Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5qh2tODDhtwENDRfaT7pfg4gTVY.roa
File: 5qh2tODDhtwENDRfaT7pfg4gTVY.roa (raw, json)
Hash identifier: nwGFbxvUeZsX9HZPbhOrGCLXNcXayzcMWJpsTsh4e20=
Subject key identifier: E6:A8:76:B4:E0:C3:86:DC:04:34:34:5F:69:3E:E9:7E:0E:20:4D:56
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019E68E82DF276A7CC4AE43BB5FC82D5559A
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5qh2tODDhtwENDRfaT7pfg4gTVY.roa
Signing time: Wed 27 May 2026 10:08:27 +0000
ROA not before: Wed 27 May 2026 10:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 80.253.104.0/24 maxlen: 24
80.253.115.0/24 maxlen: 24
80.253.124.0/24 maxlen: 24
83.245.32.0/22 maxlen: 22
83.245.69.0/24 maxlen: 24
83.245.70.0/24 maxlen: 24
83.245.80.0/20 maxlen: 20
89.167.152.0/22 maxlen: 22
89.167.166.0/24 maxlen: 24
213.228.204.0/24 maxlen: 24
213.228.229.0/24 maxlen: 24
213.228.243.0/24 maxlen: 24
213.228.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:e8:2d:f2:76:a7:cc:4a:e4:3b:b5:fc:82:d5:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: May 27 10:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6a876b4e0c386dc0434345f693ee97e0e204d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:88:50:ed:9c:fc:99:17:22:b1:e9:1e:5f:
e2:47:b4:be:34:76:8a:69:4e:b4:4e:e6:fa:92:f5:
a5:54:28:29:39:da:a2:5c:39:ec:de:00:c8:cf:08:
58:f9:b7:69:35:69:e4:e1:a5:a3:da:5f:29:28:2a:
3a:a8:7a:2e:8f:33:94:d0:9b:66:d5:0d:6f:aa:d1:
e1:ed:e1:b9:34:c4:9a:d1:b0:50:43:6f:10:a1:93:
c7:04:4c:28:05:6c:15:67:46:b2:c1:3b:4c:15:4a:
3d:36:a4:91:3f:00:c2:83:fd:36:dc:06:c0:08:11:
99:8b:19:eb:ab:69:24:45:bd:e0:89:27:83:99:a8:
5a:e6:5d:82:d4:51:c3:e5:64:9b:80:06:53:af:de:
4e:b5:90:79:44:8b:17:5f:4f:f8:b8:fc:ab:ac:f7:
48:07:22:8e:2f:b1:7e:b3:1f:fc:7f:d2:6b:9e:b4:
fa:54:b9:f8:4f:11:8f:78:e6:e9:c3:ad:1b:6e:67:
57:9b:ee:5f:80:51:f1:a8:c1:23:c6:4e:ab:0f:83:
dd:fd:51:86:7b:0e:c7:10:02:18:93:88:88:67:f9:
22:4d:15:ff:15:b5:da:83:16:14:7c:82:64:f7:27:
4c:97:7c:b8:95:48:74:2e:c7:a2:50:4b:db:95:87:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A8:76:B4:E0:C3:86:DC:04:34:34:5F:69:3E:E9:7E:0E:20:4D:56
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5qh2tODDhtwENDRfaT7pfg4gTVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.104.0/24
80.253.115.0/24
80.253.124.0/24
83.245.32.0/22
83.245.69.0-83.245.70.255
83.245.80.0/20
89.167.152.0/22
89.167.166.0/24
213.228.204.0/24
213.228.229.0/24
213.228.243.0/24
213.228.253.0/24
Signature Algorithm: sha256WithRSAEncryption
26:91:0a:60:b1:be:0e:d7:3d:2d:b3:1f:0f:98:eb:9c:b2:22:
b8:eb:c1:db:c4:a9:b3:b2:3b:0a:b1:2b:12:24:ca:33:89:df:
db:fa:9b:75:95:25:38:fc:8f:9c:46:6b:02:e7:87:22:34:a2:
67:3b:e7:29:d6:4e:c9:01:1f:8d:32:50:2d:be:7e:2a:92:ec:
84:c5:32:3b:b3:a1:20:12:9f:d4:a3:f6:84:7c:bb:d9:86:ad:
a4:21:07:33:a3:30:a4:de:1f:d7:8f:cd:b2:22:17:72:6f:08:
ed:ab:32:b4:07:ab:b3:39:71:2f:bd:3e:6c:57:ea:42:8f:50:
cc:d8:b9:8b:cc:f9:1f:ff:0d:9f:f3:d7:42:6a:c2:0b:68:a5:
84:ae:39:9d:28:e3:35:53:83:35:62:e1:dc:da:a0:32:fa:f0:
81:36:51:04:d6:07:13:ca:74:47:70:fe:43:6f:22:de:08:26:
f0:b5:5b:9a:e7:cb:f9:6b:35:7f:6c:d5:de:55:0b:0d:4a:ca:
5e:15:48:5c:59:42:a1:bf:71:4f:19:42:55:90:78:19:a2:85:
fa:af:28:aa:45:5f:3e:84:85:27:a8:70:2e:17:d9:65:6f:7b:
3e:74:48:69:d9:c5:70:e7:0c:2b:e0:93:e0:ce:db:28:e6:95:
2f:c7:ac:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:32:15 2026 by rpki-client