Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/5i2TAh2og4TXto7xyAcopWr_UMg.roa
File: 5i2TAh2og4TXto7xyAcopWr_UMg.roa (raw, json)
Hash identifier: ZekBhPcyoCd+84YvBPa87l2ubLNdolD6vu0bwY9F0iY=
Subject key identifier: E6:2D:93:02:1D:A8:83:84:D7:B6:8E:F1:C8:07:28:A5:6A:FF:50:C8
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 019B7BA350DC27BCC862542509338668CE1E
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/5i2TAh2og4TXto7xyAcopWr_UMg.roa
Signing time: Thu 01 Jan 2026 22:17:39 +0000
ROA not before: Thu 01 Jan 2026 22:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60460
IP address blocks: 46.231.24.0/24 maxlen: 24
46.231.25.0/24 maxlen: 24
46.231.26.0/24 maxlen: 24
46.231.27.0/24 maxlen: 24
46.231.28.0/24 maxlen: 24
46.231.29.0/24 maxlen: 24
46.231.30.0/24 maxlen: 24
46.231.31.0/24 maxlen: 24
176.227.170.0/23 maxlen: 23
176.227.172.0/22 maxlen: 22
185.88.240.0/23 maxlen: 23
2a04:2640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:50:dc:27:bc:c8:62:54:25:09:33:86:68:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jan 1 22:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e62d93021da88384d7b68ef1c80728a56aff50c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:e3:ad:f9:29:4e:c7:95:40:cf:91:80:92:
8b:29:06:5c:1b:f9:83:43:16:23:61:0c:50:b4:e1:
98:8d:fa:19:23:b5:a7:c3:87:5a:a6:6f:f1:b1:9c:
50:56:66:8a:5b:f2:bf:0f:bc:f9:5f:b1:b7:a6:25:
46:62:d8:a2:f9:20:eb:0b:75:0e:9e:d9:5d:21:5b:
b9:47:56:1a:c8:df:18:77:8f:f3:1d:e7:f6:01:ca:
8d:20:8c:af:1f:53:30:6d:84:a4:22:18:c9:07:69:
f4:aa:d7:3e:2b:72:44:2c:33:25:a8:2f:af:00:40:
ee:57:c6:ec:67:84:5f:94:4c:28:d3:ac:d4:7f:19:
36:19:0f:5f:33:ff:42:c2:cf:6a:4a:fe:84:b1:1b:
4a:58:8e:a9:d3:c9:57:21:04:81:89:9f:52:f3:9e:
48:77:d0:3e:99:e4:39:bd:83:92:80:c8:55:d5:f3:
33:e0:41:ff:0d:4d:27:55:c8:5f:f7:35:f2:bd:ed:
e2:27:e9:b4:01:f6:b2:ec:31:e5:54:db:b8:91:e6:
bd:e1:e2:78:16:7f:04:fd:c4:df:16:aa:ae:4e:67:
3e:05:66:7a:39:fa:03:27:37:49:7b:6d:55:e6:2c:
cc:16:31:b1:8a:2e:90:51:92:d7:33:62:bf:e9:3c:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:93:02:1D:A8:83:84:D7:B6:8E:F1:C8:07:28:A5:6A:FF:50:C8
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/5i2TAh2og4TXto7xyAcopWr_UMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.24.0/21
176.227.170.0-176.227.175.255
185.88.240.0/23
IPv6:
2a04:2640::/29
Signature Algorithm: sha256WithRSAEncryption
50:5b:3a:b5:68:ab:a1:fe:6f:11:8a:f7:e2:b0:45:20:ee:17:
ce:7f:16:26:76:53:f4:3a:97:27:d2:8a:74:65:cc:e3:3b:21:
fc:e0:78:c0:88:57:88:df:50:33:86:af:b1:2a:c8:2d:88:61:
8e:4f:20:81:24:4e:09:ac:a4:35:c5:fc:fe:60:2d:9a:12:3a:
06:d6:8b:90:0b:88:d3:87:b3:06:d2:79:b4:0a:12:d9:df:0f:
82:76:eb:b6:93:cb:27:71:19:9e:25:c6:a3:fd:e4:17:db:5a:
05:a9:3a:d1:32:a8:8e:0f:33:54:56:c4:fa:cc:91:9f:d0:0a:
e3:ed:a1:2c:8a:d5:72:0f:fb:1c:04:cc:c9:86:31:7d:77:77:
86:4c:e2:c6:63:9c:91:84:ab:de:6e:f9:26:bd:ae:42:82:09:
07:79:03:dc:7f:56:4d:4f:d8:11:ff:ec:cd:a6:2f:86:2f:c4:
e5:fa:73:12:c4:e2:aa:d1:66:92:1b:98:f0:7e:0e:61:87:b1:
09:18:b1:0e:16:1d:48:aa:9a:77:3e:0c:f2:8b:07:61:d2:10:
cd:7d:e8:1c:d3:24:57:01:91:69:11:cd:40:8a:7d:cd:1c:b6:
d1:6c:a2:5e:1f:76:e5:8e:9f:a0:92:21:34:7c:e5:33:51:ae:
9d:f8:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:24:40 2026 by rpki-client