Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/1-5e-ZofQabhYdvBaKzUZn6VEjeQ.roa
File: 1-5e-ZofQabhYdvBaKzUZn6VEjeQ.roa (raw, json)
Hash identifier: l1nCT+YTfjZffb+7AxU215iE+MqyAt5MOsQQFu/7geE=
Subject key identifier: FB:97:BE:66:87:D0:69:B8:58:76:F0:5A:2B:35:19:9F:A5:44:8D:E4
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01A162D5963647EFDDEEB905BBD4E3FAEFDB
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/1-5e-ZofQabhYdvBaKzUZn6VEjeQ.roa
Signing time: Thu 22 Oct 2026 08:58:47 +0000
ROA not before: Thu 22 Oct 2026 08:58:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51175
IP address blocks: 46.148.80.0/20 maxlen: 24
178.219.128.0/20 maxlen: 24
185.11.108.0/22 maxlen: 24
185.101.188.0/22 maxlen: 24
194.29.180.0/22 maxlen: 24
195.110.50.0/23 maxlen: 24
213.5.0.0/21 maxlen: 24
2a00:c020::/32 maxlen: 48
2a03:22c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d5:96:36:47:ef:dd:ee:b9:05:bb:d4:e3:fa:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Oct 22 08:58:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb97be6687d069b85876f05a2b35199fa5448de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:a0:31:be:32:bb:27:c3:b6:c9:7e:10:b3:
2a:15:8c:96:d8:3e:60:26:a6:91:8c:a2:7e:13:c9:
e1:4f:c1:2c:3c:da:d5:de:9e:00:95:80:82:94:8d:
41:54:68:64:07:72:dd:6e:67:b4:ef:95:f8:4a:60:
da:57:a1:6a:cf:95:d6:bc:42:dd:1e:22:9f:59:f6:
94:08:90:f6:6f:fd:ae:20:62:09:37:6d:76:e7:e8:
6b:11:ab:b4:de:4b:c5:2c:36:26:f9:c9:b4:d7:e5:
89:e8:1c:59:7b:9a:47:b7:c8:c3:76:2b:31:d3:9e:
c4:b3:ad:86:96:59:f8:7f:86:b1:93:8c:75:a3:ba:
ff:60:1a:e2:64:2c:ab:89:7d:2d:de:e7:5e:f8:07:
c6:68:4b:e3:7c:20:e2:35:06:32:3f:60:5b:77:a2:
7a:9f:ee:07:15:31:7f:5c:a2:c9:31:31:2e:ad:8f:
fd:58:cb:0b:ea:ef:98:b4:e7:80:56:f8:1f:d0:0d:
95:26:3b:c3:39:4a:2f:18:64:78:0a:60:58:29:b8:
7e:55:ab:e9:74:90:bd:28:75:85:9e:30:20:ec:72:
f3:9d:45:23:09:81:33:6c:06:3e:53:6e:4d:59:4b:
5d:33:17:e0:e4:c6:9a:81:d0:d1:98:ea:8c:1c:a6:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:BE:66:87:D0:69:B8:58:76:F0:5A:2B:35:19:9F:A5:44:8D:E4
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/1-5e-ZofQabhYdvBaKzUZn6VEjeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.80.0/20
178.219.128.0/20
185.11.108.0/22
185.101.188.0/22
194.29.180.0/22
195.110.50.0/23
213.5.0.0/21
IPv6:
2a00:c020::/32
2a03:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:5a:48:7e:a5:d7:e3:b4:08:11:83:ef:88:8b:2f:c9:fa:fa:
54:6a:da:34:b0:68:d3:06:64:20:38:2e:7a:fd:b4:39:5b:f3:
31:b0:18:43:c5:31:6a:49:0a:9a:8c:23:8b:c3:2c:8b:4e:ac:
34:b0:87:b9:8a:a8:3b:a3:94:02:03:a5:ec:29:a3:fe:33:27:
c0:ee:3e:32:79:6c:ad:37:7c:f1:94:14:94:81:89:b1:2b:fd:
c5:9a:39:a7:3e:05:36:30:88:f7:5d:47:ef:f4:12:08:a4:dd:
9a:70:b3:e5:7d:2d:92:6e:7a:29:68:89:e1:b4:1a:f0:13:6b:
a9:03:f8:9a:0d:60:6b:22:9d:9e:da:11:82:55:90:3c:67:75:
a2:e3:9f:79:b6:aa:5e:11:d6:4e:3b:b7:2d:b8:34:eb:92:31:
80:4f:a9:be:79:52:f9:f3:b3:d7:65:51:0c:2f:4c:1c:d6:a2:
ef:ad:c2:5a:e7:0f:fa:ed:4e:97:f5:40:bb:cb:7c:d7:8d:75:
c6:d5:03:2d:42:dc:5d:d9:d2:4a:6a:69:e2:a0:a9:7c:3f:88:
6f:e8:58:c3:3e:a6:3a:32:4c:f0:d0:ed:a6:e4:53:28:fa:52:
fd:5c:29:76:8b:14:22:73:83:7f:61:3a:7d:1c:d5:f1:bf:8b:
f1:32:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:54 2026 by rpki-client