Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/x5hm9TAkscBUsJAoqCOo4jx5-Lc.roa
File: x5hm9TAkscBUsJAoqCOo4jx5-Lc.roa (raw, json)
Hash identifier: c/s5JeLhk8Sq8rrJ5xL9DCoNhE1L+NnzeQZZ7Q2At2k=
Subject key identifier: C7:98:66:F5:30:24:B1:C0:54:B0:90:28:A8:23:A8:E2:3C:79:F8:B7
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019FFF8C3978C6BFC4E01910F5ADFE9D5483
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/x5hm9TAkscBUsJAoqCOo4jx5-Lc.roa
Signing time: Fri 14 Aug 2026 09:13:27 +0000
ROA not before: Fri 14 Aug 2026 09:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25447
IP address blocks: 62.93.64.0/19 maxlen: 19
62.93.68.0/24 maxlen: 24
62.93.73.0/24 maxlen: 24
62.93.74.0/24 maxlen: 24
62.93.76.0/24 maxlen: 24
62.93.88.0/24 maxlen: 24
62.93.96.0/20 maxlen: 20
62.93.96.0/21 maxlen: 21
62.93.104.0/21 maxlen: 24
62.93.112.0/22 maxlen: 22
62.93.120.0/21 maxlen: 21
82.192.0.0/19 maxlen: 19
82.192.0.0/23 maxlen: 23
82.192.5.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
82.192.18.0/24 maxlen: 24
85.13.0.0/18 maxlen: 18
85.13.2.0/24 maxlen: 24
85.13.8.0/24 maxlen: 24
85.13.14.0/24 maxlen: 24
85.13.16.0/24 maxlen: 24
176.61.160.0/19 maxlen: 24
176.61.168.0/21 maxlen: 24
176.61.176.0/21 maxlen: 24
176.61.184.0/22 maxlen: 24
185.51.222.0/23 maxlen: 24
188.117.192.0/18 maxlen: 18
188.117.200.0/22 maxlen: 22
188.117.208.0/22 maxlen: 22
188.117.220.0/22 maxlen: 22
188.117.240.0/20 maxlen: 20
217.16.112.0/20 maxlen: 20
217.16.113.0/24 maxlen: 24
217.16.114.0/24 maxlen: 24
217.16.124.0/24 maxlen: 24
217.16.127.0/24 maxlen: 24
217.199.80.0/20 maxlen: 20
217.199.83.0/24 maxlen: 24
217.199.90.0/24 maxlen: 24
2a03:4e40::/29 maxlen: 29
2a03:4e40::/32 maxlen: 32
2a03:4e47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:8c:39:78:c6:bf:c4:e0:19:10:f5:ad:fe:9d:54:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Aug 14 09:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c79866f53024b1c054b09028a823a8e23c79f8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:ef:99:eb:d8:69:90:84:8f:d5:02:65:a5:
69:e2:01:0f:7f:0b:ab:a4:8f:a3:f1:8d:66:ac:33:
ab:4d:d4:aa:51:8d:e7:fc:dc:90:fa:9b:d4:9f:9f:
ae:6e:35:bd:5f:36:e3:2a:80:d8:ec:e2:c3:b1:e6:
84:b0:d4:0a:df:51:ae:98:e6:0b:46:0b:5f:43:a7:
e9:b8:b5:77:f5:ec:51:77:e2:8b:3c:63:ea:e7:c5:
b9:da:6b:d0:0d:80:e4:2a:ec:29:fc:44:74:8d:be:
cd:07:f3:75:fc:60:4d:27:0d:e7:91:65:9d:96:61:
c2:8f:71:55:3d:76:21:5e:ea:86:a7:e5:14:9e:5f:
3c:b3:9e:ae:16:d6:bf:c8:1a:a9:f2:e9:23:da:3d:
81:9d:56:aa:e2:b7:f6:1c:ae:01:ad:5c:26:d8:54:
94:2c:49:bb:0e:07:04:17:d1:de:a7:82:8e:3b:3a:
09:fd:09:2e:86:d6:63:a4:0a:67:9f:64:90:b9:e4:
00:cb:7e:d5:22:5b:62:7a:6b:80:70:0f:b8:47:c9:
a9:24:57:d9:7e:d2:9b:e7:41:94:44:da:e4:77:94:
0c:da:2f:70:5d:5e:41:3f:e1:48:34:97:24:35:7c:
87:3d:d6:6e:1d:25:ae:b3:35:f5:db:27:90:47:5e:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:66:F5:30:24:B1:C0:54:B0:90:28:A8:23:A8:E2:3C:79:F8:B7
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/x5hm9TAkscBUsJAoqCOo4jx5-Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.64.0-62.93.115.255
62.93.120.0/21
82.192.0.0/19
85.13.0.0/18
176.61.160.0/19
185.51.222.0/23
188.117.192.0/18
217.16.112.0/20
217.199.80.0/20
IPv6:
2a03:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:b0:40:01:36:ca:4f:a0:40:f5:23:e4:7b:74:cd:5e:12:ea:
fa:00:9c:b9:8d:82:1b:9d:c3:c1:fe:4c:15:c5:9c:a4:2b:47:
37:38:3f:0d:f7:36:64:73:e6:22:da:86:6a:69:e0:99:04:29:
f7:a2:43:3a:62:ac:d4:47:68:63:4d:49:0e:31:b6:1c:24:f9:
54:06:1e:db:43:02:c9:64:84:7c:87:3e:2d:fd:23:a3:b9:a1:
58:5d:db:de:5c:cf:55:00:2b:93:5e:76:73:25:33:09:bc:68:
dc:01:15:57:e6:70:1a:e2:44:65:c8:d1:56:b4:41:c7:52:d9:
98:9f:ea:5b:5a:39:75:1f:ed:54:69:d7:d1:15:5c:f4:83:5d:
41:d6:69:60:1e:37:03:e9:ab:9d:f6:ae:55:e7:f1:a0:b7:8c:
fc:39:fe:bd:da:15:e5:7e:73:53:10:e6:15:33:7e:46:a9:a6:
9e:cf:bf:d0:7f:6c:90:71:20:df:ee:5e:50:c7:e1:5c:4a:ce:
33:d2:bd:ce:7f:d4:3d:52:2b:a3:6d:13:12:da:a8:29:6e:bb:
3b:7c:f8:09:cc:f2:61:a6:d1:c9:b3:02:f4:91:e5:0a:7c:c4:
48:23:8f:d2:8b:08:95:96:eb:d6:4e:13:1c:d8:46:15:bb:f5:
36:f0:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:54 2026 by rpki-client