Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/z-B5VFL8mazobgoCJt9JtfgIImE.roa
File: z-B5VFL8mazobgoCJt9JtfgIImE.roa (raw, json)
Hash identifier: I1Jf4f5fZHe3sW7+K+SuzdqNrTSkP+c/l3BU74Wl4NY=
Subject key identifier: CF:E0:79:54:52:FC:99:AC:E8:6E:0A:02:26:DF:49:B5:F8:08:22:61
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 01A15636DE89CF0DC73676B3CAE2B131D16D
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/z-B5VFL8mazobgoCJt9JtfgIImE.roa
Signing time: Mon 19 Oct 2026 22:09:58 +0000
ROA not before: Mon 19 Oct 2026 22:09:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61049
IP address blocks: 80.252.124.0/24 maxlen: 24
185.20.52.0/24 maxlen: 24
185.20.53.0/24 maxlen: 24
185.20.54.0/24 maxlen: 24
185.20.55.0/24 maxlen: 24
185.159.191.0/24 maxlen: 24
185.195.116.0/24 maxlen: 24
185.195.117.0/24 maxlen: 24
185.195.118.0/24 maxlen: 24
185.195.119.0/24 maxlen: 24
185.231.216.0/24 maxlen: 24
185.231.217.0/24 maxlen: 24
185.231.218.0/24 maxlen: 24
2a04:13c0::/32 maxlen: 32
2a04:13c1::/32 maxlen: 32
2a04:13c3::/32 maxlen: 32
2a04:13c5::/32 maxlen: 32
2a04:13c6::/32 maxlen: 32
2a04:13c6:100::/40 maxlen: 40
2a0c:8301::/32 maxlen: 32
2a0c:8305::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:36:de:89:cf:0d:c7:36:76:b3:ca:e2:b1:31:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Oct 19 22:09:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfe0795452fc99ace86e0a0226df49b5f8082261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:22:84:7d:6d:d6:4a:74:42:ab:eb:c5:37:
74:71:05:0d:1c:2e:ec:d6:af:68:91:f0:d5:f3:00:
56:cb:8a:e1:88:c3:1d:a3:a5:94:eb:28:ec:eb:1c:
fe:14:e5:73:2b:14:8e:f9:df:f0:fe:13:40:67:d7:
c9:de:4e:ce:c5:cd:51:59:26:c2:b0:84:44:2e:26:
85:e0:3b:41:45:ac:43:0f:e4:43:2d:7b:81:07:93:
51:62:50:96:99:0a:f0:08:a3:c3:2b:a3:68:0e:04:
02:2f:71:e2:3f:6f:26:bf:f8:0a:e3:93:92:79:37:
ed:53:be:7e:6f:81:38:18:d5:62:7d:70:83:d0:17:
98:39:c0:00:36:a5:e6:77:cb:bf:04:ab:ac:8c:ca:
78:34:33:9c:b2:97:7a:b2:f1:e2:c2:84:ef:91:23:
19:e5:45:68:74:08:f0:5a:72:5b:97:10:b4:7c:23:
d1:68:8f:17:00:e4:41:0d:1d:b3:cb:14:9e:df:37:
00:35:63:10:8c:e9:82:21:01:32:95:bd:f5:ad:88:
a8:3b:82:8c:ac:f5:01:39:68:6d:d2:f6:ee:f7:00:
7c:34:4d:3e:fd:ff:f5:46:2c:db:bb:62:16:a0:f5:
2d:cf:cc:23:a2:2e:e1:bb:15:79:3e:50:6b:d8:16:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:79:54:52:FC:99:AC:E8:6E:0A:02:26:DF:49:B5:F8:08:22:61
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/z-B5VFL8mazobgoCJt9JtfgIImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.124.0/24
185.20.52.0/22
185.159.191.0/24
185.195.116.0/22
185.231.216.0-185.231.218.255
IPv6:
2a04:13c0::/31
2a04:13c3::/32
2a04:13c5::-2a04:13c6:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:8301::/32
2a0c:8305::/32
Signature Algorithm: sha256WithRSAEncryption
63:a2:9d:52:e0:72:60:c9:af:50:c4:61:47:af:df:f5:ee:04:
f4:df:22:9b:62:af:ad:00:a0:e9:ec:18:a4:e9:95:88:27:ed:
a4:ca:53:10:b6:0d:2d:41:39:d2:ba:ca:d6:91:db:84:7c:ae:
ff:b9:a3:e9:72:b7:0e:d1:02:db:6d:d5:c4:99:bf:13:9b:76:
e7:81:a8:9e:16:65:3c:97:95:92:a5:19:28:25:13:5b:d7:d0:
5c:86:9b:9b:77:09:bb:08:22:be:d4:05:75:aa:92:7a:51:bf:
cc:eb:67:e0:41:24:7f:33:e6:d6:1c:bd:b9:c5:fb:49:1b:57:
d1:a7:7e:ea:f1:6f:e1:c1:67:f9:71:70:27:a4:96:00:b1:ca:
21:26:ed:78:00:2e:61:1e:19:e2:6c:56:29:d5:cb:84:70:21:
ca:78:7d:7a:03:b8:78:5c:af:6d:97:47:3a:a2:3a:07:d2:2c:
3a:42:b5:3f:a5:97:41:b4:70:37:0e:d1:63:c2:61:d2:d3:f0:
58:f5:84:ac:65:2e:b3:5d:c5:f3:b9:1e:4e:a6:87:15:a6:3d:
38:1f:ae:d8:4e:46:a3:07:56:ea:61:3c:d4:0b:b0:de:76:dd:
95:25:f6:4a:24:98:4a:d4:56:2d:26:a4:0f:25:0b:3a:fe:d3:
23:bb:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:57 2026 by rpki-client