Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/5Edac9IUnILOtTlQImHIQXzm3FY.roa
File: 5Edac9IUnILOtTlQImHIQXzm3FY.roa (raw, json)
Hash identifier: 0g3UdCMMmFcn185Anm2pj6+F5hE2ZCb92bl/1tjcAgw=
Subject key identifier: E4:47:5A:73:D2:14:9C:82:CE:B5:39:50:22:61:C8:41:7C:E6:DC:56
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 01A06194DA8A48F7F7D9A098FD45D0EEE23F
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/5Edac9IUnILOtTlQImHIQXzm3FY.roa
Signing time: Wed 02 Sep 2026 10:05:40 +0000
ROA not before: Wed 02 Sep 2026 10:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 24
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.8.28.0/22 maxlen: 24
45.8.28.0/24 maxlen: 24
45.9.108.0/22 maxlen: 24
45.10.208.0/22 maxlen: 24
45.13.160.0/22 maxlen: 24
45.66.188.0/22 maxlen: 24
45.80.112.0/22 maxlen: 24
45.87.228.0/22 maxlen: 24
45.93.64.0/22 maxlen: 24
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.131.156.0/22 maxlen: 24
45.131.156.0/24 maxlen: 24
45.131.157.0/24 maxlen: 24
45.131.158.0/24 maxlen: 24
45.131.159.0/24 maxlen: 24
45.142.76.0/22 maxlen: 24
45.142.77.0/24 maxlen: 24
45.142.78.0/24 maxlen: 24
45.142.79.0/24 maxlen: 24
45.147.212.0/22 maxlen: 24
45.147.213.0/24 maxlen: 24
45.147.214.0/24 maxlen: 24
45.147.215.0/24 maxlen: 24
45.149.68.0/22 maxlen: 24
45.156.168.0/22 maxlen: 24
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
45.156.216.0/22 maxlen: 24
45.158.220.0/22 maxlen: 24
45.158.221.0/24 maxlen: 24
45.158.223.0/24 maxlen: 24
62.192.188.0/22 maxlen: 24
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 24
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
85.208.56.0/22 maxlen: 24
85.208.56.0/24 maxlen: 24
85.208.57.0/24 maxlen: 24
85.208.58.0/24 maxlen: 24
85.208.59.0/24 maxlen: 24
92.118.144.0/22 maxlen: 24
92.118.144.0/24 maxlen: 24
92.118.145.0/24 maxlen: 24
92.118.146.0/24 maxlen: 24
92.118.147.0/24 maxlen: 24
185.51.164.0/22 maxlen: 24
185.51.164.0/24 maxlen: 24
185.51.167.0/24 maxlen: 24
186.240.0.0/17 maxlen: 24
186.240.0.0/19 maxlen: 24
186.240.32.0/19 maxlen: 24
186.240.64.0/19 maxlen: 24
186.240.96.0/19 maxlen: 24
186.241.192.0/18 maxlen: 24
186.241.192.0/19 maxlen: 24
186.241.224.0/19 maxlen: 24
186.243.64.0/18 maxlen: 24
186.243.64.0/19 maxlen: 24
186.243.96.0/19 maxlen: 24
193.42.15.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.135.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
193.108.46.0/23 maxlen: 24
193.108.96.0/23 maxlen: 24
193.168.4.0/23 maxlen: 24
193.168.4.0/24 maxlen: 24
194.146.84.0/22 maxlen: 24
194.146.84.0/24 maxlen: 24
194.146.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:94:da:8a:48:f7:f7:d9:a0:98:fd:45:d0:ee:e2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Sep 2 10:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4475a73d2149c82ceb539502261c8417ce6dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:be:31:f7:a3:37:c8:b9:6b:6d:52:bd:15:
64:a3:0b:c7:9c:45:20:30:1e:e6:71:33:37:7e:dc:
46:0d:61:7d:9b:88:e2:1b:6f:70:3c:7e:2a:ec:08:
47:ac:4e:e4:46:c2:c9:e5:57:12:a9:de:05:ee:12:
30:af:a9:2d:18:a3:4f:5a:35:0d:c1:cc:d5:d3:2c:
30:d9:6b:cf:20:1d:36:08:7c:12:1a:13:b4:30:c3:
12:69:4f:d0:b2:ac:4e:74:8f:31:f6:bf:c6:52:5c:
2a:c2:64:56:ce:de:ea:cd:0e:28:f2:a9:8f:42:20:
f8:95:b8:1a:3d:da:73:49:a9:64:13:f4:c1:79:dd:
f2:95:5c:d7:96:15:d9:8b:59:bf:f3:d8:bf:e0:14:
b2:a6:e7:8f:40:2b:7c:08:6d:d4:6a:12:c3:79:f5:
5d:ec:de:49:12:75:c8:04:eb:33:ec:50:71:ed:bb:
d3:85:07:ed:5a:bb:99:10:65:d9:8a:12:60:42:c3:
51:58:2f:04:a5:8a:20:15:63:9c:90:b9:cc:ae:95:
1f:c4:bf:83:4f:44:1d:30:d3:68:3a:d1:5c:fe:a4:
87:77:c8:6f:6d:a8:e2:1b:bf:fa:d0:40:b1:83:ec:
61:f5:28:ab:4a:2a:78:49:52:cc:86:e9:cf:43:74:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:5A:73:D2:14:9C:82:CE:B5:39:50:22:61:C8:41:7C:E6:DC:56
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/5Edac9IUnILOtTlQImHIQXzm3FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.8.28.0/22
45.9.108.0/22
45.10.208.0/22
45.13.160.0/22
45.66.188.0/22
45.80.112.0/22
45.87.228.0/22
45.93.64.0/22
45.131.156.0/22
45.142.76.0/22
45.147.212.0/22
45.149.68.0/22
45.156.168.0/22
45.156.216.0/22
45.158.220.0/22
62.192.188.0/22
83.150.224.0/22
85.208.56.0/22
92.118.144.0/22
185.51.164.0/22
186.240.0.0/17
186.241.192.0/18
186.243.64.0/18
193.42.15.0/24
193.42.132.0/24
193.42.135.0/24
193.42.149.0/24
193.108.46.0/23
193.108.96.0/23
193.168.4.0/23
194.146.84.0/22
Signature Algorithm: sha256WithRSAEncryption
05:48:16:3f:10:2c:6c:f2:e5:9e:55:b7:ea:9a:2a:eb:20:26:
2b:95:3a:01:98:1b:80:58:7e:39:dd:ff:61:5b:0f:5a:5e:f4:
a8:81:ec:23:46:b6:b6:5c:e4:7a:fc:df:4a:eb:c4:46:c2:78:
13:64:a5:b0:10:f3:78:6a:c0:81:b7:12:b0:80:83:a2:f0:06:
f5:90:f6:a6:22:3e:e7:a7:7a:70:bd:80:ac:f8:4f:a0:59:0a:
10:0c:37:5a:bd:a9:cf:29:d4:89:71:ba:e2:8a:68:92:5f:95:
d3:df:a5:68:1a:00:22:8c:aa:c1:3a:3f:41:03:e5:b8:ff:69:
8d:cd:eb:62:d0:27:98:3a:0d:e3:1d:1a:b4:d2:dc:04:1d:4f:
94:30:43:87:60:7f:4e:77:5e:85:3a:4d:50:83:e9:0b:d1:0a:
14:dd:a3:a6:06:21:99:81:63:13:5a:75:b3:34:88:a2:c9:26:
1e:69:f4:c9:c3:c6:df:92:ed:e9:52:da:26:a6:0b:e0:ea:0d:
f5:b5:72:cd:4a:c7:81:35:84:fb:61:37:0b:06:d0:d3:73:81:
39:cb:9a:1a:e4:46:14:1c:d2:98:d1:bf:15:00:07:1f:21:83:
51:91:20:ec:52:ce:e1:bd:b4:b0:cb:5f:d8:7c:73:da:fb:98:
34:60:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:03:47 2026 by rpki-client