Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa
File: eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa (raw, json)
Hash identifier: wn03BA6mXWMu6Vji8bsJNtZWRlLC+mrxhHq0SG0AH6E=
Subject key identifier: 78:C6:AA:CC:78:5D:38:B3:DA:FB:21:71:4D:BA:A4:25:7C:E6:7C:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019C9FAFD673B66CDB227F7BAA4CD40FFABD
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa
Signing time: Fri 27 Feb 2026 15:20:26 +0000
ROA not before: Fri 27 Feb 2026 15:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 5.62.17.0/24 maxlen: 24
5.62.24.0/24 maxlen: 24
5.62.25.0/24 maxlen: 24
5.62.30.0/24 maxlen: 24
5.62.32.0/24 maxlen: 24
5.62.36.0/23 maxlen: 23
5.62.38.0/23 maxlen: 24
5.62.38.0/24 maxlen: 24
5.62.40.0/23 maxlen: 23
5.62.42.0/23 maxlen: 23
5.62.44.0/23 maxlen: 23
5.62.46.0/23 maxlen: 23
5.62.46.0/24 maxlen: 24
5.62.47.0/24 maxlen: 24
5.62.48.0/23 maxlen: 23
5.62.50.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.53.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
5.62.55.0/24 maxlen: 24
5.62.56.0/23 maxlen: 23
5.62.56.0/24 maxlen: 24
5.62.57.0/24 maxlen: 24
5.62.58.0/23 maxlen: 23
5.62.60.0/23 maxlen: 23
5.62.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:af:d6:73:b6:6c:db:22:7f:7b:aa:4c:d4:0f:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Feb 27 15:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78c6aacc785d38b3dafb21714dbaa4257ce67c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:29:2b:fe:e9:35:8f:15:db:32:bc:40:da:
f6:d4:ef:50:ef:b2:73:5f:68:8f:92:63:34:63:3f:
25:09:e3:a6:c7:83:5d:2d:4d:66:6b:dc:37:36:3c:
40:8b:02:34:91:79:99:f9:9b:55:3f:54:b5:38:4e:
12:40:91:03:43:b1:ee:5f:24:7e:7f:0e:c3:9d:2e:
36:c7:19:62:af:2e:00:07:c4:0d:42:bf:27:71:ca:
21:57:3e:b7:5d:50:49:cb:ac:b7:23:d5:e2:9e:b7:
f2:9c:43:cb:33:85:1e:da:97:da:f0:37:eb:25:4e:
c2:0f:73:72:7f:0b:e5:ab:1a:6f:bc:13:b6:92:36:
ec:51:52:1b:e9:bc:98:3a:18:d9:9a:e8:24:2c:7a:
87:3c:aa:7a:f8:4d:0c:9b:c2:99:c7:a2:5a:db:58:
47:8e:e2:c6:bd:18:c2:4c:cd:69:ff:f6:2f:fa:3a:
25:73:3f:e6:ba:8d:66:c6:62:b0:84:dd:9b:77:1f:
f7:43:7c:8b:f4:b5:f1:e7:32:a1:2c:30:4a:30:21:
64:63:33:8d:58:4c:2a:df:ed:b5:b7:8f:d7:49:de:
69:8f:41:91:f7:10:b5:a2:d0:18:40:d0:9e:d0:26:
b0:00:86:45:e7:d1:6a:a9:18:c5:27:bd:5b:44:3b:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C6:AA:CC:78:5D:38:B3:DA:FB:21:71:4D:BA:A4:25:7C:E6:7C:2B
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.17.0/24
5.62.24.0/23
5.62.30.0/24
5.62.32.0/24
5.62.36.0-5.62.50.255
5.62.52.0-5.62.63.255
Signature Algorithm: sha256WithRSAEncryption
5d:f3:74:c8:e2:b4:f3:45:97:7f:7e:dc:0a:07:93:47:64:c7:
b1:ea:da:71:8e:14:64:de:57:f7:3c:ae:5d:f0:28:1d:0d:63:
93:11:15:b4:09:45:60:27:fa:d0:cf:24:a9:b3:e1:b0:91:e9:
ca:44:46:3f:69:b6:ec:09:58:1c:c7:04:b8:1b:df:86:a1:16:
24:eb:41:20:61:55:12:84:f2:be:cf:96:d0:cd:73:51:05:11:
c2:3a:4d:11:36:8d:87:b4:79:3b:13:15:40:a9:84:1b:37:ef:
bc:89:5f:27:85:b6:c7:cc:50:fa:d9:7c:b1:3c:d6:2f:40:43:
7c:ae:29:1b:18:21:45:e3:1b:15:af:69:c7:cf:f1:1d:64:ff:
16:81:fd:a2:d7:dd:21:18:c2:77:a4:fd:84:1b:1e:2b:c6:c7:
97:fd:f6:50:be:53:f5:3d:91:40:0d:db:1d:7b:7b:7f:f3:95:
87:bf:70:d8:ac:07:d7:32:f0:ad:ce:4a:2d:40:66:09:f5:60:
9c:42:29:cf:b9:8f:bc:b1:53:cb:94:78:fe:b0:2e:40:5c:c4:
16:8e:ae:07:ee:35:0c:20:fa:c5:c2:a2:72:a9:7a:24:80:02:
98:56:5f:6e:0a:67:66:ce:52:7a:37:1a:e1:07:c9:36:e9:96:
51:4b:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:52 2026 by rpki-client