Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa
File: 5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa (raw, json)
Hash identifier: hY4eQy4LzjSe1EFCcdEhDwEocsy77V2cxczGFy9ZGiM=
Subject key identifier: E6:27:BD:27:D8:B1:E9:EA:3F:2E:33:BF:77:E8:74:C1:39:4A:E6:C6
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 019C99732967480A4D2E4B8F8ECCA794BD12
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa
Signing time: Thu 26 Feb 2026 10:16:27 +0000
ROA not before: Thu 26 Feb 2026 10:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43045
IP address blocks: 5.182.52.0/22 maxlen: 24
5.182.52.0/24 maxlen: 24
46.17.48.0/21 maxlen: 24
89.221.48.0/20 maxlen: 24
2a02:22c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:73:29:67:48:0a:4d:2e:4b:8f:8e:cc:a7:94:bd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Feb 26 10:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e627bd27d8b1e9ea3f2e33bf77e874c1394ae6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:2b:20:db:aa:94:ae:9b:e4:5f:35:9e:ab:
68:76:b4:a0:5f:56:e5:9c:45:69:1a:3c:8c:1d:da:
d6:31:4d:4a:f0:19:c3:ea:37:6d:6c:9e:34:6e:d5:
ac:8d:54:55:43:6b:04:a6:be:2e:31:62:fd:d7:94:
2d:b2:09:f9:33:b2:fc:12:1b:6b:0f:02:d4:d0:9b:
85:c6:00:0d:34:ec:55:3a:74:57:66:ad:fc:9a:0b:
63:94:0f:3a:58:11:13:fe:fb:01:ae:bb:fc:df:9b:
e3:6e:8c:c5:2e:2f:de:4a:75:78:b8:34:8f:af:ae:
09:6e:2b:ce:85:85:43:14:4e:32:a5:66:5f:53:c8:
da:cd:9c:1c:8d:5e:41:47:db:01:64:8e:a0:ba:0b:
30:30:2c:14:80:49:7f:3c:31:cd:3b:d1:dc:8b:0e:
d9:12:03:de:d2:15:83:98:13:c4:09:45:cd:76:83:
8d:10:bd:6e:73:07:5d:16:22:83:fa:75:74:ce:3c:
f2:39:23:a3:76:41:5f:fd:a3:e8:0a:25:09:78:2e:
19:47:d7:01:1b:73:ec:1a:75:49:96:28:23:dd:06:
b8:c4:e5:92:78:b9:c4:ba:c2:22:f9:e6:15:ff:cf:
08:99:bb:94:d3:69:7c:9e:13:12:7f:a3:72:eb:de:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:BD:27:D8:B1:E9:EA:3F:2E:33:BF:77:E8:74:C1:39:4A:E6:C6
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.52.0/22
46.17.48.0/21
89.221.48.0/20
IPv6:
2a02:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:5d:07:62:34:71:60:0a:c7:f2:6c:c1:24:82:0b:1b:e7:5e:
7b:27:68:28:bd:ea:16:ea:74:65:8b:59:c0:e3:8c:50:ed:19:
93:56:7e:e7:09:b0:25:21:45:86:51:eb:62:80:99:87:9d:6c:
3d:84:53:ca:b4:f7:b2:f0:44:3a:57:6f:4b:8d:89:07:91:36:
30:99:f3:61:09:25:fa:06:83:cd:58:01:cc:35:61:1d:88:8e:
42:38:f9:79:e5:79:1c:82:a1:91:ef:4b:da:0c:d1:1b:f4:98:
9d:1d:21:ae:0e:d5:00:e0:90:72:f9:7e:bd:39:73:71:26:6c:
1d:fe:f3:99:2a:63:e8:af:a8:58:b1:28:61:8e:c9:c4:45:c0:
bb:9f:ee:cf:6b:8d:9d:48:2a:03:cf:d8:e6:23:38:4c:5a:d5:
71:fd:e4:89:5f:45:7f:b9:9e:49:f0:d7:01:b3:a9:01:28:50:
0d:ed:af:ac:fa:3c:fd:b8:2a:e4:62:bd:36:a5:4b:0a:6f:71:
96:64:df:0d:df:83:da:00:c4:67:e2:23:76:07:e3:ab:a5:42:
5f:c3:ba:f0:83:fb:c2:42:07:33:72:e6:91:74:e8:e5:65:31:
b6:a3:aa:1a:15:28:a0:1c:ce:4d:1a:bd:3d:0e:5b:7a:d3:d2:
4f:d4:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:57 2026 by rpki-client