Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/5X2xdQzfElgF3zafO63cD95jMFc.roa
File: 5X2xdQzfElgF3zafO63cD95jMFc.roa (raw, json)
Hash identifier: t+WketR4iod+dxOduLUjbSJaUEp6hc0nti9zqFInWO4=
Subject key identifier: E5:7D:B1:75:0C:DF:12:58:05:DF:36:9F:3B:AD:DC:0F:DE:63:30:57
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01A0234AF8AD105E386D9D9181EFCB99803D
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/5X2xdQzfElgF3zafO63cD95jMFc.roa
Signing time: Fri 21 Aug 2026 07:48:30 +0000
ROA not before: Fri 21 Aug 2026 07:48:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202709
IP address blocks: 5.61.216.0/21 maxlen: 21
45.82.132.0/22 maxlen: 22
46.149.98.0/24 maxlen: 24
185.58.132.0/22 maxlen: 22
185.119.228.0/22 maxlen: 22
185.142.20.0/22 maxlen: 22
185.142.20.0/24 maxlen: 24
185.142.21.0/24 maxlen: 24
185.142.22.0/24 maxlen: 24
185.142.23.0/24 maxlen: 24
193.25.255.0/24 maxlen: 24
193.26.0.0/24 maxlen: 24
193.26.2.0/24 maxlen: 24
193.26.12.0/24 maxlen: 24
194.48.180.0/22 maxlen: 22
2a02:63e0::/32 maxlen: 32
2a0e:6b80::/29 maxlen: 29
2a0f:7740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:4a:f8:ad:10:5e:38:6d:9d:91:81:ef:cb:99:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Aug 21 07:48:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e57db1750cdf125805df369f3baddc0fde633057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:c1:98:ba:81:70:70:5d:a9:25:31:17:21:
be:ea:9d:e8:3d:d5:1b:fb:77:ba:0f:91:19:27:de:
93:24:cb:9f:6c:10:c9:da:91:fb:a0:3a:c9:e3:ae:
1b:95:e3:77:f6:5d:84:f6:1d:98:b9:39:89:8e:9a:
22:d3:83:13:27:63:7e:43:aa:5c:ec:2e:a9:92:91:
7e:ab:6b:4a:29:d8:bc:40:c5:52:4c:f9:f4:40:47:
27:6e:cb:7d:b4:36:d9:1b:43:ab:e1:3a:a9:0c:98:
7c:52:db:50:c0:b8:56:99:da:c1:86:10:8b:ac:7b:
a6:1c:f2:75:f1:a6:c4:f8:a7:e1:8f:10:dc:06:e0:
4d:87:ef:e9:90:e1:07:e7:50:75:6f:dc:ba:8a:e1:
a6:8f:57:cd:61:15:e3:be:80:06:a9:19:a9:95:88:
36:67:c2:37:8f:bd:bd:77:de:5a:63:36:32:09:94:
e9:4c:25:dc:1c:76:b2:8d:b8:f3:56:0b:2a:4a:02:
fb:a5:de:8c:25:a2:c1:22:2e:b2:7b:1f:a5:d7:68:
e6:b0:39:40:fe:3c:0d:a1:eb:eb:a6:03:ac:89:96:
77:8b:b7:09:eb:6a:ff:01:ab:c4:a5:c7:a6:bd:7c:
e8:28:a2:0a:10:d5:27:23:37:c5:cc:69:f9:4f:af:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:B1:75:0C:DF:12:58:05:DF:36:9F:3B:AD:DC:0F:DE:63:30:57
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/5X2xdQzfElgF3zafO63cD95jMFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.216.0/21
45.82.132.0/22
46.149.98.0/24
185.58.132.0/22
185.119.228.0/22
185.142.20.0/22
193.25.255.0-193.26.0.255
193.26.2.0/24
193.26.12.0/24
194.48.180.0/22
IPv6:
2a02:63e0::/32
2a0e:6b80::/29
2a0f:7740::/29
Signature Algorithm: sha256WithRSAEncryption
29:ea:a6:f4:f2:02:f0:7a:f3:f1:b1:60:17:c5:88:9c:37:87:
db:f2:b9:ae:47:b6:3f:4d:c0:06:e8:14:22:5e:54:98:2f:1e:
79:dd:81:75:9c:30:49:70:15:cf:3a:81:c2:28:a6:a7:3b:b1:
70:74:b6:53:ec:50:a4:94:cd:28:7c:09:c8:29:78:0a:49:4e:
1d:cb:9d:33:33:4e:82:e3:a1:c2:b2:1c:ca:8c:a0:20:d4:94:
64:b0:06:9d:97:ae:af:55:2c:63:3b:a2:f8:88:aa:1c:90:62:
3d:51:31:0f:6d:55:a1:2b:5b:70:9c:9f:85:a0:48:7f:c6:b2:
e3:04:17:a9:f1:96:14:ac:02:ca:b5:f3:e2:a3:61:ea:9a:01:
04:1f:11:d8:f5:ad:3f:85:83:4e:00:c5:df:6e:f0:7b:bf:71:
1a:71:8a:94:e3:23:d7:79:8e:16:0f:f8:72:c1:ce:49:07:63:
70:59:63:a4:f7:b5:00:a1:ce:f2:10:a3:56:b9:7c:e6:f4:a3:
53:0b:6d:05:b9:dc:9c:50:20:12:06:8e:77:b3:59:99:c0:9d:
47:00:a0:3b:63:87:18:da:7d:5a:f7:db:6e:4f:cd:07:39:45:
c6:cf:04:fe:cb:77:1f:eb:d3:ef:9e:11:a3:51:98:43:05:30:
5b:70:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:07:48 2026 by rpki-client