Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/x35bCF8o2frE0yVudoR1l5CD4FU.roa
File: x35bCF8o2frE0yVudoR1l5CD4FU.roa (raw, json)
Hash identifier: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=
Subject key identifier: C7:7E:5B:08:5F:28:D9:FA:C4:D3:25:6E:76:84:75:97:90:83:E0:55
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019D9AA99E7651927C3B30EFE46D1087444E
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/x35bCF8o2frE0yVudoR1l5CD4FU.roa
Signing time: Fri 17 Apr 2026 08:58:20 +0000
ROA not before: Fri 17 Apr 2026 08:58:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44814
IP address blocks: 46.253.8.0/24 maxlen: 24
46.253.10.0/24 maxlen: 24
46.253.15.0/24 maxlen: 24
93.94.136.0/24 maxlen: 24
93.94.137.0/24 maxlen: 24
93.94.138.0/24 maxlen: 24
93.94.141.0/24 maxlen: 24
93.94.143.0/24 maxlen: 24
95.169.208.0/20 maxlen: 20
95.169.213.0/24 maxlen: 24
95.169.218.0/24 maxlen: 24
95.169.219.0/24 maxlen: 24
95.169.222.0/24 maxlen: 24
185.7.217.0/24 maxlen: 24
2a01:4a40::/29 maxlen: 29
2a01:4a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:a9:9e:76:51:92:7c:3b:30:ef:e4:6d:10:87:44:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Apr 17 08:58:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c77e5b085f28d9fac4d3256e768475979083e055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:9b:a3:e7:57:c2:e4:da:44:16:d2:f3:42:
bd:05:96:82:43:ce:64:47:f4:cb:5a:9c:cf:5f:8e:
b3:5a:c5:93:8a:9e:9e:8d:1e:1e:d5:35:9d:45:68:
04:42:63:51:55:d0:81:20:bb:a2:8c:93:09:a1:93:
87:02:d5:c9:46:ad:84:85:da:6f:b1:3c:54:bb:ca:
fb:8f:54:af:87:4c:73:da:c3:14:c7:48:dd:c5:25:
6d:f3:cb:25:3f:ee:2e:67:ee:89:14:dd:de:e8:65:
97:4d:fa:13:db:eb:56:79:8c:fa:3d:26:9a:13:41:
fb:24:11:08:7c:44:cf:e4:8f:a2:31:85:c2:77:60:
17:0c:c2:75:56:7c:2f:64:7c:ca:e3:f0:7e:63:89:
5c:d4:0c:5e:cd:03:8c:af:c7:94:41:6b:d3:5f:c8:
15:11:fb:91:c2:00:d8:3b:31:27:28:40:0d:60:72:
83:96:42:1d:b6:98:eb:0a:a0:05:7f:b1:60:82:3a:
cf:b3:cb:d7:e5:5c:47:d5:c6:83:72:8a:95:e9:10:
fe:80:67:a6:f8:74:cc:c6:11:5f:1a:bd:c0:9c:f0:
18:2e:50:68:cb:de:0e:c0:30:c5:b9:31:29:b8:b0:
4a:d6:96:e2:b3:81:c7:a9:79:a4:d5:7e:6e:25:7e:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:5B:08:5F:28:D9:FA:C4:D3:25:6E:76:84:75:97:90:83:E0:55
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/x35bCF8o2frE0yVudoR1l5CD4FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.8.0/24
46.253.10.0/24
46.253.15.0/24
93.94.136.0-93.94.138.255
93.94.141.0/24
93.94.143.0/24
95.169.208.0/20
185.7.217.0/24
IPv6:
2a01:4a40::/29
Signature Algorithm: sha256WithRSAEncryption
31:bc:70:16:31:93:36:fc:4c:31:b9:0d:3f:68:c4:d2:46:56:
8f:29:1b:75:1f:8d:51:da:f8:91:84:c6:8e:75:58:da:70:94:
a0:cd:69:8a:75:74:21:fc:9b:c9:22:17:a6:dd:ef:8a:bc:e0:
21:2e:a9:98:a8:ba:34:51:76:62:f9:51:14:18:2e:81:6f:8e:
d4:db:b5:80:07:7d:79:4e:70:dd:2d:c5:f8:d9:56:08:10:2e:
fd:ed:72:db:7d:ab:17:67:9a:6c:43:84:ae:47:fa:b2:c4:1d:
03:70:77:83:36:c2:48:e0:32:ae:ad:17:cf:15:6b:43:33:8f:
52:34:25:ac:c2:4e:d9:5d:76:77:7f:6a:3f:4d:01:3a:90:3b:
a0:4b:05:60:c4:36:58:7b:4f:e6:5f:b0:c9:bd:12:d3:7a:5a:
3e:32:29:58:4b:13:5c:c7:f5:fe:b2:2d:bc:27:90:0d:ad:df:
ea:50:99:0e:f8:02:1d:e7:cd:77:75:45:24:a4:fe:27:6c:25:
2c:6f:05:6e:21:9f:26:27:9d:94:98:69:8c:88:15:aa:82:f9:
96:1c:50:02:76:a1:5c:54:5c:ee:5e:d8:e1:7b:dd:a0:08:87:
2d:30:f1:54:42:e2:bd:92:88:55:09:07:ff:c4:6d:ed:7b:5e:
7b:4d:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:22 2026 by rpki-client