Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa
File: T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa (raw, json)
Hash identifier: /9TV0tPt7Hezx8nofCt10e+R7phZBTBRrAT2/hbBfq0=
Subject key identifier: 4F:65:E5:12:1E:A4:F2:85:C0:E6:6F:C7:9A:47:3B:25:EA:BC:EF:65
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 01A06C5EFFD70426A8B23719C420E8B29EEC
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa
Signing time: Fri 04 Sep 2026 12:22:40 +0000
ROA not before: Fri 04 Sep 2026 12:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199081
IP address blocks: 5.172.192.0/20 maxlen: 20
5.172.192.0/22 maxlen: 22
5.172.192.0/24 maxlen: 24
5.172.193.0/24 maxlen: 24
5.172.194.0/24 maxlen: 24
5.172.195.0/24 maxlen: 24
5.172.196.0/22 maxlen: 22
5.172.196.0/24 maxlen: 24
5.172.197.0/24 maxlen: 24
5.172.198.0/24 maxlen: 24
5.172.199.0/24 maxlen: 24
5.172.200.0/22 maxlen: 22
5.172.201.0/24 maxlen: 24
5.172.202.0/24 maxlen: 24
5.172.203.0/24 maxlen: 24
5.172.204.0/22 maxlen: 22
5.172.204.0/24 maxlen: 24
5.172.205.0/24 maxlen: 24
5.172.206.0/24 maxlen: 24
45.66.185.0/24 maxlen: 24
45.66.186.0/24 maxlen: 24
45.66.187.0/24 maxlen: 24
91.193.60.0/22 maxlen: 22
91.193.60.0/24 maxlen: 24
91.193.61.0/24 maxlen: 24
91.193.62.0/24 maxlen: 24
91.193.63.0/24 maxlen: 24
109.68.144.0/21 maxlen: 21
109.68.144.0/24 maxlen: 24
109.68.145.0/24 maxlen: 24
109.68.147.0/24 maxlen: 24
109.68.149.0/24 maxlen: 24
109.68.150.0/24 maxlen: 24
178.21.168.0/21 maxlen: 21
178.21.168.0/22 maxlen: 22
178.21.168.0/24 maxlen: 24
178.21.169.0/24 maxlen: 24
178.21.170.0/24 maxlen: 24
178.21.171.0/24 maxlen: 24
178.21.172.0/22 maxlen: 22
178.21.172.0/24 maxlen: 24
178.21.173.0/24 maxlen: 24
178.21.174.0/24 maxlen: 24
178.21.175.0/24 maxlen: 24
185.70.76.0/22 maxlen: 22
185.70.76.0/24 maxlen: 24
185.70.77.0/24 maxlen: 24
185.70.78.0/23 maxlen: 23
185.70.78.0/24 maxlen: 24
185.70.79.0/24 maxlen: 24
185.88.23.0/24 maxlen: 24
185.118.125.0/24 maxlen: 24
185.168.36.0/22 maxlen: 22
185.168.38.0/23 maxlen: 23
185.168.38.0/24 maxlen: 24
185.168.39.0/24 maxlen: 24
185.205.96.0/22 maxlen: 22
185.205.96.0/24 maxlen: 24
185.205.97.0/24 maxlen: 24
185.205.99.0/24 maxlen: 24
195.35.92.0/22 maxlen: 22
2a02:4fc0::/32 maxlen: 32
2a02:4fc0:4000::/48 maxlen: 48
2a02:4fc0:4001::/48 maxlen: 48
2a02:4fc0:4002::/48 maxlen: 48
2a02:4fc0:4003::/48 maxlen: 48
2a02:4fc0:4100::/40 maxlen: 40
2a02:4fc0:4100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:5e:ff:d7:04:26:a8:b2:37:19:c4:20:e8:b2:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Sep 4 12:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f65e5121ea4f285c0e66fc79a473b25eabcef65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:20:b5:2a:a7:c6:99:a1:29:f5:0c:17:4c:
74:f9:87:9b:7d:8d:00:74:22:15:63:91:dd:40:d8:
8d:e5:27:3d:59:b5:94:3d:49:a3:1c:57:2d:77:f7:
52:0f:f5:8a:a1:50:94:51:9d:fd:74:0c:02:a0:f0:
df:49:47:f8:5e:af:ea:4d:8d:f2:ad:80:02:21:e2:
2c:62:39:5e:44:f1:a3:b6:97:cf:5c:9d:ba:60:c6:
62:94:5c:d7:1d:69:03:62:22:fb:35:c6:1c:8b:f5:
32:74:82:96:17:31:b2:61:93:60:3d:de:50:a5:9d:
ec:84:35:1d:19:ae:49:29:6a:a3:9f:57:c5:cb:15:
4d:6b:89:2f:d1:dc:6a:f4:67:ad:2d:ac:09:20:10:
ce:95:22:63:32:73:01:46:14:18:22:d1:45:f5:8a:
3a:11:0c:d7:5d:ea:ff:f8:fa:98:dd:5c:af:ea:3e:
aa:9f:ba:25:1f:cf:8f:92:e4:26:49:81:1f:05:c9:
03:bb:4c:6a:0d:ad:03:a9:44:03:aa:4e:fb:58:36:
0f:09:b5:09:49:43:01:ab:4f:a5:59:4f:b1:d2:4c:
36:d4:3c:3f:22:73:bb:19:ba:0b:1f:4a:aa:4d:11:
33:c6:e9:c9:95:15:fb:09:4d:b7:bc:0f:de:42:40:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:E5:12:1E:A4:F2:85:C0:E6:6F:C7:9A:47:3B:25:EA:BC:EF:65
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.192.0/20
45.66.185.0-45.66.187.255
91.193.60.0/22
109.68.144.0/21
178.21.168.0/21
185.70.76.0/22
185.88.23.0/24
185.118.125.0/24
185.168.36.0/22
185.205.96.0/22
195.35.92.0/22
IPv6:
2a02:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
22:bd:42:aa:03:d9:53:21:24:e5:16:ce:57:56:07:c5:20:ad:
19:99:12:dd:1a:1d:42:bf:2b:3e:89:92:47:51:7e:42:5e:a0:
69:22:4f:5c:b3:0f:27:97:68:b9:d1:ba:65:06:9b:79:34:2e:
17:b4:42:80:86:de:32:9b:7d:fc:22:f7:9b:dc:f4:79:80:f6:
4b:de:b0:02:e3:4e:6a:39:2d:a3:d9:58:46:21:da:2b:17:18:
79:d9:16:69:90:bd:a7:33:da:29:72:b4:52:20:73:d2:0e:fd:
23:37:04:91:7a:73:d1:82:93:fd:e9:58:bc:47:9f:8b:61:06:
56:18:8f:76:df:dd:21:cc:ea:3d:58:26:a4:11:6f:1a:34:ea:
e9:c9:f9:ec:fe:f3:c1:02:fb:70:ed:b6:b0:61:10:bd:12:a6:
e2:7d:9f:97:b8:77:3b:e2:49:ce:78:8f:f8:fe:e9:44:f4:21:
03:bb:33:33:fc:6f:50:c6:82:a7:3a:46:35:2f:ab:42:c5:91:
1c:9e:10:5e:53:66:99:33:fc:af:62:7f:a1:a0:be:7b:48:2b:
7f:09:dc:75:ef:90:bc:8d:24:23:05:28:9c:35:2d:c2:3e:b8:
d1:0a:97:22:e4:41:4d:14:77:51:5e:c1:56:14:eb:85:8d:d5:
6f:d3:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:08 2026 by rpki-client