Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/rftVMmM8QluKijYHrq9Xay-ay70.roa
File: rftVMmM8QluKijYHrq9Xay-ay70.roa (raw, json)
Hash identifier: VzStWFalfQL1Ifq2BA/wF9rouh61HKNLIGoSHUugdA8=
Subject key identifier: AD:FB:55:32:63:3C:42:5B:8A:8A:36:07:AE:AF:57:6B:2F:9A:CB:BD
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A0C94E8569126A4EDDD517085FE91E65C5
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/rftVMmM8QluKijYHrq9Xay-ay70.roa
Signing time: Tue 22 Sep 2026 13:29:21 +0000
ROA not before: Tue 22 Sep 2026 13:29:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57704
IP address blocks: 5.133.24.0/21 maxlen: 24
5.253.68.0/22 maxlen: 22
5.253.68.0/24 maxlen: 24
5.253.69.0/24 maxlen: 24
5.253.70.0/24 maxlen: 24
5.253.71.0/24 maxlen: 24
185.132.248.0/22 maxlen: 24
193.7.220.0/24 maxlen: 32
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:4e:85:69:12:6a:4e:dd:d5:17:08:5f:e9:1e:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Sep 22 13:29:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adfb5532633c425b8a8a3607aeaf576b2f9acbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:a9:a0:b2:55:2b:da:dd:c3:44:ed:08:48:
91:8e:17:9d:d8:5a:15:d3:70:81:b6:64:3e:21:95:
91:b5:f9:c2:62:70:4f:28:48:5d:eb:12:8a:1f:7f:
70:1e:f2:1e:de:60:31:f6:1b:6d:3a:64:3a:04:5b:
8f:52:d3:87:c8:ad:e5:2a:40:53:41:82:d7:ed:be:
24:cd:6a:4f:bd:ff:5f:22:dc:00:81:18:5c:a3:35:
2f:b3:31:cc:0b:08:b7:c6:8e:4c:ba:ff:bf:51:f9:
9a:1f:bc:33:5b:2a:a3:ab:80:05:da:a7:ea:fe:63:
f6:3c:f4:54:2d:ae:64:b4:0f:5f:26:87:a5:0d:20:
f9:67:f4:5c:9b:2d:bb:3a:6c:91:ed:d6:8c:f5:8a:
7a:a4:72:5a:d7:07:8c:2b:81:9d:54:ac:8b:32:65:
9d:2e:cb:c5:39:71:6a:42:39:47:0a:a5:ec:54:fb:
62:bb:e3:9a:0d:92:ea:46:23:ed:a0:6b:ef:68:48:
89:94:90:27:a6:36:a9:78:7b:60:22:47:a3:af:b0:
f9:1c:e7:3d:25:8d:68:80:94:5e:a1:42:d9:6c:27:
fb:dc:77:90:77:0f:12:b8:ba:95:38:85:5e:3e:64:
a4:12:46:f0:60:ea:51:2d:64:89:92:82:2e:33:e5:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FB:55:32:63:3C:42:5B:8A:8A:36:07:AE:AF:57:6B:2F:9A:CB:BD
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/rftVMmM8QluKijYHrq9Xay-ay70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
5.253.68.0/22
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
13:4d:b9:68:3d:14:23:da:67:76:f5:98:e5:e6:e7:8b:78:b5:
64:8f:0a:19:65:d6:f9:ee:7f:64:31:93:71:ea:70:d5:43:1e:
e6:68:44:ba:e8:e2:82:ce:80:f1:2a:94:a2:5e:55:f1:b2:a2:
68:3b:5a:7e:b7:1d:88:32:3e:fc:bf:d8:e6:85:5d:94:33:cc:
a1:3c:5e:4a:3f:d1:8e:3b:b0:e3:7a:8a:61:30:66:83:48:b0:
78:25:f4:f4:09:bd:2a:86:d6:9a:c9:27:6b:be:9d:5b:5f:7c:
3c:72:58:96:9b:d7:2f:36:86:04:22:fb:bd:12:4a:7c:b6:01:
ff:26:8c:9e:b6:69:ae:a3:58:30:cb:52:f7:0b:a9:8b:7a:cd:
44:60:c4:04:0d:9d:b2:14:05:8d:45:15:bf:fa:1f:77:fc:12:
21:44:f4:65:aa:97:ea:e5:19:17:6b:58:2d:5d:4d:0b:73:27:
be:6e:1c:7c:98:01:7d:d2:00:65:73:2a:c3:7d:56:83:76:ff:
b5:34:98:2a:e7:8d:4e:e4:e9:63:d6:e8:47:80:84:6d:77:bf:
73:64:db:36:cd:8f:e8:d5:04:9f:f3:39:7d:b7:50:6e:2c:ca:
6d:c2:79:aa:d2:f5:73:af:c2:90:84:8f:5c:3a:5b:fc:f5:c8:
0a:88:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:25 2026 by rpki-client