Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/1-eeV1-eMQjgzw2lZse1zBQ9OIlo.roa
File: 1-eeV1-eMQjgzw2lZse1zBQ9OIlo.roa (raw, json)
Hash identifier: wU9jmzYuemotL2/QhdqvXXvgoy6IuuIIkniyuDAqXIA=
Subject key identifier: F9:E7:95:D7:E7:8C:42:38:33:C3:69:59:B1:ED:73:05:0F:4E:22:5A
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 01A0E7A48650EDC04B4ADA2893FE0ACEBA3F
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/1-eeV1-eMQjgzw2lZse1zBQ9OIlo.roa
Signing time: Mon 28 Sep 2026 10:51:54 +0000
ROA not before: Mon 28 Sep 2026 10:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 5.2.64.0/20 maxlen: 20
5.2.64.0/24 maxlen: 24
5.2.65.0/24 maxlen: 24
5.2.66.0/24 maxlen: 24
5.2.67.0/24 maxlen: 24
5.2.68.0/24 maxlen: 24
5.2.69.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
5.2.71.0/24 maxlen: 24
5.2.72.0/24 maxlen: 24
5.2.73.0/24 maxlen: 24
5.2.74.0/24 maxlen: 24
5.2.75.0/24 maxlen: 24
5.2.76.0/24 maxlen: 24
5.2.77.0/24 maxlen: 24
5.2.78.0/24 maxlen: 24
5.2.79.0/24 maxlen: 24
5.255.96.0/19 maxlen: 19
5.255.96.0/24 maxlen: 24
5.255.97.0/24 maxlen: 24
5.255.98.0/24 maxlen: 24
5.255.99.0/24 maxlen: 24
5.255.100.0/24 maxlen: 24
5.255.101.0/24 maxlen: 24
5.255.102.0/24 maxlen: 24
5.255.103.0/24 maxlen: 24
5.255.104.0/24 maxlen: 24
5.255.105.0/24 maxlen: 24
5.255.106.0/24 maxlen: 24
5.255.107.0/24 maxlen: 24
5.255.108.0/24 maxlen: 24
5.255.109.0/24 maxlen: 24
5.255.110.0/24 maxlen: 24
5.255.111.0/24 maxlen: 24
5.255.112.0/24 maxlen: 24
5.255.113.0/24 maxlen: 24
5.255.114.0/24 maxlen: 24
5.255.115.0/24 maxlen: 24
5.255.116.0/24 maxlen: 24
5.255.117.0/24 maxlen: 24
5.255.118.0/24 maxlen: 24
5.255.119.0/24 maxlen: 24
5.255.120.0/24 maxlen: 24
5.255.121.0/24 maxlen: 24
5.255.122.0/24 maxlen: 24
5.255.123.0/24 maxlen: 24
5.255.124.0/24 maxlen: 24
5.255.125.0/24 maxlen: 24
5.255.126.0/24 maxlen: 24
5.255.127.0/24 maxlen: 24
88.214.28.0/24 maxlen: 24
88.214.29.0/24 maxlen: 24
88.214.30.0/24 maxlen: 24
88.214.31.0/24 maxlen: 24
103.251.164.0/22 maxlen: 22
103.251.164.0/24 maxlen: 24
103.251.165.0/24 maxlen: 24
103.251.166.0/24 maxlen: 24
103.251.167.0/24 maxlen: 24
150.129.8.0/22 maxlen: 22
150.129.8.0/24 maxlen: 24
150.129.9.0/24 maxlen: 24
150.129.10.0/24 maxlen: 24
185.31.172.0/22 maxlen: 24
185.31.172.0/24 maxlen: 24
185.31.173.0/24 maxlen: 24
185.31.174.0/24 maxlen: 24
185.31.175.0/24 maxlen: 24
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
192.76.163.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a04:52c0::/32 maxlen: 32
2a04:52c0:1::/48 maxlen: 64
2a04:52c0:101::/48 maxlen: 64
2a04:52c0:102::/48 maxlen: 64
2a04:52c0:103::/48 maxlen: 64
2a04:52c0:104::/48 maxlen: 64
2a04:52c0:105::/48 maxlen: 64
2a04:52c0:106::/48 maxlen: 64
2a04:52c0:107::/48 maxlen: 64
2a04:52c0:108::/48 maxlen: 64
2a04:52c0:109::/48 maxlen: 64
2a04:52c0:110::/48 maxlen: 64
2a04:52c0:111::/48 maxlen: 64
2a04:52c0:112::/48 maxlen: 64
2a04:52c0:113::/48 maxlen: 64
2a04:52c0:114::/48 maxlen: 64
2a04:52c0:115::/48 maxlen: 64
2a04:52c0:116::/48 maxlen: 64
2a04:52c0:117::/48 maxlen: 64
2a04:52c0:118::/48 maxlen: 64
2a04:52c0:119::/48 maxlen: 64
2a04:52c0:120::/48 maxlen: 64
2a04:52c0:121::/48 maxlen: 64
2a04:52c0:122::/48 maxlen: 64
2a04:52c0:123::/48 maxlen: 64
2a04:52c0:124::/48 maxlen: 64
2a04:52c0:125::/48 maxlen: 64
2a04:52c0:126::/48 maxlen: 64
2a04:52c0:127::/48 maxlen: 64
2a04:52c0:128::/48 maxlen: 64
2a04:52c0:129::/48 maxlen: 64
2a04:52c0:130::/48 maxlen: 64
2a04:52c0:131::/48 maxlen: 64
2a04:52c0:132::/48 maxlen: 64
2a04:52c0:133::/48 maxlen: 64
2a04:52c0:134::/48 maxlen: 64
2a04:52c0:135::/48 maxlen: 64
2a04:52c0:136::/48 maxlen: 64
2a04:52c0:138::/48 maxlen: 64
2a04:52c0:139::/48 maxlen: 64
2a04:52c0:140::/48 maxlen: 64
2a04:52c0:141::/48 maxlen: 64
2a04:52c0:142::/48 maxlen: 64
2a04:52c0:1000::/48 maxlen: 64
2a04:52c0:1674::/48 maxlen: 64
2a04:52c0:1a00::/48 maxlen: 64
2a04:52c0:2000::/36 maxlen: 64
2a04:52c0:5001::/48 maxlen: 64
2a04:52c0:6000::/36 maxlen: 64
2a04:52c0:7000::/36 maxlen: 64
2a04:52c0:9000::/36 maxlen: 64
2a0f:6bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:a4:86:50:ed:c0:4b:4a:da:28:93:fe:0a:ce:ba:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Sep 28 10:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9e795d7e78c423833c36959b1ed73050f4e225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e5:b4:d2:9e:cd:f9:7b:e6:fb:0d:7b:59:c5:
01:35:fd:f6:47:af:01:00:2e:55:9d:75:60:27:81:
d3:17:b9:3d:cb:b0:52:96:53:4f:6d:ef:9b:2b:73:
37:4c:08:98:fe:18:3f:1e:8a:c7:98:11:9f:d6:7c:
f9:49:9c:58:08:cb:90:c2:6c:4a:d2:dd:03:ab:a3:
f9:80:c2:b1:7d:e4:95:f3:c8:f7:8b:5b:26:a7:ef:
61:83:d0:4e:2f:90:02:4c:14:85:99:99:3d:3c:c9:
e8:9f:65:60:cd:58:af:2a:a2:94:48:ac:1d:f8:58:
d2:59:9f:92:3e:0a:d0:83:d4:44:25:00:15:20:d4:
71:bf:d2:31:13:cb:56:06:85:d6:0e:cb:60:2d:6d:
e2:8c:18:19:8b:04:c7:ca:71:0b:6b:20:a7:ea:92:
a8:13:ef:96:72:85:f6:f0:19:65:66:3b:67:00:d4:
8f:b3:6a:29:c3:52:f2:4b:0c:39:af:58:4c:94:a0:
2b:46:6e:62:c8:50:63:49:ec:55:d2:af:95:85:f4:
ba:82:6c:ea:15:98:aa:53:d4:0a:ab:fc:50:ef:7e:
93:a1:a1:c1:9b:0b:2a:62:ae:45:b3:35:b2:4b:55:
01:88:ab:21:e4:26:2f:4b:19:09:e4:4c:62:a4:3c:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:95:D7:E7:8C:42:38:33:C3:69:59:B1:ED:73:05:0F:4E:22:5A
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/1-eeV1-eMQjgzw2lZse1zBQ9OIlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
88.214.28.0/22
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:8c:b1:71:ea:a0:34:68:47:5a:09:cc:69:b9:9c:f0:ed:58:
3b:fd:af:19:c8:88:4f:6c:b9:84:f6:b6:51:44:ba:39:d7:cf:
21:60:ef:0b:61:37:fa:f1:ee:99:e5:a7:b4:f5:7e:01:8d:88:
02:60:fe:2f:3c:6d:19:8a:18:62:a1:d5:34:0a:33:97:c7:4b:
fd:15:38:c5:e8:c7:81:a2:cf:fc:d7:bf:8e:4c:17:ac:b9:7d:
f9:51:a0:91:9b:43:64:db:7f:5a:ee:6b:6a:89:bb:06:ed:e0:
96:c7:a8:4c:2a:02:fb:8a:da:d1:f9:cf:92:62:e6:14:58:77:
be:4e:91:cc:a4:4e:62:c7:8c:97:27:ce:8b:56:da:9e:ec:a9:
aa:e9:7b:cb:92:7a:66:a8:5f:d0:60:7c:50:ad:36:d9:b9:5b:
7a:4f:4a:fd:ea:cb:18:37:e5:d1:4b:74:af:e1:80:c4:6f:e6:
d6:45:93:1b:69:6a:c9:26:ee:83:d9:cb:a2:d6:a0:92:49:8d:
5e:49:fd:aa:fd:c7:71:14:b5:7a:9b:12:96:dc:f3:fd:69:98:
d8:f2:26:40:cc:bf:5d:08:f0:af:ec:5d:e9:da:05:e0:65:46:
8d:9c:c9:1d:e4:41:84:02:fc:c5:a1:86:46:4d:52:7d:de:f2:
91:1c:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:43:41 2026 by rpki-client