Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5l8AqJkweJSMubQKICCPXKnAw9Y.roa
File: 5l8AqJkweJSMubQKICCPXKnAw9Y.roa (raw, json)
Hash identifier: YjY+S0EbeIAs18JTrC0J63W/d6UAxC1gUBoY21NUgbk=
Subject key identifier: E6:5F:00:A8:99:30:78:94:8C:B9:B4:0A:20:20:8F:5C:A9:C0:C3:D6
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D3526555054DC64A0F14F80DED3AA885B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5l8AqJkweJSMubQKICCPXKnAw9Y.roa
Signing time: Sat 28 Mar 2026 15:53:17 +0000
ROA not before: Sat 28 Mar 2026 15:53:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 138.249.15.0/24 maxlen: 24
138.249.19.0/24 maxlen: 24
138.249.22.0/24 maxlen: 24
138.249.23.0/24 maxlen: 24
138.249.102.0/24 maxlen: 24
138.249.103.0/24 maxlen: 24
138.249.112.0/24 maxlen: 24
138.249.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:26:55:50:54:dc:64:a0:f1:4f:80:de:d3:aa:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 28 15:53:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e65f00a8993078948cb9b40a20208f5ca9c0c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:25:3b:b8:e3:6b:05:2a:f5:e4:9f:69:e7:
0a:9a:b4:aa:59:32:ff:29:93:39:12:e1:0d:88:c5:
67:0d:01:f5:1e:e7:ab:a2:ba:a6:fa:42:29:57:74:
48:6b:de:53:99:7a:28:13:e6:72:04:99:ba:8b:ff:
61:37:65:64:d2:9f:66:66:75:39:52:62:be:b4:f1:
5c:8c:ae:a4:70:a5:05:46:ca:d4:72:46:26:bf:98:
3a:eb:2a:9b:cb:2f:11:26:ff:ee:cf:fe:5c:d0:80:
c0:84:f9:02:20:df:30:9b:a9:75:4b:d4:e8:66:bf:
48:3e:ac:f2:32:2f:46:2e:da:54:58:8a:65:23:e1:
61:e5:a1:28:95:71:c6:e1:31:e8:98:51:55:86:a7:
16:a4:86:86:1e:11:63:d1:08:ef:20:11:10:c2:22:
c5:a5:1d:8c:88:9c:27:b6:39:8d:fe:c8:77:ac:d9:
76:70:45:7e:b3:e0:16:d5:a8:b5:82:42:a3:55:bc:
e3:b5:c8:71:a6:4c:c8:55:1a:fd:06:45:a1:c7:12:
78:ae:ac:49:3c:6d:4b:36:f6:94:e5:0a:45:32:a6:
d6:3b:a8:74:d8:09:68:39:6a:b2:a2:9f:9b:47:38:
3f:ad:dc:9c:f8:42:16:d8:4e:7e:d8:0c:e4:f7:00:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5F:00:A8:99:30:78:94:8C:B9:B4:0A:20:20:8F:5C:A9:C0:C3:D6
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5l8AqJkweJSMubQKICCPXKnAw9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.15.0/24
138.249.19.0/24
138.249.22.0/23
138.249.102.0/23
138.249.112.0/24
138.249.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2a:b7:fa:05:ca:b1:31:04:c0:29:92:5e:aa:1d:05:cc:4f:
92:76:82:92:2b:81:84:c1:05:7d:46:72:f9:8b:eb:1a:96:f7:
30:41:91:13:41:4e:69:0b:61:11:87:a4:f1:5c:33:6f:59:83:
99:f9:c5:68:ce:b1:06:95:d0:4d:c3:be:4f:30:c3:cc:e2:b0:
5d:2c:9a:1a:c8:14:40:b3:62:c3:8c:3e:73:21:96:17:4f:b9:
ab:4f:b3:8d:b0:5a:ba:3a:97:9e:a7:1b:b9:a4:fe:f8:69:8d:
a7:11:97:85:b5:db:b2:fa:bf:11:ff:93:d9:09:c6:cf:e1:e2:
d3:d2:0c:93:3b:3a:51:9e:cc:24:d8:be:a8:f8:14:55:05:9a:
f0:97:09:87:b6:fb:8c:32:21:bb:13:13:67:1a:16:39:9e:a6:
fb:95:ff:85:bf:ea:1c:a5:76:29:13:1e:39:ae:ed:70:b4:d3:
c5:bb:96:c7:9d:5a:30:05:b6:1a:fe:fb:71:21:8b:76:f8:9d:
20:dc:ae:2b:3b:de:72:29:11:32:59:85:95:6f:85:85:25:d5:
7a:e1:e7:39:f5:3d:41:a7:6a:6b:79:cc:84:ab:3b:22:36:58:
0b:73:1c:02:b7:fd:7c:c7:b8:7a:e9:70:6b:ac:80:36:04:f0:
5a:f3:c3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:39 2026 by rpki-client