Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/A5ArWRjtzKO3ajBeJF72PGTYPcc.roa
File: A5ArWRjtzKO3ajBeJF72PGTYPcc.roa (raw, json)
Hash identifier: Ekdkv75gyvXmkr9p5x4uWHLmv98/+KtaXdBphwhCljc=
Subject key identifier: 03:90:2B:59:18:ED:CC:A3:B7:6A:30:5E:24:5E:F6:3C:64:D8:3D:C7
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019EC5270F219135262AD5407FB9D6901440
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/A5ArWRjtzKO3ajBeJF72PGTYPcc.roa
Signing time: Sun 14 Jun 2026 08:02:11 +0000
ROA not before: Sun 14 Jun 2026 08:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 11:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:27:0f:21:91:35:26:2a:d5:40:7f:b9:d6:90:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 14 08:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03902b5918edcca3b76a305e245ef63c64d83dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:0f:ff:8d:9e:f3:6a:7a:b5:28:fb:fd:bb:
16:e9:c1:02:22:dd:23:a0:19:15:17:2f:88:16:d7:
e0:b5:38:96:87:6e:ec:d1:70:d1:6c:22:84:04:ba:
a1:f9:31:41:55:82:6d:c0:d7:05:d0:39:89:26:24:
52:b2:4c:31:62:e0:e8:1d:62:21:65:46:61:4f:9b:
33:dd:1e:4f:bf:1e:4c:6d:15:26:3d:73:71:17:dd:
42:a4:a7:e1:85:7d:7e:b3:f9:bf:00:9a:9b:b9:6d:
14:65:84:b1:5a:57:cb:8f:d8:30:c7:78:0b:a3:4c:
66:98:51:06:6d:9d:f8:49:85:47:29:35:9f:3a:f8:
05:c9:f5:6b:5d:42:d1:98:0a:f9:66:2b:60:a2:55:
99:e5:c2:f3:37:ae:75:c4:58:22:87:10:c4:ed:45:
4d:1f:1d:5b:0f:96:59:bf:c6:d8:99:94:da:9e:c8:
cf:6c:cc:6a:47:36:0d:f0:40:e5:85:1e:10:51:16:
c3:f9:4c:78:fd:c3:1d:fa:fe:e7:c6:b9:a5:0a:0c:
56:a9:62:31:8c:50:ca:21:40:da:d0:2e:ff:29:b9:
d3:4b:eb:d3:80:66:02:76:b8:93:cf:63:b6:c9:cf:
4d:2b:13:78:1a:10:72:67:09:cc:57:8b:e8:e3:0c:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:2B:59:18:ED:CC:A3:B7:6A:30:5E:24:5E:F6:3C:64:D8:3D:C7
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/A5ArWRjtzKO3ajBeJF72PGTYPcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
185.144.101.0/24
185.211.49.0/24
185.227.243.0/24
193.201.211.0/24
194.36.102.0/23
194.124.66.0/24
Signature Algorithm: sha256WithRSAEncryption
01:17:52:12:0d:34:55:76:ab:21:2f:ee:38:fe:a6:59:f1:8d:
e1:40:ff:83:85:a2:fd:1e:3f:ea:0d:9c:a9:61:e4:5f:cb:95:
28:87:c5:0e:c9:42:3f:48:ee:af:3f:9b:67:46:29:9d:97:40:
2b:5a:a5:d7:b5:bb:35:19:e8:55:a6:00:c6:0e:dc:56:fa:23:
55:30:6a:fd:56:8b:dd:ab:57:27:81:37:86:5d:23:e9:4a:bb:
91:d6:be:1d:33:2b:eb:55:26:2d:0f:3e:cc:11:a6:b5:d1:02:
d2:3f:a5:8e:2f:02:8b:de:dd:11:58:a6:67:f5:62:de:8f:9f:
66:d0:2e:19:a7:3b:c6:0b:77:55:fd:63:aa:e1:62:b0:5f:c1:
d7:aa:53:43:2e:a7:6f:e1:41:b1:1a:6b:12:af:57:0b:34:cf:
4b:54:dc:b1:45:7b:51:d3:4b:fd:d4:ba:d9:0e:ee:94:1a:cf:
96:75:59:7a:a4:ab:5a:48:ca:ef:5b:ef:1e:e5:c5:0c:0d:80:
44:48:a9:95:ee:b5:f5:42:46:71:f4:a3:22:65:b9:30:27:6d:
56:2d:72:2b:ae:47:b1:4e:4f:8b:77:93:5e:ce:9e:1f:48:21:
1e:80:32:81:1a:41:e0:1c:19:34:78:80:e7:31:76:a0:5e:e4:
22:ff:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:05:23 2026 by rpki-client