Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/5tzteWGlFwKyjVQ8xPXj-51OvPg.roa
File: 5tzteWGlFwKyjVQ8xPXj-51OvPg.roa (raw, json)
Hash identifier: xh5JVCDA4vTE54YP7MSyM/w2gDnbTUxL3iC/W96lliI=
Subject key identifier: E6:DC:ED:79:61:A5:17:02:B2:8D:54:3C:C4:F5:E3:FB:9D:4E:BC:F8
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01A0A43981F41E9AAB3664D1D6D9B0645227
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/5tzteWGlFwKyjVQ8xPXj-51OvPg.roa
Signing time: Tue 15 Sep 2026 08:40:27 +0000
ROA not before: Tue 15 Sep 2026 08:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56611
IP address blocks: 80.82.71.0/24 maxlen: 24
80.82.72.0/24 maxlen: 24
80.82.75.0/24 maxlen: 24
185.173.232.0/24 maxlen: 24
185.173.234.0/24 maxlen: 24
2a02:6c8::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:39:81:f4:1e:9a:ab:36:64:d1:d6:d9:b0:64:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Sep 15 08:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6dced7961a51702b28d543cc4f5e3fb9d4ebcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:ae:2e:7a:f0:8d:ef:ec:fe:c5:86:12:73:
75:26:7f:7d:54:cf:06:1e:f7:7c:6e:7b:36:73:e7:
c4:e9:ad:e5:8f:15:a8:10:f6:63:56:46:e1:87:da:
0b:c3:95:42:77:5e:6d:ee:ea:fd:e9:43:93:06:09:
b1:26:6b:39:5f:e4:9a:e0:c3:a7:eb:17:99:0f:d6:
01:86:c8:df:df:cf:88:a1:42:87:00:3b:86:3b:f8:
99:89:6c:83:e0:b6:a1:3d:d4:50:3d:3a:17:b7:e4:
5b:15:e7:af:8d:60:2e:d3:24:7e:32:90:90:9a:dd:
21:6b:21:71:3b:07:33:58:f2:a3:d7:8c:b3:e2:59:
28:e3:16:48:14:c2:b4:cf:d6:2f:e6:58:34:c7:fc:
2a:d8:00:d1:cd:8e:c4:18:69:b3:00:fa:21:bb:d2:
1b:35:a0:93:6f:da:c4:2d:2b:45:56:6f:95:c1:c8:
65:92:d5:ad:a0:1f:9d:3a:3a:fa:9d:21:8e:ba:f1:
12:28:4d:e9:c8:ea:b1:ca:fc:56:62:3c:bb:6f:48:
d8:b1:4b:95:bd:91:bd:5a:91:1c:b6:6f:ca:10:f7:
41:c1:17:fb:69:ca:60:b9:22:db:a0:66:32:d8:ed:
02:35:e9:63:a2:56:d7:b4:8f:25:ff:83:88:3f:cb:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:ED:79:61:A5:17:02:B2:8D:54:3C:C4:F5:E3:FB:9D:4E:BC:F8
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/5tzteWGlFwKyjVQ8xPXj-51OvPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.71.0-80.82.72.255
80.82.75.0/24
185.173.232.0/24
185.173.234.0/24
IPv6:
2a02:6c8::/33
Signature Algorithm: sha256WithRSAEncryption
8b:b9:48:56:59:71:c9:fa:1c:57:c5:51:2c:10:06:d2:ad:a7:
fe:27:a4:70:e1:c7:ca:05:9a:c0:b4:87:99:c1:e6:63:e4:97:
0d:d3:ab:f3:00:02:ef:8d:e3:05:db:1b:ba:2a:fc:54:ab:8a:
54:32:38:3d:65:6b:5b:f6:6d:1b:8a:42:88:57:0d:78:63:21:
71:5e:e5:39:91:20:d4:8e:d1:30:b8:46:0a:ff:6e:eb:39:f9:
53:43:00:26:30:83:04:84:65:61:7f:c3:bb:36:97:43:34:94:
ea:c6:a6:ab:5c:86:31:61:26:87:5a:07:e1:9a:f2:6d:80:bf:
6e:81:3f:5f:df:24:86:3a:6d:de:f5:e8:92:5a:aa:83:d6:3f:
50:03:ca:d4:97:59:cb:a1:4d:f8:57:19:e0:64:a3:e8:2e:1a:
e5:70:e4:a2:77:5d:05:78:9b:28:86:88:36:06:a4:5d:c6:22:
bd:07:6d:ac:51:f0:d9:03:96:31:a1:6a:a4:9d:c0:f7:4b:c1:
3b:f1:a5:09:d1:7c:0e:c6:df:4f:1c:74:78:1c:5b:06:0c:52:
78:03:e8:47:51:82:d6:30:b5:34:38:ab:cf:d2:2b:f4:37:8b:
ba:d4:f2:e4:3e:52:be:6d:3a:f5:2d:c6:be:e9:36:74:29:19:
49:0d:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:45 2026 by rpki-client