Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/5oWhiFwGFcfXZHnE2d1SP87QB8o.roa
File: 5oWhiFwGFcfXZHnE2d1SP87QB8o.roa (raw, json)
Hash identifier: PLgcqNiJpgmQue599/AjXnaE7M6VZQryMqw5mChZ3GI=
Subject key identifier: E6:85:A1:88:5C:06:15:C7:D7:64:79:C4:D9:DD:52:3F:CE:D0:07:CA
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 019F6B0300332AAACCDC314D32B3711FD967
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/5oWhiFwGFcfXZHnE2d1SP87QB8o.roa
Signing time: Thu 16 Jul 2026 12:59:46 +0000
ROA not before: Thu 16 Jul 2026 12:59:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201675
IP address blocks: 45.151.220.0/22 maxlen: 22
85.137.232.0/22 maxlen: 22
89.21.80.0/22 maxlen: 22
139.100.4.0/23 maxlen: 23
149.232.242.0/24 maxlen: 24
185.67.144.0/22 maxlen: 22
2a05:1000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:03:00:33:2a:aa:cc:dc:31:4d:32:b3:71:1f:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Jul 16 12:59:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e685a1885c0615c7d76479c4d9dd523fced007ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:a6:19:4f:65:46:8a:23:1e:a3:2a:8d:c3:
0e:96:99:41:89:66:01:4c:13:b7:3d:5c:38:78:fe:
e7:4d:bb:19:8a:c3:89:5d:38:59:45:f3:e2:1a:8e:
f1:77:2d:43:26:83:05:3e:ff:e6:07:26:d8:3e:cc:
fe:21:fe:0d:21:ff:63:2b:d5:32:30:9d:30:f6:00:
2c:01:75:f4:74:c1:0a:75:1c:be:a2:23:f2:21:6e:
fd:55:26:a2:00:3d:8e:65:54:e2:66:d7:04:c3:c6:
56:13:e1:b4:8c:e5:be:23:e2:5b:75:51:94:ef:bd:
56:a2:03:6e:10:8f:28:c0:b1:71:c5:33:d6:60:86:
52:85:e2:88:d9:4e:91:49:64:9d:79:94:f9:fa:a5:
7e:28:36:80:dd:11:32:ff:95:6e:09:36:ff:45:96:
c9:a7:d2:8e:59:af:8a:8c:09:a1:21:22:70:3f:3e:
01:8f:54:8c:a4:15:fe:af:4f:54:63:e4:32:93:bb:
46:73:c3:bf:a0:87:05:a7:29:ec:e1:09:47:4a:47:
bc:19:38:c8:81:66:1c:41:c1:7b:2a:94:b0:83:e5:
e7:b0:c2:67:40:24:06:8c:9e:6d:3e:0d:b2:b6:c7:
2d:26:56:bf:65:46:c0:bc:43:a9:0c:26:05:c8:ce:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:85:A1:88:5C:06:15:C7:D7:64:79:C4:D9:DD:52:3F:CE:D0:07:CA
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/5oWhiFwGFcfXZHnE2d1SP87QB8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.220.0/22
85.137.232.0/22
89.21.80.0/22
139.100.4.0/23
149.232.242.0/24
185.67.144.0/22
IPv6:
2a05:1000::/29
Signature Algorithm: sha256WithRSAEncryption
66:38:1e:a6:12:52:a7:19:8f:7f:99:07:6c:c7:d1:34:64:e7:
89:e9:8c:94:15:25:f5:be:fc:e0:b6:96:c3:57:d1:03:7d:a9:
74:4b:e6:0d:75:1c:e5:76:9f:13:26:05:99:6c:8c:33:9b:72:
f5:15:4f:1c:63:be:e1:0d:96:6a:bc:65:48:ae:96:e8:dc:81:
00:9a:30:fb:dd:4c:ba:4e:82:8b:fa:80:25:bb:6b:18:d1:34:
ac:f9:3d:ba:07:f2:c9:6b:94:2e:c1:0d:31:e0:55:06:54:38:
69:2a:b9:18:45:e1:73:e3:9e:a0:18:5c:88:e9:53:7e:f5:01:
36:d3:d9:93:b9:0e:d7:9b:56:a4:0c:55:61:c5:92:c7:ef:d2:
c0:97:41:1a:f1:3f:7a:99:b5:14:4a:8a:9e:6d:d7:8e:98:3b:
a0:19:8b:6f:84:3e:8b:29:7c:57:d4:00:51:28:f8:20:c1:43:
44:9b:6a:bd:a3:eb:82:b9:dd:d8:9a:be:6f:5c:e0:74:5e:d8:
72:f1:ea:d2:ab:8d:dd:77:a1:1d:73:18:ea:d6:c4:cd:bd:8c:
f9:9f:62:39:bb:bb:1e:74:1c:4c:29:8c:cc:09:c0:8f:cb:42:
99:07:57:3b:76:96:de:c0:9a:49:7b:14:2a:48:d1:f9:96:11:
03:64:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:46 2026 by rpki-client