Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/iACkXoFQN0_wBGXp9PQpjjCaaZc.roa
File: iACkXoFQN0_wBGXp9PQpjjCaaZc.roa (raw, json)
Hash identifier: xsUhIX9w7aX3s0Mc8Lcdgwtsx4e9PELMXFFP9eBbQCk=
Subject key identifier: 88:00:A4:5E:81:50:37:4F:F0:04:65:E9:F4:F4:29:8E:30:9A:69:97
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019C9FB81473A7C94E0C57B7F9BF5BDE176C
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/iACkXoFQN0_wBGXp9PQpjjCaaZc.roa
Signing time: Fri 27 Feb 2026 15:29:26 +0000
ROA not before: Fri 27 Feb 2026 15:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 5.62.16.0/24 maxlen: 24
5.62.18.0/24 maxlen: 24
5.62.19.0/24 maxlen: 24
5.62.20.0/24 maxlen: 24
5.62.22.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:b8:14:73:a7:c9:4e:0c:57:b7:f9:bf:5b:de:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Feb 27 15:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8800a45e8150374ff00465e9f4f4298e309a6997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:c2:5e:3f:1b:08:a8:60:d7:69:d8:3f:b3:
ce:4d:3e:75:67:78:bc:6c:32:57:f1:1b:76:37:ef:
74:67:0f:54:5b:59:9d:07:6a:2a:73:1b:48:7f:98:
a8:96:7f:a6:5d:71:ad:4a:e3:07:2d:e1:53:59:f6:
eb:fc:18:da:7b:26:a1:f9:5b:2a:98:ab:82:ea:64:
d8:79:87:d4:90:28:d7:de:9a:b2:20:76:10:ef:72:
8e:3a:45:e8:8b:b1:be:cb:cd:6d:78:30:d1:49:56:
d4:6d:7e:dd:1b:3a:17:3b:89:7c:f3:ca:d0:69:8a:
f4:88:4c:50:f4:85:c1:ca:1d:e9:c7:3d:87:00:dd:
ac:83:01:e8:f9:1e:a7:da:e6:92:ae:2f:3a:b0:6d:
76:69:03:20:d2:78:a2:22:64:28:34:be:40:c4:9d:
c9:ac:a0:9b:59:08:80:b2:8a:4d:60:0d:16:14:85:
31:1b:f6:fc:88:33:12:65:da:17:0f:b1:c0:02:ed:
d3:e8:13:fa:76:09:76:e1:2f:2f:5e:d5:a8:4f:f9:
b7:c3:d8:19:62:f4:e4:be:cd:7d:0a:72:be:16:41:
7f:1a:27:41:37:92:1d:6a:24:26:ca:8e:9c:be:9a:
72:d4:d3:71:09:da:1f:10:c2:15:a8:8f:c3:9f:2b:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:A4:5E:81:50:37:4F:F0:04:65:E9:F4:F4:29:8E:30:9A:69:97
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/iACkXoFQN0_wBGXp9PQpjjCaaZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.16.0/24
5.62.18.0-5.62.20.255
5.62.22.0/23
5.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f2:60:96:47:c0:06:c4:c9:3e:e7:1c:31:de:b5:26:62:2c:
41:2c:e8:af:f3:eb:91:8f:06:eb:08:4f:4a:36:aa:66:4e:9a:
32:5d:5a:ff:e5:cf:a6:99:ab:5d:3a:77:66:15:41:ce:c9:27:
b6:90:25:7b:ed:0e:e8:be:e7:06:4c:ac:37:a6:dd:44:32:c2:
57:fb:5c:b3:89:ab:a7:50:6b:f4:9c:9b:84:12:f9:a6:fc:5a:
f4:48:15:b8:b8:e4:4e:52:0e:d2:1d:82:93:8b:1c:7b:b3:90:
09:4d:5a:9b:65:fe:16:56:dc:68:e5:c7:d2:0b:6a:6d:90:05:
b2:e3:ac:68:71:a8:d3:63:06:75:27:e5:cc:6b:ef:f2:76:ef:
87:44:c5:73:c8:f0:13:f4:61:0b:f5:20:73:38:f4:ba:c0:32:
4a:bf:94:30:ed:33:fc:cf:96:3b:83:73:8a:55:a3:a8:8c:08:
75:00:f9:3e:8e:85:83:18:a3:21:22:9e:a7:b5:7d:fd:41:ce:
42:f5:47:a4:ac:f0:0f:27:33:bb:09:35:e9:c4:68:40:8a:de:
17:51:02:f3:5d:26:7c:85:91:cd:26:d0:47:7f:5c:30:57:99:
46:2a:d3:8d:73:91:73:2d:d3:81:cc:95:b4:fc:c6:84:c2:e3:
1c:91:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:44:34 2026 by rpki-client