Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rsDmBu-3tnsGeldVQnLsKl6pTWo.roa
File: rsDmBu-3tnsGeldVQnLsKl6pTWo.roa (raw, json)
Hash identifier: Fjnrjoo2iZDdOCH+s0yhQiu4x7kq8qbMnZDUYJCkyno=
Subject key identifier: AE:C0:E6:06:EF:B7:B6:7B:06:7A:57:55:42:72:EC:2A:5E:A9:4D:6A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D5EB3FA5EDFE4948A1C4DDBBC61C0CF67
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rsDmBu-3tnsGeldVQnLsKl6pTWo.roa
Signing time: Sun 05 Apr 2026 17:32:26 +0000
ROA not before: Sun 05 Apr 2026 17:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:b3:fa:5e:df:e4:94:8a:1c:4d:db:bc:61:c0:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 5 17:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aec0e606efb7b67b067a57554272ec2a5ea94d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:91:18:9e:2d:24:38:a2:91:c4:0b:86:e0:
ff:80:81:fc:23:3e:7d:74:ca:b8:65:e2:7d:d1:4e:
7a:c5:ed:7a:99:5a:11:1d:b9:8f:e9:59:44:20:f5:
1c:ca:cb:84:df:0b:8c:01:1d:0f:70:f7:2d:4d:73:
71:81:1b:74:5c:2a:e1:45:22:2f:32:4f:01:73:85:
29:a7:e1:3b:5d:c0:4b:91:6e:5f:48:0b:40:5a:6b:
f9:6c:59:9c:f1:9d:8f:b2:bf:35:78:73:9d:d4:46:
aa:e2:73:2f:25:48:b1:74:3b:dd:cc:ff:c5:c6:f6:
d1:2a:3c:b1:2a:64:3c:cd:a9:a9:c8:93:9c:ab:d1:
e1:86:e0:c8:40:30:1e:01:04:02:89:53:f3:ba:47:
1e:0b:a5:d5:4e:ac:44:5d:7c:22:a2:f2:a0:60:14:
cf:58:32:68:ae:e8:bc:e8:b1:73:b6:06:f1:ba:cd:
f3:ed:6d:31:8e:40:0a:bf:c3:78:7c:5e:00:57:66:
7e:99:a5:be:2b:12:97:70:1f:bd:49:ab:39:f5:c3:
0e:06:a9:92:e9:12:99:4f:1a:be:a4:23:48:6b:c6:
e8:bf:a3:ff:06:bc:a4:6f:a2:41:7e:60:a2:a9:78:
da:e7:ee:a7:5f:15:18:d9:a3:74:9f:cf:8c:43:0f:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:E6:06:EF:B7:B6:7B:06:7A:57:55:42:72:EC:2A:5E:A9:4D:6A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rsDmBu-3tnsGeldVQnLsKl6pTWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.50.0/23
5.180.80.0/24
5.253.39.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.255.0-45.9.1.255
85.208.115.0/24
85.209.160.0/24
Signature Algorithm: sha256WithRSAEncryption
32:59:ff:9e:7a:bd:b4:30:66:eb:04:dc:ba:b0:48:f4:ef:cd:
41:cc:00:c7:6c:bd:d4:c4:ee:6a:c2:de:a1:61:87:9c:1d:0e:
78:00:d8:8b:c8:70:86:ce:42:a2:f1:8a:7d:be:d9:b2:c4:ee:
a6:1b:fe:80:c7:77:7e:04:29:3e:1e:f5:d2:06:ae:e8:fe:89:
34:6f:2d:27:8f:0a:84:8b:38:c7:4f:e5:02:4c:6b:a5:eb:33:
81:29:11:12:18:3a:3c:cb:c1:c7:4b:e1:98:ad:02:d7:81:b7:
76:e7:83:2f:39:48:e5:f4:1b:0b:8e:1d:65:06:2f:0a:ff:50:
6b:02:4a:94:f6:cd:1a:76:c3:39:d6:2d:17:87:8c:61:3e:9f:
2d:6e:01:aa:e6:61:3d:cc:0b:a2:86:81:b6:3b:d8:c3:4c:0b:
82:6a:5f:d3:58:2b:2b:0e:f7:30:96:bc:32:15:47:fd:4c:2f:
74:51:72:c3:7e:d4:77:cf:5c:f1:bd:2b:2c:82:79:f2:94:bd:
06:3a:e3:5e:00:29:67:2b:40:85:eb:08:1a:e3:1d:ae:e8:6a:
c1:6e:fc:32:d0:89:9e:35:70:d3:b3:27:16:af:3e:c7:43:44:
b6:3b:9c:af:28:1a:a5:38:3d:23:3d:22:9a:e3:a0:69:a7:17:
eb:31:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:05:28 2026 by rpki-client