Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/_o7WbsRWfS-jqdAXq6UGptYBqYs.roa
File: _o7WbsRWfS-jqdAXq6UGptYBqYs.roa (raw, json)
Hash identifier: iob3yEsPtOhnzXmM7YWypnJ14BnEiiC2+5wnnP/TvnA=
Subject key identifier: FE:8E:D6:6E:C4:56:7D:2F:A3:A9:D0:17:AB:A5:06:A6:D6:01:A9:8B
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 019FB3447482867E0BF752F2CE2E441B9917
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/_o7WbsRWfS-jqdAXq6UGptYBqYs.roa
Signing time: Thu 30 Jul 2026 13:43:55 +0000
ROA not before: Thu 30 Jul 2026 13:43:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5405
IP address blocks: 5.183.211.0/24 maxlen: 24
45.153.81.0/24 maxlen: 24
45.153.82.0/23 maxlen: 23
81.27.68.0/24 maxlen: 24
81.27.69.0/24 maxlen: 24
81.27.70.0/24 maxlen: 24
94.103.180.0/24 maxlen: 24
185.93.213.0/24 maxlen: 24
185.134.66.0/24 maxlen: 24
185.134.67.0/24 maxlen: 24
2a11:4140::/29 maxlen: 29
2a11:4140:1000::/36 maxlen: 36
2a11:4140:2000::/36 maxlen: 36
2a11:4140:3000::/36 maxlen: 36
2a11:4140:4000::/36 maxlen: 36
2a11:4140:5000::/36 maxlen: 36
2a11:4140:6000::/36 maxlen: 36
2a11:4140:7000::/36 maxlen: 36
2a11:4140:8000::/36 maxlen: 36
2a11:4140:9000::/36 maxlen: 36
2a11:4140:a000::/36 maxlen: 36
2a11:4140:b000::/36 maxlen: 36
2a11:4140:c000::/36 maxlen: 36
2a11:4140:d000::/36 maxlen: 36
2a11:4140:e000::/36 maxlen: 36
2a11:4140:f000::/36 maxlen: 36
2a11:4141::/36 maxlen: 36
2a11:4141:1000::/36 maxlen: 36
2a11:4141:3000::/36 maxlen: 36
2a11:4141:4000::/36 maxlen: 36
2a11:4141:5000::/36 maxlen: 36
2a11:4141:6000::/36 maxlen: 36
2a11:4141:7000::/36 maxlen: 36
2a11:4141:8000::/36 maxlen: 36
2a11:4141:9000::/36 maxlen: 36
2a11:4141:b000::/36 maxlen: 36
2a11:4141:c000::/36 maxlen: 36
2a11:4141:d000::/36 maxlen: 36
2a11:4141:e000::/36 maxlen: 36
2a11:4141:f000::/36 maxlen: 36
2a11:4142::/36 maxlen: 36
2a11:4142:1000::/36 maxlen: 36
2a11:4142:2000::/36 maxlen: 36
2a11:4142:3000::/36 maxlen: 36
2a11:4142:4000::/36 maxlen: 36
2a11:4142:5000::/36 maxlen: 36
2a11:4142:6000::/36 maxlen: 36
2a11:4142:7000::/36 maxlen: 36
2a11:4142:8000::/36 maxlen: 36
2a11:4142:9000::/36 maxlen: 36
2a11:4142:b000::/36 maxlen: 36
2a11:4142:c000::/36 maxlen: 36
2a11:4142:d000::/36 maxlen: 36
2a11:4142:e000::/36 maxlen: 36
2a11:4142:f000::/36 maxlen: 36
2a11:4143::/36 maxlen: 36
2a11:4143:1000::/36 maxlen: 36
2a11:4143:3000::/36 maxlen: 36
2a11:4143:4000::/36 maxlen: 36
2a11:4146::/36 maxlen: 36
2a11:4146:8000::/36 maxlen: 36
2a11:4147:4000::/36 maxlen: 36
2a11:4147:7000::/36 maxlen: 36
2a11:4147:8000::/36 maxlen: 36
2a11:4147:9000::/36 maxlen: 36
2a11:4147:b000::/36 maxlen: 36
2a11:4147:c000::/36 maxlen: 36
2a11:4147:d000::/36 maxlen: 36
2a11:4147:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:44:74:82:86:7e:0b:f7:52:f2:ce:2e:44:1b:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jul 30 13:43:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe8ed66ec4567d2fa3a9d017aba506a6d601a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:bf:13:b8:a3:90:c9:47:99:4d:a3:5e:e8:
c0:19:eb:b7:ac:4c:4f:6b:e0:f2:73:83:87:a5:3a:
fd:cc:27:a2:28:6d:83:34:f0:1a:a4:29:1e:bc:99:
d8:10:43:f3:69:b3:00:c2:e5:58:d7:79:76:0f:de:
c0:4d:95:f8:40:05:8a:ed:91:c3:c6:82:e7:be:8e:
a1:d6:b9:2a:5d:d2:d3:02:ea:e0:b6:0d:bd:04:44:
0b:46:c8:21:d9:0f:44:06:dd:07:c0:83:29:ab:32:
ea:ec:8f:b9:2c:85:33:7c:5a:43:4a:39:ea:52:72:
ed:f6:c3:3a:c1:fc:76:09:a2:eb:95:62:75:13:11:
16:1e:e8:00:cf:50:27:f2:d9:60:cf:66:2c:51:27:
d9:d2:ce:dd:5c:d1:ed:27:e7:a3:b6:dc:54:82:a8:
47:7d:af:32:c6:b3:9a:0b:ed:bd:38:6e:3b:db:8b:
45:bf:bc:f2:68:f5:fa:82:68:06:7a:d7:7d:f8:e9:
33:9e:83:84:28:6c:15:6a:0a:d7:7f:70:13:54:82:
7f:c5:59:d3:b8:e2:b9:c9:9f:c4:e4:ca:c5:87:d1:
84:93:3f:53:e1:29:1c:a2:eb:49:db:48:a1:98:57:
29:d1:76:76:fd:3b:9c:16:59:9e:42:54:73:b4:09:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:D6:6E:C4:56:7D:2F:A3:A9:D0:17:AB:A5:06:A6:D6:01:A9:8B
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/_o7WbsRWfS-jqdAXq6UGptYBqYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.211.0/24
45.153.81.0-45.153.83.255
81.27.68.0-81.27.70.255
94.103.180.0/24
185.93.213.0/24
185.134.66.0/23
IPv6:
2a11:4140::/29
Signature Algorithm: sha256WithRSAEncryption
1b:dc:13:10:c0:8e:30:f5:6c:1b:e2:75:ff:11:10:02:76:3a:
d0:9b:39:7e:86:6a:d6:bf:b7:cc:69:8e:44:2a:4f:51:ed:ca:
53:b6:ec:fa:d9:32:16:76:d4:a8:bd:66:6d:d3:fc:8c:53:a3:
8b:d2:c0:fa:84:d1:65:c6:59:20:b6:cb:1f:e5:d2:a5:d0:6a:
5b:6c:ab:15:a4:b8:94:b1:71:fe:75:a6:39:3f:0e:37:75:f0:
f7:9b:62:e2:1c:ee:dd:aa:7c:e4:d7:e4:40:40:20:a0:c9:2b:
ea:f3:61:4e:38:d5:87:52:d2:3b:e2:77:ef:96:59:0d:4b:97:
46:9b:4b:a5:67:a2:40:52:99:52:b6:00:99:73:6c:13:ef:66:
3f:67:b0:ce:64:9d:db:d7:b4:20:13:47:66:16:20:5c:1c:0d:
97:5a:55:ad:25:d7:72:fa:ae:b5:c9:67:23:3f:ea:75:59:d9:
c6:05:85:5a:d6:4a:75:60:3d:e5:5b:36:22:96:31:b6:98:08:
c1:16:63:e1:7e:d3:79:b9:ae:c9:b5:27:14:7e:7f:12:87:9c:
3d:1d:50:1f:92:f1:df:b1:c6:fb:12:b7:e7:6e:92:dd:8e:0a:
9c:3e:c3:a8:86:ac:c1:11:53:11:08:08:a6:d9:e2:87:6d:45:
40:22:6f:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:22 2026 by rpki-client