Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/Rre-Ibu85Fl66pNXo6Xnt5VdJDw.roa
File: Rre-Ibu85Fl66pNXo6Xnt5VdJDw.roa (raw, json)
Hash identifier: r2t8oehyw8J6CyoAoxDShqd6qXBkLIHYDSrU8Gr6ZlU=
Subject key identifier: 46:B7:BE:21:BB:BC:E4:59:7A:EA:93:57:A3:A5:E7:B7:95:5D:24:3C
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 019DDEC387B8C8D2DF1CFA07D4B43C0BBFCA
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/Rre-Ibu85Fl66pNXo6Xnt5VdJDw.roa
Signing time: Thu 30 Apr 2026 14:20:49 +0000
ROA not before: Thu 30 Apr 2026 14:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208862
IP address blocks: 5.83.105.0/24 maxlen: 24
5.83.106.0/24 maxlen: 24
5.83.107.0/24 maxlen: 24
5.83.108.0/22 maxlen: 24
45.82.0.0/22 maxlen: 24
45.82.0.0/24 maxlen: 24
45.82.1.0/24 maxlen: 24
45.82.2.0/24 maxlen: 24
45.82.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:c3:87:b8:c8:d2:df:1c:fa:07:d4:b4:3c:0b:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Apr 30 14:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46b7be21bbbce4597aea9357a3a5e7b7955d243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:7b:b3:73:59:e4:50:17:5f:23:41:f1:20:
e8:cf:00:5e:3b:67:83:26:b6:cf:bb:64:16:ae:98:
e8:b7:6a:89:63:82:8a:a2:2a:ef:e4:55:34:86:9c:
12:40:48:a0:58:9d:f1:9f:ab:46:97:4e:d7:91:a5:
31:87:3e:3e:2e:03:82:cc:3c:47:e5:0b:9e:6a:67:
38:c3:e8:4b:af:c3:05:37:b2:dc:1e:94:e1:05:d1:
25:cd:f6:a6:8c:51:08:eb:de:b6:c5:a9:20:46:4c:
1a:b2:81:d7:5f:39:46:52:8a:7a:ae:8a:8e:3f:0f:
a4:62:a0:6e:c6:83:f1:26:d1:10:4f:27:62:03:43:
a0:9b:5a:9d:26:72:56:d5:91:63:fc:72:1a:e5:73:
a7:1c:81:ba:86:70:ec:c6:9c:b1:c8:9f:b0:83:39:
62:a8:37:bc:87:9b:16:ca:8b:23:18:e0:1b:b2:26:
b3:1d:df:ae:c3:a8:95:10:ab:be:27:ce:14:0c:3d:
25:e3:47:57:db:cc:60:e9:8d:95:70:e0:41:1a:3e:
d4:1e:cf:1b:e2:81:9b:b6:33:17:b5:e1:ca:15:f1:
4c:67:78:a6:0e:52:2d:1d:19:70:e1:43:fb:86:84:
2e:6b:6f:ab:9b:0d:d3:29:5c:a0:44:88:db:5a:cb:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:BE:21:BB:BC:E4:59:7A:EA:93:57:A3:A5:E7:B7:95:5D:24:3C
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/Rre-Ibu85Fl66pNXo6Xnt5VdJDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.105.0-5.83.111.255
45.82.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:d0:66:b6:c7:d3:62:6e:32:4b:e9:77:97:89:fa:29:86:e3:
e9:75:e1:93:64:39:2a:c7:cc:93:4a:b3:49:8e:78:41:72:af:
e0:8b:b4:e0:fa:a8:5b:1a:74:ee:f2:4a:88:51:07:1a:4b:40:
79:ae:dc:7e:7c:77:36:e6:f9:ca:b8:94:d7:0e:46:87:c1:2f:
60:5c:60:11:c3:c7:38:e3:6e:b2:7e:ca:57:b3:72:e1:4c:24:
ae:2e:67:e7:b1:eb:5e:fd:07:c4:24:93:5a:24:9e:5d:8f:35:
1f:37:bf:8f:aa:6c:61:d3:f6:9b:f3:f6:53:72:9f:42:0e:41:
80:fd:a6:64:be:4a:b3:90:16:b3:c8:69:3b:5c:5b:a1:24:07:
55:a9:cd:4b:fe:c5:e3:f8:5d:15:50:21:25:60:7c:8b:38:8e:
38:e2:dc:bd:af:31:da:20:51:0a:ae:ea:d8:9d:8c:e4:95:a6:
19:cc:31:c7:49:64:ac:bf:9c:7e:a7:f6:5d:74:5d:0f:21:92:
e1:70:c1:ea:fc:cd:92:33:b0:ed:03:62:6d:e4:f7:66:ee:f8:
fb:e4:48:c1:af:bb:c6:29:a1:3e:3a:0b:2f:30:c6:68:a7:73:
c4:ca:6e:31:e8:53:13:05:34:ed:78:7c:82:5d:a7:57:85:ed:
5c:39:a9:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:29:24 2026 by rpki-client