Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa
File: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (raw, json)
Hash identifier: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=
Subject key identifier: E6:E1:4E:09:AF:3E:AF:CA:78:BB:90:E3:6C:57:32:33:15:A7:C6:99
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A019C3F581BD9102C5852C41EDDD22D548
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa
Signing time: Wed 19 Aug 2026 11:24:27 +0000
ROA not before: Wed 19 Aug 2026 11:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
62.197.48.0/23 maxlen: 23
82.117.242.0/23 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.115.32.0/24 maxlen: 24
185.115.35.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:c3:f5:81:bd:91:02:c5:85:2c:41:ed:dd:22:d5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 19 11:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6e14e09af3eafca78bb90e36c57323315a7c699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:4e:60:7a:5e:a2:84:e0:a1:e9:28:8f:78:
c2:6e:cf:fb:b3:55:82:96:3a:66:c4:85:a6:9d:9d:
f0:12:96:82:6a:27:41:a0:ee:05:64:56:a5:87:44:
03:55:8d:bb:4c:c0:67:5e:fb:58:a2:0b:2d:13:1e:
7f:dc:11:19:b9:64:e8:73:41:79:99:da:12:59:81:
45:4f:a2:d9:ab:ec:19:c0:b1:d5:57:78:90:ef:a2:
3e:cb:c6:1e:95:12:b2:87:21:6a:da:df:82:d8:7e:
2b:c5:76:8b:e7:48:e3:4d:92:a0:1b:39:51:38:84:
ce:18:32:71:f3:ea:fd:30:77:26:fb:f0:04:60:fd:
9a:ef:98:bf:40:11:49:f6:e9:3e:d3:7b:bd:cb:ea:
92:41:c9:84:b5:33:f0:f2:a9:04:87:72:a4:11:cf:
77:54:34:80:ee:15:3a:12:14:d8:27:11:b1:ea:8f:
e8:0c:fb:12:70:9c:3c:7a:5e:47:17:e2:9c:93:36:
b5:22:db:e1:e0:6a:6a:2b:6f:53:bd:11:c9:6c:46:
31:fd:a8:58:22:7f:5f:50:03:41:5e:ad:c5:a4:8e:
c0:c1:b2:49:b4:ce:15:af:14:88:81:35:0b:dc:ad:
73:ef:ed:00:a0:21:b1:e6:76:65:28:a2:6d:bf:b4:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:4E:09:AF:3E:AF:CA:78:BB:90:E3:6C:57:32:33:15:A7:C6:99
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
45.137.212.0/22
62.197.45.0/24
62.197.48.0/23
82.117.242.0/23
89.187.73.0/24
89.187.77.0/24
176.97.79.0/24
176.98.40.0/24
185.109.48.0/24
185.115.32.0/24
185.115.35.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:7d:b4:03:28:79:ca:73:aa:d6:a6:25:90:33:1f:b9:ab:8e:
c8:bf:ae:f2:00:bc:25:fa:1a:c6:50:6b:d8:21:f6:54:53:c4:
38:f1:55:c3:4a:25:6f:8c:14:c8:70:d0:03:e0:47:8a:54:ef:
11:21:e1:19:05:2c:a2:4c:09:b4:1f:c6:8c:62:87:b2:47:72:
58:c9:ce:ba:99:d2:3c:04:93:08:52:97:76:05:45:d2:35:5f:
11:f0:b5:e7:2c:3e:40:ca:36:8c:06:dd:74:81:83:b7:41:01:
21:c3:81:b5:57:ef:19:cd:dd:57:4b:dd:3a:20:b7:f1:9a:6e:
dd:3b:32:4f:14:46:d0:40:2a:bd:7e:04:fa:27:82:3a:22:bd:
a0:32:86:ae:40:8d:cf:8c:90:4c:64:58:e4:a0:d9:3b:aa:ec:
6d:2f:3a:bd:84:1b:ef:38:07:b0:67:91:2a:e2:c9:7a:a4:16:
d0:3f:d0:7f:87:e1:50:77:c9:8a:d9:6d:be:ad:66:d2:6b:9c:
46:77:70:4b:53:22:93:6e:87:8b:a9:96:7b:b7:63:80:37:c7:
fa:8b:e2:7f:57:5a:4c:d0:fb:c6:fa:c8:8c:6a:b0:70:b6:34:
72:a9:16:46:21:08:76:79:03:58:6f:6f:46:1a:4a:1d:5b:cb:
7f:88:a0:6b
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAaAZw/WBvZECxYUsQe3dItVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYwODE5MTEyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmUxNGUwOWFmM2VhZmNhNzhiYjkwZTM2YzU3MzIzMzE1YTdjNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07NOYHpeooTgoekoj3jCbs/7s1WC
ljpmxIWmnZ3wEpaCaidBoO4FZFalh0QDVY27TMBnXvtYogstEx5/3BEZuWToc0F5
mdoSWYFFT6LZq+wZwLHVV3iQ76I+y8YelRKyhyFq2t+C2H4rxXaL50jjTZKgGzlR
OITOGDJx8+r9MHcm+/AEYP2a75i/QBFJ9uk+03u9y+qSQcmEtTPw8qkEh3KkEc93
VDSA7hU6EhTYJxGx6o/oDPsScJw8el5HF+Kckza1Itvh4GpqK29TvRHJbEYx/ahY
In9fUANBXq3FpI7AwbJJtM4VrxSIgTUL3K1z7+0AoCGx5nZlKKJtv7TpwQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFObhTgmvPq/KeLuQ42xXMjMVp8aZMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvNXVGT0NhOC1yOHA0dTVEamJGY3lNeFdueHBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAQF
LUAwDAMEAgUtVAMEBQUtQDAMAwQEBT0wAwQCBT04AwQDJQHIAwQDJQHYAwQAJfwD
MAwDBAAl/A0DBAQl/AADBAItiDADBAItidQDBAA+xS0DBAE+xTADBAFSdfIDBABZ
u0kDBABZu00DBACwYU8DBACwYigDBAC5bTADBAC5cyADBAC5cyMDBAK57qgDBAG8
dBQwDAMEALx0FwMEArx0GAMEAcM2rgMEAdWOkjANBgkqhkiG9w0BAQsFAAOCAQEA
TH20Ayh5ynOq1qYlkDMfuauOyL+u8gC8JfoaxlBr2CH2VFPEOPFVw0olb4wUyHDQ
A+BHilTvESHhGQUsokwJtB/GjGKHskdyWMnOupnSPASTCFKXdgVF0jVfEfC15yw+
QMo2jAbddIGDt0EBIcOBtVfvGc3dV0vdOiC38Zpu3TsyTxRG0EAqvX4E+ieCOiK9
oDKGrkCNz4yQTGRY5KDZO6rsbS86vYQb7zgHsGeRKuLJeqQW0D/Qf4fhUHfJitlt
vq1m0mucRndwS1Mik26Hi6mWe7djgDfH+ovif1daTND7xvrIjGqwcLY0cqkWRiEI
dnkDWG9vRhpKHVvLf4igaw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:17 2026 by rpki-client