Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/isF5-Z3kVjqOgggsySYDzZnWkgY.roa
File: isF5-Z3kVjqOgggsySYDzZnWkgY.roa (raw, json)
Hash identifier: 7GLlNn9MLBo4RSxbKIa1Y+7BCPre+T3zj8RULzVS0+Q=
Subject key identifier: 8A:C1:79:F9:9D:E4:56:3A:8E:82:08:2C:C9:26:03:CD:99:D6:92:06
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019D963E078325ECCB2295058E8F7D0A000D
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/isF5-Z3kVjqOgggsySYDzZnWkgY.roa
Signing time: Thu 16 Apr 2026 12:22:20 +0000
ROA not before: Thu 16 Apr 2026 12:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.185.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:3e:07:83:25:ec:cb:22:95:05:8e:8f:7d:0a:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Apr 16 12:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ac179f99de4563a8e82082cc92603cd99d69206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:80:51:b2:52:49:01:ca:7f:5a:48:5b:97:
d0:31:91:bf:5d:32:8f:27:68:c1:f4:c0:b7:d1:fc:
a3:d5:52:7c:c1:a6:13:6f:c3:d0:6e:18:c1:8b:18:
0f:63:d6:fa:45:00:05:b0:3e:2e:c3:d6:32:34:1b:
62:4a:5d:31:12:a0:46:1b:1c:2c:0d:86:41:e8:32:
86:71:42:b5:b4:80:4d:75:79:e2:7e:2b:35:f4:e6:
47:55:7d:4a:6c:65:fc:b0:c1:c8:51:f0:5f:ee:b6:
62:24:b5:1b:62:94:f6:ec:a2:c5:e8:19:86:b9:79:
ea:7d:a3:fc:21:80:53:e8:2e:b6:81:6c:2d:b6:90:
03:95:f4:5e:d8:ab:6d:f4:ad:de:f8:d3:4f:9f:06:
16:e6:58:46:f8:89:48:23:65:18:51:18:ab:3c:34:
a7:25:fb:d0:7a:10:6d:5d:63:3d:a5:fe:c5:ce:cc:
84:4c:e4:ba:d5:cc:34:51:95:03:9d:60:bd:8d:37:
48:9c:dd:c1:04:9d:58:3b:14:bd:24:e6:89:35:a4:
b3:29:cd:86:66:32:93:89:bc:eb:4d:a1:02:43:fc:
dc:f1:ef:03:48:85:fa:b7:09:94:1f:2a:00:a3:4b:
0a:8c:5e:1b:1a:fb:27:eb:8f:d8:9f:0d:d9:57:97:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:79:F9:9D:E4:56:3A:8E:82:08:2C:C9:26:03:CD:99:D6:92:06
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/isF5-Z3kVjqOgggsySYDzZnWkgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.212.0/22
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
89.187.77.0/24
92.42.1.0/24
92.63.224.0/24
148.222.185.0-148.222.186.255
176.98.40.0/24
185.93.104.0-185.93.106.255
185.109.48.0/24
185.192.23.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:80:7e:c6:18:a1:c8:c8:c0:b0:6c:a3:d3:72:ff:9f:fe:80:
fb:87:57:a9:b7:6c:c4:4c:02:c6:b6:4b:1a:df:38:1a:95:62:
b3:34:48:5c:13:d2:68:a2:c2:02:7a:3e:8d:28:83:89:0a:72:
ad:c7:37:ef:af:02:2b:ab:31:01:9f:8d:d8:ef:49:c9:54:00:
d8:d5:87:35:ac:30:69:d4:5d:8c:be:c4:5b:36:c9:fc:44:ef:
5b:2d:a9:57:98:e9:ca:33:62:81:6a:31:a9:2f:00:8e:db:eb:
15:61:dc:a3:b4:c8:e5:26:d9:b4:d7:dd:13:a4:e8:4e:65:3e:
40:fd:16:6a:72:20:73:29:cd:09:bd:84:8e:c1:f7:23:d1:4c:
05:e7:3b:9c:4d:1f:e0:a3:8e:2c:46:f0:7c:39:e2:8a:ac:4c:
e8:0d:c9:9a:37:3f:4e:d7:eb:77:a3:f5:3a:2c:53:d5:0c:75:
66:69:f3:f2:40:38:0f:d0:0e:62:3b:36:f6:53:3c:d5:ec:8b:
90:67:02:82:85:ef:68:b2:3f:c8:b7:b2:e9:72:a6:85:37:df:
5f:e7:6f:a8:66:f2:41:33:89:dc:d2:62:f4:b4:6a:9c:23:c0:
b1:96:5f:32:1b:68:98:bb:e4:e9:0f:46:6a:83:be:23:e3:8e:
59:18:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:25 2026 by rpki-client