Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/5AgZfb7qtshb6AxnYzgA65E3i4o.roa
File: 5AgZfb7qtshb6AxnYzgA65E3i4o.roa (raw, json)
Hash identifier: tuOl5ypd9y12iLvr3Zp8dfLyPEUJgNfrWjDKhrIfKlk=
Subject key identifier: E4:08:19:7D:BE:EA:B6:C8:5B:E8:0C:67:63:38:00:EB:91:37:8B:8A
Certificate issuer: /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial: 019EBBBF49F825E6154885A2018011F2BCF6
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/5AgZfb7qtshb6AxnYzgA65E3i4o.roa
Signing time: Fri 12 Jun 2026 12:12:16 +0000
ROA not before: Fri 12 Jun 2026 12:12:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15623
IP address blocks: 45.83.68.0/22 maxlen: 22
185.242.200.0/22 maxlen: 22
2a0c:e480::/29 maxlen: 29
2a0e:d080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:bf:49:f8:25:e6:15:48:85:a2:01:80:11:f2:bc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Validity
Not Before: Jun 12 12:12:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e408197dbeeab6c85be80c67633800eb91378b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:3c:d9:9d:e9:a8:5c:0e:72:3a:4d:7e:84:
43:85:db:0f:c8:f6:46:40:ef:8c:d6:5e:44:61:c9:
6d:85:27:ba:c6:a0:9d:f3:c2:1e:56:83:d1:49:f8:
da:c6:9d:9e:2c:83:4d:d1:aa:73:5c:ce:52:6e:4f:
23:f5:c6:dd:b8:2d:d3:b8:91:40:be:70:83:ec:4e:
ed:c4:13:7d:68:1a:e5:a6:a6:2b:84:38:75:e9:da:
35:e1:2b:eb:1f:1b:ad:d8:9e:2b:01:42:a0:f8:d1:
8d:81:ec:8a:0b:74:dc:89:0b:28:2f:71:51:2c:d1:
6b:b0:0d:55:7a:87:3d:78:5a:fa:00:3c:35:bf:e8:
87:10:99:a0:f2:03:f9:6d:91:4d:01:04:d4:a8:d6:
4f:be:53:b3:10:a0:63:71:0a:20:35:8d:74:14:2d:
be:46:42:1b:07:42:48:d4:92:85:79:12:a2:82:f9:
1f:87:69:f5:d2:22:f0:5b:4e:02:06:51:68:55:3c:
e6:e8:2c:b7:ce:bc:52:5b:ee:8d:d6:97:73:c1:48:
5d:60:df:05:6b:39:37:d1:75:3b:28:04:ea:af:70:
f8:8d:b0:56:24:29:a0:11:df:a8:7e:7f:e2:05:b1:
6a:cd:d4:2f:eb:dd:98:0e:4e:70:0a:1e:33:d7:6d:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:08:19:7D:BE:EA:B6:C8:5B:E8:0C:67:63:38:00:EB:91:37:8B:8A
X509v3 Authority Key Identifier:
keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/5AgZfb7qtshb6AxnYzgA65E3i4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.68.0/22
185.242.200.0/22
IPv6:
2a0c:e480::/29
2a0e:d080::/29
Signature Algorithm: sha256WithRSAEncryption
12:3a:ba:10:59:29:43:f4:e5:c8:f8:ff:25:e5:4b:77:df:3b:
95:f0:32:fe:c3:7f:07:5e:4e:ba:14:d7:28:3b:fe:45:00:e0:
d6:cc:51:eb:f8:f0:d3:84:75:b3:62:1d:63:c1:22:1a:a7:be:
32:c6:b3:01:3f:b9:89:e2:04:dd:27:6f:6b:b3:8f:21:0e:e5:
ed:ce:13:25:3c:50:21:fa:1c:25:fb:03:f6:51:82:82:e1:5b:
b0:6e:71:e1:e4:78:25:1e:ef:70:4e:8f:4e:5d:be:f8:a8:5d:
cf:64:40:f8:18:e2:87:10:b1:77:32:52:ee:a9:4d:55:ec:e8:
b7:ec:4b:42:a1:fb:e8:18:86:20:70:e2:0a:f1:4c:50:13:6c:
c9:d0:a4:51:6a:db:e6:76:bf:eb:5c:d8:b2:5d:98:b4:4e:99:
f0:7c:a8:c4:fe:6f:f2:8a:7c:c8:0b:8c:61:c7:20:63:21:7a:
b6:14:cd:21:ac:57:8e:60:c2:d5:c1:f9:a2:47:ac:1f:b8:ed:
e0:21:f7:4a:76:aa:3d:49:6a:db:28:03:d0:e3:f9:6c:1e:5a:
5b:e0:b4:cd:26:45:90:65:d9:55:b2:b3:be:85:09:89:c5:e8:
57:70:46:d0:be:f7:35:16:b1:82:5a:72:d7:a8:ab:e5:df:8f:
db:9e:e6:dc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ67v0n4JeYVSIWiAYAR8rz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTU3N2ZhYTIzNTcxN2FlMTM0MzhlMWQ1MmVhNGI0ZTNk
YTU0OTgwHhcNMjYwNjEyMTIxMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDA4MTk3ZGJlZWFiNmM4NWJlODBjNjc2MzM4MDBlYjkxMzc4YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Q82Z3pqFwOcjpNfoRDhdsPyPZG
QO+M1l5EYclthSe6xqCd88IeVoPRSfjaxp2eLINN0apzXM5Sbk8j9cbduC3TuJFA
vnCD7E7txBN9aBrlpqYrhDh16do14SvrHxut2J4rAUKg+NGNgeyKC3TciQsoL3FR
LNFrsA1Veoc9eFr6ADw1v+iHEJmg8gP5bZFNAQTUqNZPvlOzEKBjcQogNY10FC2+
RkIbB0JI1JKFeRKigvkfh2n10iLwW04CBlFoVTzm6Cy3zrxSW+6N1pdzwUhdYN8F
azk30XU7KATqr3D4jbBWJCmgEd+ofn/iBbFqzdQv692YDk5wCh4z121ZewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOQIGX2+6rbIW+gMZ2M4AOuRN4uKMB8GA1UdIwQY
MBaAFP3ld/qiNXF64TQ44dUupLTj2lSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VWMy1xSTFjWHJoTkRqaDFTNmt0T1BhVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hYTYxOTItMDQyNy00MWM0LTk3YWQt
NmVlNzQ1MTU2ODQ0LzEvNUFnWmZiN3F0c2hiNkF4bll6Z0E2NUUzaTRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hYTYxOTItMDQyNy00MWM0LTk3YWQtNmVlNzQ1MTU2ODQ0
LzEvX2VWMy1xSTFjWHJoTkRqaDFTNmt0T1BhVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLVNEAwQC
ufLIMBQEAgACMA4DBQMqDOSAAwUDKg7QgDANBgkqhkiG9w0BAQsFAAOCAQEAEjq6
EFkpQ/TlyPj/JeVLd987lfAy/sN/B15OuhTXKDv+RQDg1sxR6/jw04R1s2IdY8Ei
Gqe+MsazAT+5ieIE3Sdva7OPIQ7l7c4TJTxQIfocJfsD9lGCguFbsG5x4eR4JR7v
cE6PTl2++Khdz2RA+BjihxCxdzJS7qlNVezot+xLQqH76BiGIHDiCvFMUBNsydCk
UWrb5na/61zYsl2YtE6Z8HyoxP5v8op8yAuMYccgYyF6thTNIaxXjmDC1cH5okes
H7jt4CH3SnaqPUlq2ygD0OP5bB5aW+C0zSZFkGXZVbKzvoUJicXoV3BG0L73NRax
glpy16ir5d+P257m3A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:16:50 2026 by rpki-client