Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/urNZqraMe24QrD8E6aBXbm8Rda8.roa
File: urNZqraMe24QrD8E6aBXbm8Rda8.roa (raw, json)
Hash identifier: 8iEEx3bYaRsI09sBEMgTKSlraFYwfmKRddI/LwDyHYo=
Subject key identifier: BA:B3:59:AA:B6:8C:7B:6E:10:AC:3F:04:E9:A0:57:6E:6F:11:75:AF
Certificate issuer: /CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Certificate serial: 019EB18A4DAAA186B76B98DCB4E7BDE99097
Authority key identifier: 66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/urNZqraMe24QrD8E6aBXbm8Rda8.roa
Signing time: Wed 10 Jun 2026 12:38:11 +0000
ROA not before: Wed 10 Jun 2026 12:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.253.80.0/24 maxlen: 24
5.253.81.0/24 maxlen: 24
5.253.82.0/24 maxlen: 24
5.253.83.0/24 maxlen: 24
194.50.35.0/24 maxlen: 24
2a14:f800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:8a:4d:aa:a1:86:b7:6b:98:dc:b4:e7:bd:e9:90:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Validity
Not Before: Jun 10 12:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bab359aab68c7b6e10ac3f04e9a0576e6f1175af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:0c:94:9f:bb:f0:e5:77:3d:bb:63:46:2b:
bc:44:ae:6b:a8:fd:ac:f2:5a:29:fd:8a:92:a2:64:
3b:34:10:1b:27:50:bf:c2:0c:1c:8a:52:9d:91:74:
38:35:6a:85:1d:c3:9d:ca:0b:01:de:18:21:99:4d:
ca:34:d0:e2:51:8f:d0:96:42:55:46:aa:29:6b:e0:
68:8f:3a:56:96:2f:ba:ab:4a:93:f3:80:d2:3d:9b:
69:78:3a:81:bc:7e:5e:da:3d:0d:56:4d:52:f5:fe:
5c:65:e3:00:81:5a:f4:9d:e7:7c:1b:3f:67:4d:7e:
0d:5c:9d:e4:42:61:9b:5f:e2:58:53:78:a4:0b:b7:
7c:26:1d:05:0c:e7:a0:40:19:f2:17:fd:5a:2b:e1:
10:10:ad:5c:82:b7:3f:ca:56:49:cf:f8:9e:11:b9:
0a:d9:ec:3e:0d:b3:44:69:f0:a3:8f:88:db:94:10:
07:38:dd:12:5a:38:ce:98:0c:29:1d:f2:8d:dc:d7:
f5:70:8b:65:88:3a:43:52:43:0e:48:fb:ac:cc:c3:
0a:b7:a4:1c:b6:ae:be:48:51:c2:b2:02:0d:4d:a3:
6e:e0:f4:d9:8e:35:dc:96:ed:f4:be:be:58:b4:a6:
2f:13:f1:c7:99:bd:6e:ac:2e:a8:af:0d:35:44:7d:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:59:AA:B6:8C:7B:6E:10:AC:3F:04:E9:A0:57:6E:6F:11:75:AF
X509v3 Authority Key Identifier:
keyid:66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/urNZqraMe24QrD8E6aBXbm8Rda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.80.0/22
194.50.35.0/24
IPv6:
2a14:f800::/29
Signature Algorithm: sha256WithRSAEncryption
91:9c:4b:42:a0:9a:7f:08:2f:fb:e9:ef:81:14:52:94:ee:2f:
50:e5:17:bb:a9:4c:42:19:d4:d8:bc:0d:2e:42:4f:3e:8f:92:
0e:62:17:ac:a8:52:c7:8a:98:fe:31:fc:7c:1f:b7:64:f6:f7:
f9:c1:18:c8:f5:69:77:68:3c:f3:14:d4:a4:8e:7d:e3:e3:f7:
73:2f:ee:91:3a:3e:37:f7:09:f6:be:9d:04:49:87:cb:00:fe:
cf:c9:c9:31:5d:c2:e9:ad:80:2a:bb:8f:53:fe:33:dc:5b:43:
7c:32:76:9b:e5:97:07:e7:a5:2b:08:bf:f0:d2:1b:ef:58:04:
3a:db:6d:90:33:9f:38:d5:23:07:90:21:20:63:8a:14:bf:01:
56:77:14:85:1b:cb:88:35:69:21:10:34:06:b5:1d:ee:23:47:
44:72:ec:b4:b6:86:2c:78:4c:f7:42:d6:ad:7e:37:af:75:38:
57:a9:91:f1:23:2e:8b:33:a3:22:9a:40:c1:bd:12:19:1e:c8:
07:44:99:94:a5:da:ee:5f:81:0b:8b:df:8b:08:9f:57:ce:fb:
85:16:74:b4:28:c6:09:d0:20:61:75:b8:8e:87:ab:2a:7d:c6:
3a:82:58:63:84:66:94:a4:70:f4:12:6e:85:9c:58:9f:77:97:
d1:ba:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:30 2026 by rpki-client