Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/r5__-xJyqn5F_2-z3QzDy0T90_M.roa
File: r5__-xJyqn5F_2-z3QzDy0T90_M.roa (raw, json)
Hash identifier: fkp/3ntblaRyVq/MaCyEWvAaDztOdcAHWSz5y3CPrW8=
Subject key identifier: AF:9F:FF:FB:12:72:AA:7E:45:FF:6F:B3:DD:0C:C3:CB:44:FD:D3:F3
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 019D7299E0160249D538D1D5F3CFF937E638
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/r5__-xJyqn5F_2-z3QzDy0T90_M.roa
Signing time: Thu 09 Apr 2026 14:16:20 +0000
ROA not before: Thu 09 Apr 2026 14:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49956
IP address blocks: 185.52.120.0/22 maxlen: 22
185.114.168.0/22 maxlen: 22
185.114.220.0/22 maxlen: 22
185.163.8.0/22 maxlen: 22
185.166.8.0/22 maxlen: 22
185.166.10.0/24 maxlen: 24
194.54.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:99:e0:16:02:49:d5:38:d1:d5:f3:cf:f9:37:e6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Apr 9 14:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af9ffffb1272aa7e45ff6fb3dd0cc3cb44fdd3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:6e:4f:9e:f1:a4:82:78:95:61:e0:88:9c:
25:90:de:ea:2a:1e:84:05:25:0d:c5:f5:09:f4:49:
63:17:5f:bb:66:5c:d4:ff:e4:fa:86:c7:fe:4b:a3:
01:0e:ad:b7:09:19:4b:84:8f:0d:4b:42:ef:e6:33:
d5:0e:2d:a1:84:db:87:7d:f5:45:e7:be:54:83:81:
73:9d:6d:1c:a6:44:0b:3a:b4:98:56:0c:ad:ac:98:
02:ba:db:0a:d4:43:35:87:e6:88:3c:be:7c:bf:13:
b7:d5:d1:8e:62:67:0a:5c:88:68:09:ba:8f:ce:c3:
c5:80:a0:69:ce:e8:8a:b5:b9:0d:b6:c7:99:79:c7:
72:74:4d:e2:e9:04:84:ca:df:a8:c6:52:11:fd:bf:
8d:30:06:6a:2c:40:48:54:18:a4:d7:de:de:8f:6a:
1d:b5:aa:b8:ac:fe:48:ae:27:e7:53:8c:2c:6e:f1:
93:53:62:a5:b2:d6:45:c4:0b:d0:6b:61:54:a9:b1:
e9:36:7a:82:11:16:ab:49:01:b5:65:87:6c:4f:66:
d7:6b:0f:c1:58:a4:db:68:a8:a5:5f:f6:94:0c:a9:
f3:89:52:f3:2d:ae:1c:0f:c7:2f:03:2e:9e:d3:1f:
ec:0e:34:bf:68:fc:a6:d9:66:95:36:d0:5e:10:c6:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:FF:FB:12:72:AA:7E:45:FF:6F:B3:DD:0C:C3:CB:44:FD:D3:F3
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/r5__-xJyqn5F_2-z3QzDy0T90_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.120.0/22
185.114.168.0/22
185.114.220.0/22
185.163.8.0/22
185.166.8.0/22
194.54.76.0/22
Signature Algorithm: sha256WithRSAEncryption
09:2d:c9:aa:5d:15:5e:4c:f0:99:c1:9b:fc:83:02:ae:83:20:
41:02:65:59:99:0c:f8:06:7a:62:2b:65:c9:ab:54:98:54:f0:
f9:ab:b1:f6:81:b8:13:6b:06:32:dd:16:1c:c7:4f:b5:d6:c2:
be:2d:5f:f6:ec:89:61:72:3d:af:a7:74:10:05:64:f7:3d:f8:
5e:a2:69:f5:4d:7f:cf:b2:dc:e2:10:5c:fa:58:be:6b:94:db:
68:d6:58:3f:3e:68:61:bd:4b:eb:1d:11:45:ed:1f:97:44:51:
28:cc:37:fe:66:81:25:1f:d3:1f:b4:be:d9:35:8b:07:1d:a8:
42:41:d1:1f:b7:73:02:dd:e0:22:66:0b:8a:a8:85:c9:16:f0:
d5:b6:5b:ea:15:c0:e7:86:48:8f:ab:51:0f:51:9e:57:f2:ac:
17:37:39:d1:29:72:f3:17:78:d1:63:a4:e6:00:23:19:f3:f3:
7d:22:d1:ce:6f:d1:c2:ba:52:47:23:48:70:10:fe:02:95:98:
c1:04:26:c0:2a:ee:f9:6b:f4:91:d7:18:0c:bd:cf:5f:b0:af:
0e:94:28:5d:9a:11:55:8b:ef:3e:ef:46:fd:1e:58:c4:98:e7:
27:bd:25:27:23:3f:8a:6f:f2:0d:f6:e0:88:11:f6:1c:01:39:
10:34:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:56 2026 by rpki-client