Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/chRUIQdPik3SRBExYcq72VqHvX4.roa
File: chRUIQdPik3SRBExYcq72VqHvX4.roa (raw, json)
Hash identifier: XQlzFDZX4RjFzxVo/PHa5ejZFsptB0r+GXFfM1+42LQ=
Subject key identifier: 72:14:54:21:07:4F:8A:4D:D2:44:11:31:61:CA:BB:D9:5A:87:BD:7E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FA8A94B113D39EBFE9700AEE4E5A2B358
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/chRUIQdPik3SRBExYcq72VqHvX4.roa
Signing time: Tue 28 Jul 2026 12:18:14 +0000
ROA not before: Tue 28 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 5.42.192.0/24 maxlen: 24
5.42.195.0/24 maxlen: 24
5.42.209.0/24 maxlen: 24
5.42.210.0/24 maxlen: 24
5.172.179.0/24 maxlen: 24
45.86.2.0/24 maxlen: 24
46.149.173.0/24 maxlen: 24
91.209.73.0/24 maxlen: 24
91.213.230.0/24 maxlen: 24
91.236.155.0/24 maxlen: 24
91.246.56.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
91.247.169.0/24 maxlen: 24
91.247.170.0/24 maxlen: 24
93.190.123.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
185.222.214.0/24 maxlen: 24
185.225.190.0/24 maxlen: 24
193.9.20.0/24 maxlen: 24
193.200.199.0/24 maxlen: 24
194.26.204.0/24 maxlen: 24
194.55.170.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
194.104.232.0/24 maxlen: 24
212.18.120.0/24 maxlen: 24
217.8.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:a9:4b:11:3d:39:eb:fe:97:00:ae:e4:e5:a2:b3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72145421074f8a4dd244113161cabbd95a87bd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:da:da:22:e1:df:7f:93:c0:a2:c8:6c:ba:
55:af:35:00:f2:75:60:e8:8e:5e:75:65:10:09:14:
54:75:91:4c:fe:21:23:a2:24:2d:75:39:57:81:4c:
52:45:4a:19:37:26:7a:32:ad:fa:38:11:b3:f1:d0:
ea:f0:52:fb:b2:0e:3d:df:f2:de:45:09:2d:c9:f0:
39:45:30:c8:77:d4:10:77:99:e5:c2:96:a6:bd:44:
68:d4:b7:10:2b:93:f5:31:e8:b0:2d:56:1f:8e:2c:
02:d2:99:a2:c0:5b:96:86:ac:fc:98:4b:76:95:11:
ea:c6:c0:2f:21:20:c7:c2:aa:c4:41:b2:f8:b3:97:
8f:aa:f5:27:3f:c3:4d:e5:fd:3e:33:cf:2a:db:fe:
f3:b6:ad:27:1f:9b:7c:75:95:bb:48:a6:30:84:5d:
44:17:c9:21:ca:08:df:1c:4f:3d:ac:2b:a0:03:35:
3e:c0:ff:9c:ed:38:af:bb:32:41:ce:d5:5e:47:0d:
15:41:2a:f8:3c:bf:9e:25:a7:81:1e:c7:33:18:ae:
97:38:c5:54:d2:eb:58:60:6d:fd:87:fc:89:fa:be:
1e:74:50:68:91:d4:0c:36:e2:59:74:63:de:43:3f:
db:13:47:84:64:e0:74:10:1e:c9:36:78:90:0a:81:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:54:21:07:4F:8A:4D:D2:44:11:31:61:CA:BB:D9:5A:87:BD:7E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/chRUIQdPik3SRBExYcq72VqHvX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
5.42.195.0/24
5.42.209.0-5.42.210.255
5.172.179.0/24
45.86.2.0/24
46.149.173.0/24
91.209.73.0/24
91.213.230.0/24
91.236.155.0/24
91.246.56.0/24
91.246.62.0/24
91.247.169.0-91.247.170.255
93.190.123.0/24
176.116.17.0/24
185.222.214.0/24
185.225.190.0/24
193.9.20.0/24
193.200.199.0/24
194.26.204.0/24
194.55.170.0/24
194.59.246.0/24
194.104.232.0/24
212.18.120.0/24
217.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fd:cf:ab:ce:24:93:35:6f:65:d8:0b:5e:ab:75:8c:1d:9a:
cf:87:9d:f8:45:9e:13:7b:21:34:a5:fa:30:42:46:a8:83:b3:
ec:2c:74:90:fc:3c:3f:b1:46:6b:20:be:9e:4a:ed:c3:04:12:
14:f9:02:6e:54:d0:c2:c6:17:7e:01:51:56:5f:a7:17:49:63:
14:6f:b8:d6:f9:df:1e:21:ac:b5:f7:1b:86:f6:a3:4f:c4:30:
de:d1:da:9a:b5:ea:5d:27:ad:d4:e3:58:74:b4:43:a6:4d:40:
d5:6f:ac:ef:81:a5:64:c7:4f:ea:d7:62:23:bf:8c:35:0a:1b:
94:e9:30:01:d3:2e:38:5b:d1:7f:66:dc:98:b1:e7:c3:b9:a7:
cf:02:50:be:17:c6:dc:1c:30:0f:f6:ee:0e:a8:e1:0c:33:88:
76:11:b0:b3:7b:fd:a3:fd:f4:ee:a2:17:ee:78:c0:7a:2e:e0:
16:2c:7d:e7:00:77:84:e4:0e:32:c6:50:4a:ed:6d:9c:10:7b:
35:e0:c2:56:30:d7:d4:ca:9a:21:0c:84:e7:2b:84:60:74:e9:
7f:73:3a:38:d6:8c:45:ef:f1:53:c0:9f:11:71:3e:92:8e:4b:
f6:4b:79:f0:43:90:a6:f7:f6:34:4b:b7:f2:6f:50:f3:9d:8e:
17:e4:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:05 2026 by rpki-client