Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5W-ZX3IxFpIpaIWr1YY2VTBb_EY.roa
File: 5W-ZX3IxFpIpaIWr1YY2VTBb_EY.roa (raw, json)
Hash identifier: 2efYScJuCptEcI5fIi4ZYl4A4CptVWRcO5Oh2QmuuOk=
Subject key identifier: E5:6F:99:5F:72:31:16:92:29:68:85:AB:D5:86:36:55:30:5B:FC:46
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019C72388696A09E8E59BF05DC16D562C185
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5W-ZX3IxFpIpaIWr1YY2VTBb_EY.roa
Signing time: Wed 18 Feb 2026 19:27:12 +0000
ROA not before: Wed 18 Feb 2026 19:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:72:38:86:96:a0:9e:8e:59:bf:05:dc:16:d5:62:c1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Feb 18 19:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e56f995f72311692296885abd5863655305bfc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:73:55:1c:be:36:65:76:96:02:7e:c3:09:
6a:cd:3c:06:5b:e6:1c:cb:41:62:ff:b6:86:11:7d:
66:8f:aa:47:2a:f3:3b:3c:2d:df:f4:21:5e:b9:82:
a5:56:e2:c8:84:31:29:91:ff:41:f6:15:dd:3b:15:
9d:01:8a:5b:8b:6a:b1:2d:c0:01:37:2c:72:00:71:
ca:f6:9d:03:c5:f3:f0:7a:40:14:ac:16:f1:87:ff:
45:25:23:40:3a:57:b0:90:85:46:84:e1:1c:d6:fe:
ef:87:61:f2:45:51:21:21:ab:2e:06:c9:b1:d5:8a:
fa:eb:d7:96:8b:45:e0:76:e5:23:f7:bb:05:17:c2:
06:0f:8e:6b:72:e0:a2:71:fe:8d:07:3c:55:08:98:
af:97:cf:77:90:8d:54:63:64:ae:ab:a2:99:a4:78:
2b:c3:46:e1:fb:6f:6f:03:48:1e:38:92:f3:41:d0:
55:3f:e7:08:66:5b:60:d7:8a:89:ef:53:9a:f7:d7:
b4:b3:b4:8d:77:96:29:f4:4e:08:82:4c:3f:7b:5b:
e6:c7:2e:aa:65:15:c1:e6:37:8f:fe:cb:81:33:21:
ec:5d:2c:cf:83:6d:6d:f7:4f:12:cb:6a:c4:af:61:
be:c9:72:f6:4c:a8:8a:48:37:50:e2:a0:d1:bb:24:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6F:99:5F:72:31:16:92:29:68:85:AB:D5:86:36:55:30:5B:FC:46
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5W-ZX3IxFpIpaIWr1YY2VTBb_EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.212.0/22
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
89.187.77.0/24
92.42.1.0/24
92.63.224.0/24
148.222.186.0/24
176.98.40.0/24
185.93.104.0-185.93.106.255
185.109.48.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
d7:bd:92:23:84:b4:d1:05:db:56:0c:39:31:a3:d3:0d:9c:fb:
8a:34:b3:58:90:9e:58:54:3e:6a:d7:01:17:57:2a:1d:29:7c:
78:0b:2f:aa:78:fc:2c:42:77:d9:e3:8e:90:fb:23:6f:b6:cf:
41:f1:ea:5e:b1:10:92:9e:86:4c:1a:2a:13:84:80:7d:c5:25:
7b:4a:e3:cf:89:81:04:d8:08:6e:2e:14:db:a0:43:99:f8:74:
2e:12:e6:58:3e:cd:5d:52:cc:f1:0f:c5:98:22:1c:0b:b1:cc:
60:32:92:12:a8:be:8f:da:bf:e5:80:8d:03:a3:1b:71:80:c9:
56:25:f5:6c:d0:fd:bb:c2:b0:3c:fb:8e:c0:6f:01:a3:0c:75:
b1:e4:be:5c:84:8c:c9:89:4e:be:b5:fd:28:f4:ad:21:02:83:
99:98:8d:fa:f3:05:34:11:ca:5a:46:0a:3d:2b:8f:2a:f1:72:
1d:83:59:c8:7f:5c:30:75:98:1e:4f:bc:e3:8f:c5:5f:29:5e:
04:28:78:09:20:06:17:47:d2:22:6e:5c:60:5c:c4:ea:dd:28:
da:75:a2:4d:d3:9d:88:3e:de:32:55:aa:32:8b:2c:b1:cf:98:
a7:d8:2e:92:4c:b3:f1:6b:c0:f4:d7:06:e1:d5:0d:7b:94:2f:
a4:69:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:06 2026 by rpki-client