Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fzM6rmElLXDyAvPXJQj_IpNjn_E.roa
File: fzM6rmElLXDyAvPXJQj_IpNjn_E.roa (raw, json)
Hash identifier: gHT4XC2Dx96JndFzbxwd1B5sdCpBkQcp00vB4WzTRiE=
Subject key identifier: 7F:33:3A:AE:61:25:2D:70:F2:02:F3:D7:25:08:FF:22:93:63:9F:F1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D77C4D124D1424589A3CC9FD8BFD92F12
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fzM6rmElLXDyAvPXJQj_IpNjn_E.roa
Signing time: Fri 10 Apr 2026 14:21:20 +0000
ROA not before: Fri 10 Apr 2026 14:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41111
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.27.0/24 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/24 maxlen: 24
45.15.129.0/24 maxlen: 24
45.66.160.0/22 maxlen: 24
45.86.66.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.128.60.0/24 maxlen: 24
45.136.117.0/24 maxlen: 24
45.136.124.0/22 maxlen: 24
45.149.115.0/24 maxlen: 24
85.208.119.0/24 maxlen: 24
85.209.155.0/24 maxlen: 24
85.209.156.0/22 maxlen: 24
85.209.194.0/24 maxlen: 24
88.218.92.0/24 maxlen: 24
88.218.94.0/24 maxlen: 24
88.218.95.0/24 maxlen: 24
194.36.36.0/24 maxlen: 24
194.36.37.0/24 maxlen: 24
194.55.136.0/23 maxlen: 24
194.55.189.0/24 maxlen: 24
194.59.221.0/24 maxlen: 24
194.59.245.0/24 maxlen: 24
194.76.146.0/24 maxlen: 24
194.76.147.0/24 maxlen: 24
194.76.154.0/23 maxlen: 24
194.124.250.0/23 maxlen: 24
213.59.126.0/24 maxlen: 24
213.59.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:c4:d1:24:d1:42:45:89:a3:cc:9f:d8:bf:d9:2f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 10 14:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f333aae61252d70f202f3d72508ff2293639ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:ed:5e:19:8a:64:70:18:bb:b8:7d:17:d4:
e9:d3:c2:cb:aa:a9:65:ff:94:c3:6c:67:4d:a2:6c:
ac:c9:cb:d3:a7:4c:90:11:7c:38:69:b5:79:6b:73:
71:95:f1:fe:19:d5:68:69:76:e6:43:17:06:5e:05:
f7:b3:6b:07:6c:70:d7:b7:39:d4:30:04:46:a5:e6:
b5:5d:3e:43:45:b0:d5:01:3f:ce:3f:d8:17:a9:8e:
16:c7:35:3b:98:de:28:d3:e8:e4:70:91:08:82:1b:
bc:b8:02:af:b7:97:e7:c0:d6:f3:74:ed:ac:05:d1:
0a:fb:7a:ec:dc:7b:26:bc:64:e6:f6:63:9f:48:2b:
b4:a0:b7:14:b2:35:a5:13:b4:83:96:f3:ca:da:ab:
98:23:33:ab:d0:83:1a:d1:eb:d7:4d:31:35:cb:57:
bf:6f:35:3c:e8:b0:2a:34:29:1e:9c:26:85:de:50:
a4:2e:0e:87:b6:4a:94:01:fd:73:a8:32:4a:77:24:
a9:23:48:46:86:c0:b8:d7:f5:27:94:75:db:b0:d4:
ba:72:3d:7a:c2:f3:93:09:f4:90:4b:d6:b7:38:de:
f9:05:b2:00:85:ed:60:c8:f6:34:fd:9d:af:23:b3:
3a:fc:4f:c0:9e:ed:31:1a:dd:eb:6f:f4:c2:dd:96:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:3A:AE:61:25:2D:70:F2:02:F3:D7:25:08:FF:22:93:63:9F:F1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fzM6rmElLXDyAvPXJQj_IpNjn_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/23
5.180.27.0/24
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
5.180.145.0/24
5.180.147.0/24
5.253.28.0/22
5.253.42.0/24
45.15.125.0/24
45.15.128.0/23
45.66.160.0/22
45.86.66.0/24
45.86.70.0/24
45.86.74.0/24
45.128.60.0/24
45.136.117.0/24
45.136.124.0/22
45.149.115.0/24
85.208.119.0/24
85.209.155.0-85.209.159.255
85.209.194.0/24
88.218.92.0/24
88.218.94.0/23
194.36.36.0/23
194.55.136.0/23
194.55.189.0/24
194.59.221.0/24
194.59.245.0/24
194.76.146.0/23
194.76.154.0/23
194.124.250.0/23
213.59.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:9e:f4:f5:1f:18:f9:fa:82:a2:25:a7:47:31:8a:e4:b4:20:
f7:4f:53:38:36:00:50:fa:84:c5:1e:b3:13:33:12:7c:2d:93:
5c:55:75:05:0a:d4:d8:e2:f6:a4:03:4b:2c:63:37:e8:7d:b2:
5a:67:e0:5e:9c:61:07:3e:a2:e7:69:11:b5:4e:dc:a1:0b:ac:
a2:2a:65:f2:6e:42:4f:09:74:63:db:bf:40:a1:de:a8:93:1f:
8e:85:f6:c0:b9:94:27:e4:83:06:70:5f:48:9f:87:05:37:81:
f5:29:aa:76:ca:0d:b4:58:c6:5c:69:8b:fc:d0:ea:c4:44:2f:
eb:c6:b2:ec:96:d2:a4:bd:dd:a5:5e:3b:57:e4:d5:07:d6:40:
a5:3a:e2:a3:fe:f5:ad:ba:e3:c1:7d:ff:a1:39:6f:33:42:78:
fa:a9:4e:ce:f3:14:35:8e:09:f1:51:b2:88:b4:31:48:c9:14:
28:4a:16:44:0f:78:01:ff:47:72:bb:37:ab:fe:75:3f:70:11:
1b:aa:21:ff:dc:de:cb:62:7f:46:6b:06:52:af:31:e5:b8:06:
69:5e:e9:25:a2:13:93:e4:35:b5:8f:29:3c:3c:94:19:a2:2c:
1c:71:83:04:d1:9d:45:53:07:81:94:d1:75:bd:e4:a0:27:d9:
3e:49:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:38 2026 by rpki-client