Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/rB-GRWPvn3oAjav-7hoWPrGNxdU.roa
File: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (raw, json)
Hash identifier: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=
Subject key identifier: AC:1F:86:45:63:EF:9F:7A:00:8D:AB:FE:EE:1A:16:3E:B1:8D:C5:D5
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019E409DFF0FB4C7A046939FEEA832943D8D
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/rB-GRWPvn3oAjav-7hoWPrGNxdU.roa
Signing time: Tue 19 May 2026 14:22:36 +0000
ROA not before: Tue 19 May 2026 14:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41564
IP address blocks: 5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
5.157.8.0/24 maxlen: 24
5.157.13.0/24 maxlen: 24
5.157.14.0/24 maxlen: 24
5.157.17.0/24 maxlen: 24
5.157.22.0/24 maxlen: 24
5.157.27.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.42.0/24 maxlen: 24
5.157.45.0/24 maxlen: 24
5.157.56.0/24 maxlen: 24
5.157.58.0/24 maxlen: 24
5.157.59.0/24 maxlen: 24
5.157.60.0/24 maxlen: 24
5.157.61.0/24 maxlen: 24
5.157.62.0/24 maxlen: 24
5.157.63.0/24 maxlen: 24
23.92.127.0/24 maxlen: 24
104.160.2.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
151.237.186.0/24 maxlen: 24
192.40.88.0/24 maxlen: 24
2a02:5740::/48 maxlen: 48
2a02:5740:1::/48 maxlen: 48
2a02:5740:11::/48 maxlen: 48
2a02:5740:18::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:22::/48 maxlen: 48
2a02:5740:180::/48 maxlen: 48
2a02:5741:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:9d:ff:0f:b4:c7:a0:46:93:9f:ee:a8:32:94:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: May 19 14:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac1f864563ef9f7a008dabfeee1a163eb18dc5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:4c:cd:1d:1f:35:ef:aa:af:bd:c8:03:ba:
32:4e:49:1e:12:ec:5c:8e:f1:79:92:c5:f7:2e:71:
af:b5:b2:24:37:57:9e:fb:12:11:e7:22:c0:9a:19:
cc:b7:bf:d1:34:84:96:f9:e9:27:72:89:07:50:fd:
d1:01:30:aa:f4:40:93:b7:24:5d:11:25:2c:a5:a9:
a0:c2:90:19:03:12:4e:13:e3:b5:3f:26:10:78:4f:
c6:2b:8a:8e:3f:20:0f:88:51:a8:bc:1d:10:91:da:
a4:51:39:55:0e:bb:87:12:03:7b:cf:e6:72:04:3b:
10:93:f2:59:a0:67:c3:e8:d8:0d:09:a7:00:58:56:
55:d9:2f:24:e6:c0:6d:07:d8:fe:1c:48:fb:e5:bf:
dd:81:41:f4:20:84:de:b2:8d:a2:2d:b9:71:72:08:
56:5c:24:0a:e8:9c:15:ed:47:63:4d:4d:b4:29:2c:
24:55:f5:ef:0c:ec:a2:c1:2f:f5:53:79:1f:b9:a6:
9b:ea:4a:4f:9f:ac:2f:f3:cc:2d:3e:fd:bf:e2:1f:
26:b6:97:17:09:c6:31:ce:52:1f:ec:a0:f0:65:fc:
06:78:b7:cb:af:b8:76:2c:bf:f6:18:4f:a7:8a:d0:
91:3d:97:97:4e:2d:9b:e0:6b:43:2a:ff:ab:eb:cf:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:86:45:63:EF:9F:7A:00:8D:AB:FE:EE:1A:16:3E:B1:8D:C5:D5
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/rB-GRWPvn3oAjav-7hoWPrGNxdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.8.0/24
5.157.13.0-5.157.14.255
5.157.17.0/24
5.157.22.0/24
5.157.27.0/24
5.157.41.0-5.157.42.255
5.157.45.0/24
5.157.56.0/24
5.157.58.0-5.157.63.255
23.92.127.0/24
104.160.2.0/24
104.160.4.0/24
104.160.6.0/24
104.160.10.0/24
107.150.73.0/24
151.237.186.0/24
192.40.88.0/24
IPv6:
2a02:5740::/47
2a02:5740:11::/48
2a02:5740:18::/48
2a02:5740:21::-2a02:5740:22:ffff:ffff:ffff:ffff:ffff
2a02:5740:180::/48
2a02:5741:6::/48
Signature Algorithm: sha256WithRSAEncryption
8b:0b:c1:fd:4d:09:43:65:06:00:96:37:6e:65:e8:04:cd:2e:
ad:e5:93:30:c4:31:19:f2:04:5b:32:3f:d4:7a:52:de:07:14:
24:d0:3e:a8:68:85:51:39:c0:6b:d9:38:5b:f4:b7:35:fc:8d:
7b:3b:80:3c:3e:19:4a:41:a6:21:4f:0f:cc:69:43:3c:f5:25:
61:f0:14:54:17:cb:86:07:59:b8:a0:00:59:83:49:fa:ab:31:
b9:d0:c8:54:f4:1a:79:93:fe:fb:ca:7f:dc:62:ff:fb:7d:ed:
91:b5:77:0a:3e:c8:7f:81:d5:71:56:1e:b3:c6:e8:fd:32:47:
8a:e1:b0:87:57:03:d0:e1:b9:48:07:d0:2c:fe:04:64:eb:38:
8b:68:83:3a:1a:6e:fa:5e:a3:2f:79:92:15:b5:5f:dd:ca:5b:
f4:16:10:4f:fc:20:77:ad:25:a6:67:67:d6:8d:5b:7a:ec:c4:
f6:58:29:1d:19:fd:69:38:2c:4b:7d:fe:30:35:0e:93:c9:8f:
b9:36:63:3a:0b:e6:fa:27:43:3d:b0:04:2f:04:24:b4:ce:14:
fa:84:8a:4a:f5:fe:39:3f:80:bd:92:60:33:f9:0f:d8:c9:94:
8c:c8:f7:24:56:f4:ed:4b:b0:02:1d:2f:25:1b:85:cb:a0:9f:
58:b9:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:17 2026 by rpki-client