Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5tuL2c8kPlBweViEHsRH2xPa53U.roa
File: 5tuL2c8kPlBweViEHsRH2xPa53U.roa (raw, json)
Hash identifier: 9F91akfvY6gKw5kD9GH/DWFflGmB8X0TLbaeaZsQk0g=
Subject key identifier: E6:DB:8B:D9:CF:24:3E:50:70:79:58:84:1E:C4:47:DB:13:DA:E7:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019CAE8BE6B60B05D9C26287F303E2DB80E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5tuL2c8kPlBweViEHsRH2xPa53U.roa
Signing time: Mon 02 Mar 2026 12:35:30 +0000
ROA not before: Mon 02 Mar 2026 12:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205175
IP address blocks: 45.81.36.0/24 maxlen: 32
45.91.195.0/24 maxlen: 32
87.121.220.0/24 maxlen: 24
2a00:1728:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:8b:e6:b6:0b:05:d9:c2:62:87:f3:03:e2:db:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 2 12:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6db8bd9cf243e50707958841ec447db13dae775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:ee:9f:ea:11:1f:60:60:98:03:7c:d4:0e:
51:15:ad:0c:4c:d1:db:d6:9e:ca:13:c1:9a:a5:04:
7a:67:b6:71:04:64:e3:a2:db:a6:0e:14:d1:09:7a:
4a:27:32:aa:3b:08:b1:f0:a6:28:23:50:e5:53:4a:
d8:b2:e2:95:5e:fe:b6:62:1c:de:59:57:b8:96:2b:
0e:06:96:77:03:1e:ac:ab:bf:9e:7f:ff:bc:b9:f2:
5a:bc:3d:c4:82:d5:3f:f1:e9:a5:e2:23:ae:b4:bb:
1d:20:3f:eb:de:e4:f2:99:d5:c8:3a:6a:c9:1b:a3:
f7:c8:33:7e:be:68:5d:df:59:5a:12:7e:1c:2b:66:
90:23:05:86:5f:5a:2a:3e:d3:9a:ba:97:a6:50:41:
65:d8:c2:d9:a0:cb:f4:3b:d2:52:83:3f:fd:14:8e:
04:a3:f6:41:aa:22:50:98:d0:32:6b:d5:f0:98:4d:
80:9f:f9:60:f7:94:ce:54:c6:bd:33:b6:c0:b7:ca:
8f:63:66:a5:7d:58:4c:37:f9:3e:39:88:dd:0d:33:
84:ee:e8:59:21:41:77:74:7e:92:f9:41:1c:a1:1e:
af:97:dd:32:f3:4d:f2:f3:49:49:83:b4:df:ba:51:
cc:0e:0e:0e:52:3a:50:86:36:07:e3:fa:aa:6d:b4:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:8B:D9:CF:24:3E:50:70:79:58:84:1E:C4:47:DB:13:DA:E7:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5tuL2c8kPlBweViEHsRH2xPa53U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
45.91.195.0/24
87.121.220.0/24
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
a3:7b:0b:16:0e:31:60:eb:73:e6:57:9a:0f:01:8c:e6:73:2c:
46:3f:44:29:e7:3d:a9:69:dd:5e:55:ae:45:c4:d3:4d:2a:b3:
71:e6:ad:24:f8:a3:21:c4:6d:68:4e:1f:74:2a:03:f7:95:e2:
19:22:15:de:98:23:b4:d0:9e:f1:52:e6:ee:88:61:0f:22:83:
68:0d:d3:9f:82:4b:db:2e:7f:9b:26:da:5b:7b:06:06:1a:13:
0e:9f:ba:82:d0:31:21:4d:d7:ca:1f:4e:4a:30:8c:dc:91:a4:
0d:30:30:97:83:24:40:33:1c:d2:9d:7f:05:2c:0b:f2:99:1d:
73:56:7b:ab:27:cd:26:9d:a1:03:3e:2f:8f:77:e7:21:de:2f:
7b:a7:c6:7f:7e:25:fe:f9:5a:43:c5:a8:a2:c4:67:7b:ed:45:
ea:95:de:d2:e2:3a:82:76:fe:a2:d2:81:70:fa:41:d0:67:85:
59:40:4c:ae:b7:98:1c:b6:25:9a:61:53:4f:62:47:71:16:91:
cc:ad:9b:86:d0:6e:0f:9b:d4:81:88:60:33:f7:b5:27:eb:49:
c3:c1:c0:b4:62:5b:4f:2b:12:63:90:d6:cc:3d:57:b6:e8:96:
4d:7c:93:59:a7:6b:32:8c:8b:f4:95:2f:b4:00:7d:b6:c4:0f:
7b:33:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:58 2026 by rpki-client