Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/72DmjSMw_29l_MO3IEi6OHdN1xU.roa
File: 72DmjSMw_29l_MO3IEi6OHdN1xU.roa (raw, json)
Hash identifier: 8Q2q436xMShLzuSw0XiF5YubpeOEkzT16ilKpEr4WNs=
Subject key identifier: EF:60:E6:8D:23:30:FF:6F:65:FC:C3:B7:20:48:BA:38:77:4D:D7:15
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 01A02661F0A97E23006CBBC708AF1797BF39
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/72DmjSMw_29l_MO3IEi6OHdN1xU.roa
Signing time: Fri 21 Aug 2026 22:12:27 +0000
ROA not before: Fri 21 Aug 2026 22:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210574
IP address blocks: 5.250.253.0/24 maxlen: 24
46.36.201.0/24 maxlen: 24
2a11:5dc0:1::/48 maxlen: 48
2a11:5dc0:2::/48 maxlen: 48
2a11:5dc0:3::/48 maxlen: 48
2a11:5dc0:4::/48 maxlen: 48
2a11:5dc0:5::/48 maxlen: 48
2a11:5dc0:6::/48 maxlen: 48
2a11:5dc0:7::/48 maxlen: 48
2a11:5dc0:8::/48 maxlen: 48
2a11:5dc0:9::/48 maxlen: 48
2a11:5dc0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:61:f0:a9:7e:23:00:6c:bb:c7:08:af:17:97:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Aug 21 22:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef60e68d2330ff6f65fcc3b72048ba38774dd715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:31:0f:28:ca:0d:b5:af:cb:78:04:f3:90:
a7:74:ed:b1:f2:f7:39:6b:1b:82:9a:33:1c:59:24:
29:de:2b:26:b2:cc:f5:dd:37:14:81:e2:70:d5:e0:
0e:26:f8:f8:25:64:3a:df:c3:09:d7:9e:ca:40:89:
e3:eb:95:c4:04:40:74:a4:47:63:b4:95:a2:c2:b5:
2f:f0:15:e1:d6:18:e9:08:4a:64:94:cc:cc:a8:94:
ff:d4:2c:87:4b:a8:b8:8d:60:92:54:25:e9:0e:b8:
cf:71:20:ac:b7:07:b9:f6:56:5b:7d:26:10:52:22:
b4:74:28:5e:00:38:e5:66:87:9f:58:8a:69:97:2c:
d5:15:99:de:65:cf:98:11:94:6f:05:dd:47:d5:02:
e9:d7:2b:e0:97:07:d1:2f:8b:92:62:74:bc:52:61:
db:36:17:f8:ee:61:5c:86:53:8e:33:fb:9b:cc:0f:
72:72:d8:6d:66:f9:61:bc:a5:d9:d2:90:11:9b:61:
d1:51:32:69:36:26:7c:b7:bb:6d:de:28:c1:87:e0:
0c:f7:c8:2f:f9:d5:1c:08:0f:05:42:23:4c:f1:34:
03:9c:9a:c8:b1:63:1d:32:85:ee:83:cc:76:9a:d1:
ad:0c:f5:cc:91:ef:0d:df:04:6f:4a:e5:d6:c2:d8:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:E6:8D:23:30:FF:6F:65:FC:C3:B7:20:48:BA:38:77:4D:D7:15
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/72DmjSMw_29l_MO3IEi6OHdN1xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
46.36.201.0/24
IPv6:
2a11:5dc0:1::-2a11:5dc0:9:ffff:ffff:ffff:ffff:ffff
2a11:5dc0:10::/48
Signature Algorithm: sha256WithRSAEncryption
c8:04:6a:8e:1e:38:2a:aa:87:db:e3:32:a4:aa:b0:f7:ab:38:
62:84:11:16:08:96:2a:21:41:2a:e0:54:2a:18:fe:4b:e0:cc:
ba:dc:d4:b0:65:37:63:5e:2d:a8:63:f8:87:6e:4f:96:f6:bf:
35:ac:c6:8a:cc:d3:78:40:0a:53:8f:5f:df:a5:23:e6:3b:5c:
1c:9d:c3:ac:4a:a6:29:06:36:bb:16:df:4c:d9:15:88:78:3d:
f6:43:7d:09:d8:6c:4d:b4:57:d0:70:4b:63:f9:b3:c3:78:df:
ab:b3:5e:f3:82:6b:c9:ae:6e:d6:f9:30:70:da:7a:2d:f4:7f:
87:7a:36:79:10:03:ff:cb:07:89:ee:77:f5:e0:6a:38:9e:43:
5e:27:68:40:29:c0:1a:70:01:26:1c:de:ca:4f:5b:5e:11:20:
0c:28:78:6a:e0:b4:80:52:cd:f7:2e:f9:ac:da:b2:1c:ea:5b:
27:0f:85:17:3f:e4:47:da:e5:4a:5f:0e:89:b9:b3:c1:bd:59:
45:69:3e:9a:15:51:8a:ad:2e:99:0a:1d:d1:76:27:33:ad:08:
6f:d0:5e:37:8e:b9:21:79:19:3d:a6:e0:1b:96:e9:36:15:d5:
3c:ae:18:c9:ff:91:05:20:65:16:bc:c3:95:2b:7b:62:4d:eb:
44:31:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:53 2026 by rpki-client