Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5RzWM2aeIc2UZVbjfuGd_VySh-E.roa
File: 5RzWM2aeIc2UZVbjfuGd_VySh-E.roa (raw, json)
Hash identifier: 4ob5LQUfEWYyRNcRqWHTTx0SuawXYcoasMEtATvjWrQ=
Subject key identifier: E5:1C:D6:33:66:9E:21:CD:94:65:56:E3:7E:E1:9D:FD:5C:92:87:E1
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A133F028325D9595FCA4B330F010785F22
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5RzWM2aeIc2UZVbjfuGd_VySh-E.roa
Signing time: Tue 13 Oct 2026 06:25:39 +0000
ROA not before: Tue 13 Oct 2026 06:25:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399138
IP address blocks: 85.234.160.0/22 maxlen: 22
85.234.180.0/22 maxlen: 22
89.191.116.0/22 maxlen: 22
91.123.72.0/22 maxlen: 22
91.123.76.0/22 maxlen: 22
217.24.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:f0:28:32:5d:95:95:fc:a4:b3:30:f0:10:78:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 13 06:25:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51cd633669e21cd946556e37ee19dfd5c9287e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:7f:96:db:e4:87:e4:fb:63:6f:bb:64:49:
5c:bb:06:0c:e9:bd:f5:b5:ce:fb:fc:50:d3:18:e4:
23:8e:db:b8:30:7c:64:58:b5:2b:b8:9a:80:68:c2:
81:d4:7e:34:88:e5:b2:8c:1f:33:88:f8:b9:94:58:
1e:97:64:96:a8:27:9a:b4:19:8b:6d:99:e5:03:3d:
fa:e5:55:37:ab:c7:cc:21:0f:6b:cb:4f:25:f2:f1:
43:dc:f4:a2:9d:b9:e2:0b:ab:3a:a6:50:97:7a:50:
d4:1e:32:bc:36:15:c8:59:c7:11:87:b6:b6:74:45:
84:13:4d:c8:97:4e:d6:e8:e8:54:15:2f:a7:4c:d0:
27:fa:72:5b:47:93:52:64:8c:d0:f2:5a:12:57:89:
ed:65:72:72:e2:5c:fa:d6:4b:90:f0:c1:99:cb:3e:
b4:f2:7a:ac:6c:3b:d1:eb:0e:ca:fb:f4:de:3e:1a:
45:9c:1d:3e:29:10:67:5f:5b:f3:37:ab:b8:81:45:
31:24:38:c9:87:00:e7:a3:eb:5e:92:5e:7c:3a:d8:
ff:29:34:4a:e8:f1:50:05:a5:30:e8:d6:b4:67:60:
1a:6a:c5:49:75:6c:a3:0e:7b:1b:05:e3:0f:cb:c2:
51:1d:b6:6f:76:a0:19:3d:58:42:68:a3:32:17:cd:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1C:D6:33:66:9E:21:CD:94:65:56:E3:7E:E1:9D:FD:5C:92:87:E1
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5RzWM2aeIc2UZVbjfuGd_VySh-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.160.0/22
85.234.180.0/22
89.191.116.0/22
91.123.72.0/21
217.24.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:7e:16:fb:2e:52:5d:fe:36:9a:7c:5f:e2:49:fa:fd:43:b9:
67:17:48:19:52:49:e9:c8:05:4d:4f:5c:8a:de:69:01:53:17:
87:ab:79:6c:86:cd:c1:d5:6d:6c:41:ab:37:f3:14:6c:bb:79:
b7:8d:7e:9c:51:9c:9f:a5:62:9b:07:82:66:a0:d6:e4:8a:e3:
c9:4f:c2:2e:fa:f0:2e:21:f3:44:a4:91:cd:f2:f9:b3:b7:95:
2c:4a:74:28:25:4a:a1:8a:39:df:8c:da:fd:c0:95:1b:e1:1a:
75:6c:92:e2:6c:3f:1b:90:d9:d0:b9:03:29:96:4d:17:37:31:
a2:67:6f:b7:f4:62:f2:01:5d:5e:85:42:e2:f6:24:f2:2e:ad:
94:6e:38:94:f3:10:e5:53:ba:00:29:f7:96:41:e6:15:19:a0:
90:b1:5c:8c:87:d9:ef:a7:4d:af:1b:fb:2b:3d:3b:c2:7a:c3:
99:a5:72:ab:ec:d3:d0:0b:9f:fb:8f:b1:0c:f3:4f:f4:53:a8:
5f:10:d7:5d:d4:97:46:08:cc:66:c9:dd:b0:50:ea:74:0d:3c:
b4:af:05:c1:0c:f3:df:d5:39:78:c2:d2:1c:8c:06:b8:d9:3c:
15:75:c0:ca:a3:0f:a8:15:9e:c9:8c:e5:ce:da:92:6a:3a:56:
74:34:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:00:34 2026 by rpki-client