Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9g5MKs-YiD8UGBLalX-JdO81kKo.roa
File: 9g5MKs-YiD8UGBLalX-JdO81kKo.roa (raw, json)
Hash identifier: m/5PAwPCHhHUjx3gzMoG8FNcjV8aOX4n3AhOrSjqDvA=
Subject key identifier: F6:0E:4C:2A:CF:98:88:3F:14:18:12:DA:95:7F:89:74:EF:35:90:AA
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019F21C7B65A3B449CD6464D0732F2795498
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9g5MKs-YiD8UGBLalX-JdO81kKo.roa
Signing time: Thu 02 Jul 2026 07:42:44 +0000
ROA not before: Thu 02 Jul 2026 07:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58087
IP address blocks: 5.253.247.0/24 maxlen: 24
37.221.93.0/24 maxlen: 24
45.10.21.0/24 maxlen: 24
45.11.229.0/24 maxlen: 24
45.13.225.0/24 maxlen: 24
45.13.236.0/24 maxlen: 24
45.13.237.0/24 maxlen: 24
45.13.238.0/24 maxlen: 24
45.13.239.0/24 maxlen: 24
45.86.155.0/24 maxlen: 24
45.90.98.0/23 maxlen: 23
45.131.64.0/24 maxlen: 24
45.133.74.0/24 maxlen: 24
45.142.106.0/24 maxlen: 24
92.118.206.0/24 maxlen: 24
109.71.252.0/24 maxlen: 24
194.15.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:c7:b6:5a:3b:44:9c:d6:46:4d:07:32:f2:79:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 2 07:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f60e4c2acf98883f141812da957f8974ef3590aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:08:0c:eb:62:d8:f1:31:05:88:95:b6:84:
49:75:20:91:2c:7c:33:e0:8f:e9:bf:46:12:2f:18:
9a:4d:5f:54:07:92:2f:ff:ba:08:02:a4:3b:fb:fe:
a7:19:a8:94:e0:a4:27:3e:31:72:b5:73:eb:c7:6e:
67:12:bd:80:86:fd:cd:fc:36:65:2b:31:d1:2d:b6:
da:ca:b5:ba:0e:41:ef:a3:21:cd:8f:31:cc:fa:10:
43:be:2e:8f:88:63:24:a8:3e:25:d6:8c:92:72:28:
a3:2d:d8:7a:fb:e4:af:c3:b5:66:c7:29:01:6e:2e:
7f:38:e0:02:21:51:d4:62:7d:d1:0e:ab:94:cb:4c:
05:b6:10:e3:28:e0:b7:e0:0c:74:14:36:3f:57:69:
54:fb:58:27:f6:52:17:0f:d1:1e:3d:d0:b8:ae:c6:
86:97:fe:2c:8a:98:33:53:f1:37:54:c3:10:1b:09:
15:38:5d:ef:be:4c:e7:d9:dc:14:34:fe:5a:d4:4e:
6a:67:c7:f1:d9:c6:4d:1b:dc:b4:04:f5:b2:ba:19:
d3:81:98:75:df:fe:9f:7a:06:75:0d:8f:a9:9c:f4:
a0:6b:63:85:fb:24:6b:b3:91:94:73:cf:3c:a4:59:
68:9e:5b:6d:8a:63:bf:fe:7f:de:0e:49:04:03:75:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0E:4C:2A:CF:98:88:3F:14:18:12:DA:95:7F:89:74:EF:35:90:AA
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9g5MKs-YiD8UGBLalX-JdO81kKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.247.0/24
37.221.93.0/24
45.10.21.0/24
45.11.229.0/24
45.13.225.0/24
45.13.236.0/22
45.86.155.0/24
45.90.98.0/23
45.131.64.0/24
45.133.74.0/24
45.142.106.0/24
92.118.206.0/24
109.71.252.0/24
194.15.36.0/24
Signature Algorithm: sha256WithRSAEncryption
75:01:36:cb:95:d0:ef:63:65:54:eb:af:78:de:4b:58:ec:dd:
e5:4e:3e:b9:d9:b8:75:d8:16:64:38:e9:e0:41:3a:05:88:23:
de:79:f0:5a:af:5a:52:25:21:52:be:d5:6a:38:bc:39:f1:79:
17:06:0e:f9:3f:60:73:81:f8:81:1f:89:27:f5:1f:15:0e:46:
da:63:b2:85:99:e8:5e:76:7d:d7:f9:a9:f6:d5:31:8f:65:ad:
0e:82:17:9a:f7:df:2d:96:98:12:0f:44:bc:df:e3:9c:ec:76:
45:c2:36:c0:9a:a5:da:5b:13:b8:3c:0e:7f:74:60:83:30:19:
f2:1f:f7:25:ff:77:1f:6a:e1:d1:18:0f:3b:64:14:6a:69:42:
ca:ef:fc:c9:0d:b8:b3:3e:91:40:bc:13:3f:a5:86:2d:22:a9:
51:58:b2:69:44:be:08:b9:85:e5:2a:cc:63:b3:90:c1:36:2a:
9b:0f:04:b0:39:bd:0e:0e:91:64:e3:d1:ad:25:35:8a:f2:4f:
d2:0c:09:bd:d8:69:fb:41:cb:e8:90:ed:77:22:b3:e5:bd:1f:
95:e2:ed:50:8e:1b:d1:a1:b2:6d:ab:21:ff:6c:5b:0b:6c:ed:
4a:33:30:6e:e1:5b:6d:68:91:2f:c5:8c:ad:67:2e:47:27:a4:
15:fe:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:28 2026 by rpki-client