Ikjy73u8FLLPvcx7iUeOlhDA8JE.roa
File: Ikjy73u8FLLPvcx7iUeOlhDA8JE.roa (raw, json)
Hash identifier: hbvcHuE5W3d/jXVY3JSOKIiGPMPw+HUEjcOgDOTcTlY=
Subject key identifier: 22:48:F2:EF:7B:BC:14:B2:CF:BD:CC:7B:89:47:8E:96:10:C0:F0:91
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019F92226054A0101E478058C42D1871DA5B
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Ikjy73u8FLLPvcx7iUeOlhDA8JE.roa
Signing time: Fri 24 Jul 2026 03:19:14 +0000
ROA not before: Fri 24 Jul 2026 03:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
2a0b:21c1:6017::/48 maxlen: 48
2a0b:21c1:6018::/48 maxlen: 48
2a0b:21c1:6019::/48 maxlen: 48
2a0b:21c1:601a::/48 maxlen: 48
2a0b:21c1:601d::/48 maxlen: 48
2a0b:21c1:601e::/48 maxlen: 48
2a0b:21c1:601f::/48 maxlen: 48
2a0b:21c1:6020::/48 maxlen: 48
2a0b:21c1:6021::/48 maxlen: 48
2a0b:21c1:6022::/48 maxlen: 48
2a0b:21c1:6024::/48 maxlen: 48
2a0b:21c1:6025::/48 maxlen: 48
2a0b:21c1:6026::/48 maxlen: 48
2a0b:21c1:6027::/48 maxlen: 48
2a0b:21c1:6032::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:22:60:54:a0:10:1e:47:80:58:c4:2d:18:71:da:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jul 24 03:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2248f2ef7bbc14b2cfbdcc7b89478e9610c0f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:d3:d2:0f:c7:bd:54:96:99:58:7c:ae:28:
a0:f3:8b:eb:6a:9d:2c:b7:4d:b5:4a:5b:e6:a1:c5:
38:78:a4:dd:33:db:a3:e2:a6:9d:cb:f2:ab:74:35:
bd:93:48:9d:1a:bf:3c:04:92:22:fb:85:21:c2:83:
1f:7a:51:b7:9f:8f:22:c2:34:19:26:df:8d:82:b8:
f7:5b:00:2c:0a:cf:e1:dd:98:9a:6b:d7:8c:c6:5b:
69:9f:7b:80:59:87:0f:d9:9f:5f:27:41:5e:fa:14:
59:ee:c8:3d:51:8b:95:16:50:2f:9e:da:e6:d3:be:
94:a6:cc:1d:02:78:37:75:ba:2b:3a:6d:49:cc:43:
76:30:59:86:fd:a1:27:ee:3e:b0:55:8a:09:e1:8b:
8d:4f:31:6a:20:99:93:49:7f:af:45:73:6c:34:a6:
b2:9a:76:ec:b9:68:20:82:17:a1:0b:eb:6d:32:a1:
d0:ef:b2:0a:d6:b2:c0:b4:fb:be:e2:42:de:72:e7:
c3:1c:b7:ba:0d:37:63:7f:dc:d0:0e:cb:f0:25:62:
63:d8:df:8f:e1:8a:3b:fb:6c:72:34:18:3c:6d:59:
97:32:f4:b0:91:cf:3f:76:0a:2c:3e:e4:6f:9e:38:
9c:ee:2d:c0:96:64:7c:ea:3a:3d:c1:67:cd:e7:e0:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:48:F2:EF:7B:BC:14:B2:CF:BD:CC:7B:89:47:8E:96:10:C0:F0:91
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Ikjy73u8FLLPvcx7iUeOlhDA8JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:601d::-2a0b:21c1:6022:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:6024::/46
2a0b:21c1:6032::/48
Signature Algorithm: sha256WithRSAEncryption
13:1e:cb:7b:88:b6:ec:42:58:71:5d:45:4a:a5:bb:ec:d7:4d:
18:8b:86:af:25:10:41:9b:f7:4e:c7:dc:2c:96:8d:97:bf:73:
65:59:98:a2:2d:69:c7:1d:2f:6b:ca:cd:de:76:bf:a7:8c:ac:
85:12:bf:da:b6:8d:48:95:03:8b:1c:c6:81:3d:ce:46:3d:1a:
48:98:cd:f7:bd:0e:73:79:d9:6b:b4:3d:b1:ed:96:d5:d9:ed:
25:ef:20:f0:00:b4:1a:fb:5e:b4:54:e2:f7:7e:a3:0e:79:19:
cc:39:7c:23:f5:d9:48:28:d3:b7:bd:63:f5:26:29:e7:5e:bc:
51:09:19:ae:d0:b2:79:c0:c0:af:b4:0f:83:d2:64:17:da:70:
7c:a0:f3:27:0e:b0:d2:22:d2:ca:1a:a5:56:3d:02:11:f0:3f:
34:b0:d6:cd:f8:7f:80:56:22:fb:d1:b8:f2:a8:f8:bf:9a:18:
07:ab:f4:40:99:23:eb:a4:da:57:d6:5f:2c:97:1f:48:f7:6c:
3a:95:4f:3f:f6:99:c1:47:46:ae:62:bb:6b:e4:66:56:d8:2f:
7c:8c:16:9b:8f:b6:18:62:be:b4:0b:cb:3a:34:b4:98:71:bf:
37:05:9b:d0:89:cf:8f:ee:b8:7c:ba:c4:13:ab:f8:e4:64:61:
8a:cc:bc:ff
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAZ+SImBUoBAeR4BYxC0YcdpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjYwNzI0MDMxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjQ4ZjJlZjdiYmMxNGIyY2ZiZGNjN2I4OTQ3OGU5NjEwYzBmMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VfT0g/HvVSWmVh8riig84vrap0s
t021SlvmocU4eKTdM9uj4qady/KrdDW9k0idGr88BJIi+4UhwoMfelG3n48iwjQZ
Jt+Ngrj3WwAsCs/h3Ziaa9eMxltpn3uAWYcP2Z9fJ0Fe+hRZ7sg9UYuVFlAvntrm
076UpswdAng3dborOm1JzEN2MFmG/aEn7j6wVYoJ4YuNTzFqIJmTSX+vRXNsNKay
mnbsuWggghehC+ttMqHQ77IK1rLAtPu+4kLecufDHLe6DTdjf9zQDsvwJWJj2N+P
4Yo7+2xyNBg8bVmXMvSwkc8/dgosPuRvnjic7i3AlmR86jo9wWfN5+DJtwIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFCJI8u97vBSyz73Me4lHjpYQwPCRMB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvSWtqeTczdThGTExQdmN4N2lVZU9saERBOEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzBJBAIAAjBDAwcCKgshwWAM
MBIDBwAqCyHBYBMDBwAqCyHBYBowEgMHACoLIcFgHQMHACoLIcFgIgMHAioLIcFg
JAMHACoLIcFgMjANBgkqhkiG9w0BAQsFAAOCAQEAEx7Le4i27EJYcV1FSqW77NdN
GIuGryUQQZv3TsfcLJaNl79zZVmYoi1pxx0va8rN3na/p4yshRK/2raNSJUDixzG
gT3ORj0aSJjN970Oc3nZa7Q9se2W1dntJe8g8AC0GvtetFTi936jDnkZzDl8I/XZ
SCjTt71j9SYp5168UQkZrtCyecDAr7QPg9JkF9pwfKDzJw6w0iLSyhqlVj0CEfA/
NLDWzfh/gFYi+9G48qj4v5oYB6v0QJkj66TaV9ZfLJcfSPdsOpVPP/aZwUdGrmK7
a+RmVtgvfIwWm4+2GGK+tAvLOjS0mHG/NwWb0InPj+64fLrEE6v45GRhisy8/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:00 2026 by rpki-client