Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/fXi5Wrcm2fcLAwlzB8rd9u1HB1A.roa
File: fXi5Wrcm2fcLAwlzB8rd9u1HB1A.roa (raw, json)
Hash identifier: nKFY+hAxXbReuJhFsMlnah/EDnIkhStz7ge/1s2VIIo=
Subject key identifier: 7D:78:B9:5A:B7:26:D9:F7:0B:03:09:73:07:CA:DD:F6:ED:47:07:50
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0A1CCC86D3658E5B1E91DB9501E504A72
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/fXi5Wrcm2fcLAwlzB8rd9u1HB1A.roa
Signing time: Mon 14 Sep 2026 21:22:27 +0000
ROA not before: Mon 14 Sep 2026 21:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15626
IP address blocks: 5.34.182.0/24 maxlen: 24
5.34.183.0/24 maxlen: 24
82.118.17.0/24 maxlen: 24
193.238.152.0/23 maxlen: 23
217.12.192.0/23 maxlen: 23
217.12.195.0/24 maxlen: 24
217.12.196.0/23 maxlen: 23
217.12.198.0/24 maxlen: 24
217.12.199.0/24 maxlen: 24
217.12.205.0/24 maxlen: 24
217.12.210.0/24 maxlen: 24
217.12.211.0/24 maxlen: 24
217.12.212.0/23 maxlen: 23
217.12.214.0/24 maxlen: 24
217.12.216.0/23 maxlen: 23
217.12.221.0/24 maxlen: 24
217.12.222.0/24 maxlen: 24
217.12.223.0/24 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:1::/48 maxlen: 48
2a02:27a8:feed::/48 maxlen: 48
2a02:27ad::/32 maxlen: 32
2a05:9407::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:cc:c8:6d:36:58:e5:b1:e9:1d:b9:50:1e:50:4a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 14 21:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d78b95ab726d9f70b03097307caddf6ed470750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:88:09:e1:d8:82:be:28:c9:fa:f5:c2:65:
26:47:9a:c9:71:11:eb:b4:fc:54:f0:27:34:2b:06:
e0:51:f2:5d:be:f2:e9:ad:a1:f0:54:52:3a:9f:5a:
a4:11:37:13:48:bc:20:83:df:0b:5f:d4:ed:d8:79:
84:be:e1:2a:30:f5:00:fe:3a:3c:1b:45:8e:b0:b2:
90:b2:d6:61:b7:17:46:29:8d:30:0c:4f:df:17:29:
d4:f3:9f:3a:e6:8b:67:ee:c0:d2:9f:41:92:bb:dd:
22:41:ac:f3:c7:dc:e0:e0:98:f0:f8:15:fc:b1:19:
10:73:14:d9:6e:fc:df:53:07:d4:f1:67:7d:eb:15:
5e:a7:18:db:8d:57:03:da:a4:1e:b1:84:e1:1e:e1:
61:dd:dc:43:e9:61:de:ad:1d:01:41:ea:4e:ff:22:
27:28:91:28:82:33:6f:61:5d:15:4d:d5:9d:60:a6:
ba:e7:96:8f:44:60:df:62:3a:fb:6f:2a:eb:b3:62:
a7:20:23:ad:c3:32:d2:b0:f0:7d:0a:30:d2:81:30:
95:ad:7d:d9:7d:28:14:2f:0a:f5:c7:79:29:66:b4:
12:01:bc:2a:f7:84:ed:fc:5b:45:74:da:1a:d6:a9:
b6:98:e3:58:44:53:71:9d:64:4c:00:89:fa:c4:15:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:B9:5A:B7:26:D9:F7:0B:03:09:73:07:CA:DD:F6:ED:47:07:50
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/fXi5Wrcm2fcLAwlzB8rd9u1HB1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
82.118.17.0/24
193.238.152.0/23
217.12.192.0/23
217.12.195.0-217.12.199.255
217.12.205.0/24
217.12.210.0-217.12.214.255
217.12.216.0/23
217.12.221.0-217.12.223.255
IPv6:
2a02:27a8::/32
2a02:27ad::/32
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
80:90:1b:3d:95:a8:a9:ca:43:10:44:ea:a8:86:ad:69:75:c0:
95:8e:f2:cd:14:14:cb:3c:4c:3c:c9:d9:99:a2:20:43:ad:f1:
7b:83:01:18:d1:e6:b5:9a:f5:c2:4e:c1:76:b1:8f:3f:8b:2f:
ef:e2:b4:72:d7:1d:09:35:05:5d:e3:60:c0:a0:09:47:31:c2:
f4:93:dc:1a:bc:4a:ca:1c:1d:10:18:0a:e0:e7:f8:01:5e:83:
9d:34:f9:7e:dd:72:eb:22:be:83:dc:e0:da:37:ec:bb:c5:81:
fd:bf:f5:08:70:ac:0d:3d:c1:03:c8:04:14:93:f2:51:1f:76:
cc:d9:eb:8d:d6:f1:9b:55:94:93:c0:20:58:b3:b1:63:97:95:
99:75:7f:8c:d3:b0:0f:2a:c8:a4:27:eb:cc:27:1e:7c:b5:89:
27:e4:08:59:30:71:74:e2:9b:af:4c:a6:04:8b:64:7d:3b:4a:
0e:8a:38:c9:69:08:18:67:c7:d9:d4:af:7d:d1:fd:f1:5d:b3:
8a:fe:e1:f6:29:f1:9f:89:5e:8f:12:35:6b:47:0f:56:9d:b9:
46:52:91:45:ac:b2:fe:38:07:77:c4:7b:47:fc:0d:b2:75:05:
ae:18:eb:7f:03:64:65:62:98:4f:20:d4:17:6e:56:c9:94:b3:
53:07:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:18 2026 by rpki-client