Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5bXf_K1i7FNJBTV2Kp_AJHJOvkw.roa
File: 5bXf_K1i7FNJBTV2Kp_AJHJOvkw.roa (raw, json)
Hash identifier: x5mRFKB2SV+gQzl6djA4tzNyRTiaskJ6I5ZkMFwdLU4=
Subject key identifier: E5:B5:DF:FC:AD:62:EC:53:49:05:35:76:2A:9F:C0:24:72:4E:BE:4C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E6DBF11C2C936C97C20193F8EA429A5A1
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5bXf_K1i7FNJBTV2Kp_AJHJOvkw.roa
Signing time: Thu 28 May 2026 08:41:38 +0000
ROA not before: Thu 28 May 2026 08:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 138.249.117.0/24 maxlen: 24
138.249.141.0/24 maxlen: 24
138.249.149.0/24 maxlen: 24
170.168.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:bf:11:c2:c9:36:c9:7c:20:19:3f:8e:a4:29:a5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 28 08:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b5dffcad62ec53490535762a9fc024724ebe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:c1:90:f8:e9:6d:75:25:0a:0f:35:1d:c2:
d6:c2:73:a8:8a:6a:72:ac:7f:d2:db:2e:fd:a6:7d:
2c:e8:17:7e:81:a7:44:27:ae:29:f1:91:aa:ea:97:
db:eb:30:3b:89:7e:e1:e0:31:70:2a:75:9f:22:bb:
93:83:50:e4:ec:39:46:c2:09:3d:7f:88:e5:ee:ae:
76:fd:95:71:9b:a3:26:70:71:8d:bf:9a:ae:53:7a:
b8:45:1f:aa:6e:02:19:86:de:2e:fa:3d:73:d4:e9:
75:ed:14:55:85:5d:62:14:c9:93:e7:5b:ea:10:ef:
5b:12:85:ef:24:27:76:ec:6a:31:d5:17:43:1e:e2:
e1:6d:86:25:20:c5:ad:57:8e:12:13:36:24:6d:6e:
85:31:b8:6f:22:5f:9d:e3:c1:c5:36:9a:77:e4:80:
94:d7:8f:2a:3c:ba:31:5c:2e:d8:c4:29:6a:8f:d1:
2e:b9:26:b8:66:3b:c2:02:e7:26:d8:b8:65:af:40:
b7:b0:46:75:87:7e:dd:46:0d:35:79:24:11:5f:48:
a8:9e:c6:c0:bf:17:6c:eb:56:0e:2a:f2:6c:07:87:
64:b1:c3:cf:1a:cc:c8:9c:86:d1:0f:d3:89:a3:b1:
d7:37:1c:dc:d9:54:c9:d3:c0:35:c9:69:4d:d1:48:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B5:DF:FC:AD:62:EC:53:49:05:35:76:2A:9F:C0:24:72:4E:BE:4C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5bXf_K1i7FNJBTV2Kp_AJHJOvkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.117.0/24
138.249.141.0/24
138.249.149.0/24
170.168.91.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ad:c5:06:cb:11:ea:9c:53:cd:ce:30:51:65:33:e1:aa:33:
57:96:fe:63:c2:ee:76:2f:7a:66:38:09:e6:43:20:7e:4b:52:
39:e7:6b:a0:ff:11:3d:79:8d:e0:b7:6d:24:d0:a2:38:14:cd:
e3:e3:00:20:fa:33:1b:53:55:42:11:5b:f2:56:dd:8f:4c:88:
7c:91:6d:9a:6e:c9:4b:59:44:0d:ee:88:b0:98:0c:b4:f0:4d:
58:b0:9f:16:35:56:2b:6d:84:2a:ed:da:5f:de:55:d4:b8:f4:
e8:11:b9:64:16:db:86:1a:c4:fe:a2:6c:69:bf:de:1d:2e:ad:
90:bc:c1:f7:6f:fc:58:d9:5d:6a:26:ac:da:09:79:4a:c3:5b:
06:10:61:5b:b4:c5:17:99:bd:62:54:7a:7f:3b:ec:80:7f:41:
25:3b:3b:8e:6d:a1:ee:0c:45:99:b5:45:6a:f8:c0:3d:e0:67:
95:2b:9b:14:49:fb:62:8f:73:3d:3e:34:55:55:77:8f:46:2a:
1d:6d:7c:45:8e:5b:05:f1:e3:95:af:64:10:9f:32:22:47:63:
23:39:3d:28:0a:d4:3c:2b:15:bb:10:6a:89:91:e4:84:60:31:
44:35:70:23:41:30:98:9c:6e:fa:79:94:05:55:27:2c:8d:f4:
7f:a8:43:87
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ5tvxHCyTbJfCAZP46kKaWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwNTI4MDg0MTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWI1ZGZmY2FkNjJlYzUzNDkwNTM1NzYyYTlmYzAyNDcyNGViZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUDBkPjpbXUlCg81HcLWwnOoimpy
rH/S2y79pn0s6Bd+gadEJ64p8ZGq6pfb6zA7iX7h4DFwKnWfIruTg1Dk7DlGwgk9
f4jl7q52/ZVxm6MmcHGNv5quU3q4RR+qbgIZht4u+j1z1Ol17RRVhV1iFMmT51vq
EO9bEoXvJCd27Gox1RdDHuLhbYYlIMWtV44SEzYkbW6FMbhvIl+d48HFNpp35ICU
148qPLoxXC7YxClqj9EuuSa4ZjvCAucm2Lhlr0C3sEZ1h37dRg01eSQRX0ionsbA
vxds61YOKvJsB4dkscPPGszInIbRD9OJo7HXNxzc2VTJ08A1yWlN0Ui1ewIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOW13/ytYuxTSQU1diqfwCRyTr5MMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvNWJYZl9LMWk3Rk5KQlRWMktwX0FKSEpPdmt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAivl1AwQA
ivmNAwQAivmVAwQAqqhbMA0GCSqGSIb3DQEBCwUAA4IBAQAwrcUGyxHqnFPNzjBR
ZTPhqjNXlv5jwu52L3pmOAnmQyB+S1I552ug/xE9eY3gt20k0KI4FM3j4wAg+jMb
U1VCEVvyVt2PTIh8kW2abslLWUQN7oiwmAy08E1YsJ8WNVYrbYQq7dpf3lXUuPTo
EblkFtuGGsT+omxpv94dLq2QvMH3b/xY2V1qJqzaCXlKw1sGEGFbtMUXmb1iVHp/
O+yAf0ElOzuObaHuDEWZtUVq+MA94GeVK5sUSftij3M9PjRVVXePRiodbXxFjlsF
8eOVr2QQnzIiR2MjOT0oCtQ8KxW7EGqJkeSEYDFENXAjQTCYnG76eZQFVScsjfR/
qEOH
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:40 2026 by rpki-client