Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/zlLTIm7_QxUIi55M7RwMbt95iIQ.roa
File: zlLTIm7_QxUIi55M7RwMbt95iIQ.roa (raw, json)
Hash identifier: fDPF6ZEfEYsC4ffY8eEmFZICdqyb8tsUKaWPIRXssWo=
Subject key identifier: CE:52:D3:22:6E:FF:43:15:08:8B:9E:4C:ED:1C:0C:6E:DF:79:88:84
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 019EFD68ADED549EA5753C54E345DDB96C61
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/zlLTIm7_QxUIi55M7RwMbt95iIQ.roa
Signing time: Thu 25 Jun 2026 06:12:36 +0000
ROA not before: Thu 25 Jun 2026 06:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39386
IP address blocks: 37.224.192.0/24 maxlen: 24
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
84.235.56.0/23 maxlen: 23
84.235.95.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.120.0/22 maxlen: 22
178.86.50.0/24 maxlen: 24
193.19.244.0/24 maxlen: 24
212.118.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:68:ad:ed:54:9e:a5:75:3c:54:e3:45:dd:b9:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jun 25 06:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce52d3226eff4315088b9e4ced1c0c6edf798884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e1:4c:5b:99:ba:0d:0a:31:49:00:48:7e:68:
16:73:27:26:40:6c:0c:c4:e2:00:bb:63:e7:9a:f3:
9b:7d:ba:84:e2:a6:75:b4:d5:3d:5a:b4:f2:60:e4:
1d:ae:f0:9e:d8:6f:d4:bb:b4:fd:ac:9a:b2:2b:ec:
ec:0a:fc:57:71:47:87:31:0c:74:2a:93:ce:22:cf:
91:c1:26:25:a3:83:51:d5:8d:c0:94:07:31:59:fc:
88:57:23:da:ab:c7:c7:92:f9:3e:43:37:f9:f0:2f:
a6:be:ed:76:13:43:d6:8f:c4:12:2f:f1:1e:02:03:
21:55:1d:d7:67:7f:71:cd:8b:24:eb:61:46:5d:f7:
e8:9e:2a:e8:96:c5:c9:7a:9f:e7:b6:a4:3b:a0:f8:
0c:37:2e:99:11:cf:9e:1a:88:ab:63:84:0d:8e:cb:
b8:48:a5:2f:8c:89:0e:c4:02:81:2b:08:d3:89:06:
06:ef:64:01:88:7f:49:3d:34:0b:b7:0c:93:84:86:
6b:e0:a6:c0:93:3e:47:db:3c:05:39:0c:92:94:74:
9c:a0:9c:26:9a:60:b4:5e:fe:65:48:d4:60:39:52:
af:70:9c:eb:03:29:c9:39:a5:e8:2e:8c:ff:d5:28:
a8:6b:3c:7a:aa:e8:7b:e1:4e:33:f2:8a:21:1d:31:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:D3:22:6E:FF:43:15:08:8B:9E:4C:ED:1C:0C:6E:DF:79:88:84
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/zlLTIm7_QxUIi55M7RwMbt95iIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/24
84.235.14.0/24
84.235.56.0/23
84.235.95.0/24
84.235.108.0/22
84.235.120.0/22
178.86.50.0/24
193.19.244.0/24
212.118.154.0/24
Signature Algorithm: sha256WithRSAEncryption
61:da:7c:b1:fe:c5:e6:19:9b:c1:c6:82:93:76:81:ac:ae:27:
df:de:fe:00:df:b9:73:a9:47:00:0a:5c:3d:60:86:5e:9f:e5:
ec:ec:4c:de:67:f3:2a:de:df:6f:a0:eb:32:90:1f:89:df:80:
15:e3:69:85:35:45:e1:6d:8b:18:0b:01:01:f5:fb:2a:94:74:
93:c1:59:af:94:51:44:6b:d3:cf:61:17:dc:0d:52:18:6f:11:
c1:eb:a5:40:21:c4:68:4b:c4:78:92:eb:38:41:f8:bd:0f:0e:
1f:3b:da:a7:98:49:e0:aa:06:a1:ab:7a:8e:db:99:41:97:47:
cc:e7:29:07:76:b8:69:47:3e:47:02:91:e2:f6:01:d4:85:ca:
7a:c5:27:1d:29:a5:a1:25:11:d0:cc:34:7d:df:df:5c:74:e1:
05:b0:da:87:d1:81:29:d7:2c:29:7b:a4:df:4a:f3:04:56:36:
c5:a5:6e:8d:ca:d8:e1:4b:65:1b:3a:ff:cf:eb:71:5a:e5:1b:
68:73:ba:02:9f:54:5d:4f:94:5e:b8:58:c0:05:59:ee:da:3d:
36:7d:25:1a:1f:ab:ca:b8:e8:04:6f:1d:9b:e1:57:03:84:d2:
22:02:00:f1:fa:16:23:2a:7f:f2:fd:72:6d:80:c2:b4:f3:18:
38:72:f3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:23 2026 by rpki-client