Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/PzNa0H_bwVsX-EM6fAlhhxxOE7I.roa
File: PzNa0H_bwVsX-EM6fAlhhxxOE7I.roa (raw, json)
Hash identifier: PeLDgrcT+bmIIrI4ZgO+owEAxFN5f7bOIGw4DufNpgY=
Subject key identifier: 3F:33:5A:D0:7F:DB:C1:5B:17:F8:43:3A:7C:09:61:87:1C:4E:13:B2
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D43DBE7B282D58F835862B668142F545F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/PzNa0H_bwVsX-EM6fAlhhxxOE7I.roa
Signing time: Tue 31 Mar 2026 12:26:18 +0000
ROA not before: Tue 31 Mar 2026 12:26:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.182.117.0/24 maxlen: 24
31.40.250.0/24 maxlen: 24
45.129.197.0/24 maxlen: 24
62.204.52.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
91.242.234.0/24 maxlen: 24
130.255.172.0/24 maxlen: 24
130.255.175.0/24 maxlen: 24
185.251.22.0/24 maxlen: 24
185.253.4.0/24 maxlen: 24
193.17.88.0/24 maxlen: 24
193.42.119.0/24 maxlen: 24
194.69.164.0/24 maxlen: 24
195.64.127.0/24 maxlen: 24
212.24.120.0/24 maxlen: 24
212.52.18.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
213.109.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:db:e7:b2:82:d5:8f:83:58:62:b6:68:14:2f:54:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 31 12:26:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f335ad07fdbc15b17f8433a7c0961871c4e13b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:93:27:80:b5:df:97:45:95:e0:74:26:96:
82:fb:fd:31:89:d9:d8:aa:a3:90:42:c1:49:5f:12:
74:15:a9:f2:2a:c4:40:41:fd:a6:59:31:f3:3e:49:
53:fe:3c:fd:c8:11:03:29:24:da:3a:83:b4:ac:2e:
9b:e3:77:e1:46:ad:7e:a4:52:cc:3e:58:eb:d2:1c:
cb:84:9a:e2:9f:5c:96:80:d0:cc:13:11:8a:8c:e1:
5d:2e:8c:e7:7a:d4:91:ff:fa:9c:cc:82:48:6a:44:
19:09:cd:a8:3c:9a:57:65:db:38:b6:2c:7d:f7:4f:
82:bf:a2:c4:81:7a:77:d9:9e:92:1d:9e:41:16:ce:
03:24:ef:9a:61:60:d4:3e:0e:ba:4d:98:ac:13:a4:
30:37:1a:02:9d:74:6a:4e:a6:b7:3c:52:60:88:4f:
07:6a:de:76:26:3d:61:79:72:88:b6:6e:cc:59:1f:
97:4f:e6:f1:44:d7:8d:a6:d4:18:eb:49:4c:25:56:
39:2f:f1:9b:c2:4a:f2:95:11:7d:e1:ba:a9:76:a5:
8b:90:cf:87:02:67:5a:3b:58:d6:8e:3c:64:82:03:
fe:47:a2:66:f5:37:74:4a:00:5a:af:17:c2:14:bd:
5d:e4:9e:30:e6:85:94:84:65:a6:ea:8d:e7:00:32:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:5A:D0:7F:DB:C1:5B:17:F8:43:3A:7C:09:61:87:1C:4E:13:B2
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/PzNa0H_bwVsX-EM6fAlhhxxOE7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.117.0/24
31.40.250.0/24
45.129.197.0/24
62.204.52.0/24
77.83.193.0/24
78.142.238.0/24
91.242.234.0/24
130.255.172.0/24
130.255.175.0/24
185.251.22.0/24
185.253.4.0/24
193.17.88.0/24
193.42.119.0/24
194.69.164.0/24
195.64.127.0/24
212.24.120.0/24
212.52.18.0/24
212.107.26.0/24
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bb:a5:a1:08:19:6f:e6:a3:5b:cd:69:b8:55:da:2f:5f:93:
7a:0f:98:bf:d2:85:37:d5:5d:5b:0e:03:b1:8b:e8:d8:2e:9f:
5a:f7:94:0a:76:45:6c:a8:58:b6:e1:c7:7e:c6:5a:a8:bd:fa:
26:b7:6d:79:00:3b:de:65:a2:e5:a6:3e:61:57:fb:fe:ef:88:
a4:a1:9b:25:3a:7c:84:97:58:c4:15:76:6f:ac:20:63:4f:93:
9f:9a:a0:cc:f2:2f:bd:3a:0d:60:bf:9d:f2:47:ff:e2:b0:e8:
e0:6f:61:02:00:7f:51:68:60:c8:11:1e:81:09:34:88:ed:f1:
da:28:be:5d:3a:aa:71:7d:0b:52:63:64:08:01:10:2d:2b:e4:
0c:60:43:03:2b:09:d5:b2:6f:74:22:b9:5d:ee:b8:a4:81:e9:
7f:48:94:c6:68:cb:da:f6:b2:83:ee:4c:b8:e1:22:09:bb:b7:
a1:d6:e6:4c:46:68:70:9e:21:c0:5a:dd:45:28:3d:47:4d:cd:
83:71:ee:ce:ef:df:81:b2:44:6c:99:59:98:16:36:f8:cd:b4:
10:0a:34:b8:9a:66:2f:a1:61:b7:d0:8b:53:23:02:0c:ca:c5:
aa:11:3f:19:c6:3f:9e:2e:08:3e:83:9c:0b:67:48:df:9d:c1:
1e:9f:d1:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:25 2026 by rpki-client