Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5RmRpQEjAGD_jK0MnxSPiD2rIyA.roa
File: 5RmRpQEjAGD_jK0MnxSPiD2rIyA.roa (raw, json)
Hash identifier: E9Gq2gxENfTpNBwy/UtJ3lppMmnyK5AvTdtD1GMJTB0=
Subject key identifier: E5:19:91:A5:01:23:00:60:FF:8C:AD:0C:9F:14:8F:88:3D:AB:23:20
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E700F3C9C532526DDC724490CB7AB563F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5RmRpQEjAGD_jK0MnxSPiD2rIyA.roa
Signing time: Thu 28 May 2026 19:28:27 +0000
ROA not before: Thu 28 May 2026 19:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:0f:3c:9c:53:25:26:dd:c7:24:49:0c:b7:ab:56:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 28 19:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51991a501230060ff8cad0c9f148f883dab2320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:56:f8:8c:34:b4:d3:92:e0:be:65:2f:1c:
24:42:98:40:db:33:ed:5e:af:31:da:54:98:a4:55:
08:02:a3:51:0e:c1:7b:90:32:d7:70:85:d2:54:86:
76:08:ce:14:57:d7:67:e0:42:af:04:f4:b2:4f:7f:
6d:c9:8a:6b:c5:51:ae:3b:3d:b5:bc:0d:85:4b:7a:
4c:60:01:74:51:0c:8e:4d:fa:99:c6:d7:35:62:6c:
9a:ec:2f:82:73:ab:c5:1b:17:aa:b5:8d:c9:60:7e:
92:41:f8:45:1d:6a:11:ff:ea:09:3d:e1:27:7a:61:
2c:75:10:da:c7:c3:df:79:e5:a9:a8:d8:c2:05:25:
d8:76:e1:5d:d2:de:59:97:6e:2a:53:5a:8c:98:5c:
e9:f9:ca:5d:82:2d:e0:eb:c6:a0:30:8e:7c:0f:7e:
6e:86:80:5c:9c:84:11:05:3a:bf:92:63:bb:50:22:
1d:60:e0:83:f1:d2:71:fb:02:f4:46:5b:6f:e1:84:
7f:7e:70:53:cd:7e:ed:71:f5:17:58:bb:6b:8c:83:
d1:8c:e0:5b:f1:ae:b5:ec:c8:13:9f:da:13:84:ec:
e9:aa:56:ff:2a:b9:6a:d3:4b:30:98:ce:47:c2:2b:
b5:3c:12:48:6f:75:1c:8c:6c:48:c2:9f:b6:f4:59:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:91:A5:01:23:00:60:FF:8C:AD:0C:9F:14:8F:88:3D:AB:23:20
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5RmRpQEjAGD_jK0MnxSPiD2rIyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
193.200.78.0/24
194.26.215.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:1100::/32
2a14:1103::/32
2a14:42c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
e1:a9:93:5c:8c:c9:f9:cd:d5:c7:40:20:f2:22:23:bc:40:3a:
d3:66:97:96:4d:c5:aa:34:25:8b:51:ff:4f:93:ed:e4:8d:ae:
e5:8e:c5:c3:5f:9c:42:ec:c3:e2:b0:ea:42:57:80:6e:ac:be:
5d:07:92:78:f1:c5:70:fc:f6:63:eb:b6:c4:c0:22:42:33:65:
2e:7a:78:88:67:30:61:fa:21:f4:10:52:72:2c:41:84:a4:1d:
99:99:e9:62:0d:fe:3b:62:91:97:a5:35:fe:dc:59:78:9e:43:
73:36:52:b3:04:45:dd:d0:9c:46:a1:78:fd:02:d7:63:58:db:
7a:bd:5c:9b:ef:70:5d:79:8a:50:cb:f2:9a:ca:c2:ab:f8:2a:
45:08:5c:a9:82:03:93:df:9b:02:28:a2:84:cf:d1:15:69:d2:
40:dd:f9:a0:58:31:f1:e7:d4:c5:24:b0:17:04:64:7d:4c:69:
eb:87:54:e9:a6:c2:9d:bc:15:99:05:3f:38:0e:54:41:ce:06:
f9:f9:e1:77:f4:27:de:f0:82:a7:8d:40:49:82:e4:42:0b:4f:
a5:c8:69:f5:3b:45:23:0a:e3:d5:b6:48:f7:99:06:d7:6b:5f:
39:71:8a:b2:1d:c1:25:36:82:43:f8:90:8a:f8:ba:da:b0:cc:
26:f0:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:59:46 2026 by rpki-client