Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/plM5Zzrk0jmqKMZ8PXe2Lu1lWMo.roa
File: plM5Zzrk0jmqKMZ8PXe2Lu1lWMo.roa (raw, json)
Hash identifier: BGANdmC9vSHqKLUA/7iV46puNEA6Tmby1AVsCMmWCC8=
Subject key identifier: A6:53:39:67:3A:E4:D2:39:AA:28:C6:7C:3D:77:B6:2E:ED:65:58:CA
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A14E5337D7C1BE1C10D4FC86D5946ED051
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/plM5Zzrk0jmqKMZ8PXe2Lu1lWMo.roa
Signing time: Sun 18 Oct 2026 09:23:58 +0000
ROA not before: Sun 18 Oct 2026 09:23:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.74.0/24 maxlen: 24
31.40.192.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.152.136.0/24 maxlen: 24
45.152.138.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.20.0/22 maxlen: 24
77.83.48.0/23 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
77.83.50.0/23 maxlen: 24
80.243.230.0/23 maxlen: 24
84.252.64.0/24 maxlen: 24
84.252.65.0/24 maxlen: 24
85.31.52.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
86.62.55.0/24 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
88.218.239.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.94.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.113.40.0/23 maxlen: 24
176.113.42.0/24 maxlen: 24
176.113.43.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.190.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
193.9.57.0/24 maxlen: 24
193.9.58.0/24 maxlen: 24
193.9.59.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.47.36.0/22 maxlen: 24
193.56.22.0/24 maxlen: 24
193.160.69.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
193.202.113.0/24 maxlen: 24
193.228.48.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
193.228.50.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.7.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:53:37:d7:c1:be:1c:10:d4:fc:86:d5:94:6e:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 18 09:23:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65339673ae4d239aa28c67c3d77b62eed6558ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:a4:dc:ef:0a:f0:98:3d:00:b4:70:0f:22:
48:b1:20:b1:57:58:d4:1f:ea:79:f6:48:1e:81:46:
22:74:c9:c1:aa:3f:be:51:1b:91:f4:88:50:45:ab:
af:a7:d9:60:2d:c2:10:82:4f:e8:d7:cb:d4:5d:8c:
89:76:0e:da:cd:90:ac:53:9c:64:09:e4:13:fb:83:
03:f9:87:93:81:5b:c3:ca:8f:16:31:63:4f:c0:05:
a9:01:0e:8a:6f:14:ff:07:56:25:35:25:3d:b3:fe:
89:9d:c0:d0:1d:c0:06:44:34:25:12:03:49:60:e1:
ad:64:23:89:9e:c0:5f:9b:79:f9:0f:f8:1a:ce:08:
af:30:3f:99:94:58:72:a4:8e:00:6a:b2:e2:69:4c:
35:ab:ee:13:7b:50:80:42:0c:0c:95:8e:10:0d:f0:
7c:e2:fc:09:c4:55:f0:c2:5e:67:e5:ca:17:0c:48:
64:56:01:80:ae:e3:0d:72:a6:9d:5b:b0:2a:1a:21:
6e:16:5c:90:53:7b:ed:a8:bf:89:6a:ff:fc:cd:b2:
29:35:96:35:68:b0:6e:4c:bd:7a:a8:da:a0:73:5c:
62:f6:23:f7:c3:af:d9:3b:4b:17:e4:ec:2d:a0:95:
3f:80:c5:16:07:9a:aa:80:5a:b6:de:17:c6:f4:65:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:39:67:3A:E4:D2:39:AA:28:C6:7C:3D:77:B6:2E:ED:65:58:CA
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/plM5Zzrk0jmqKMZ8PXe2Lu1lWMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.74.0/24
31.40.192.0/24
31.40.194.0/24
45.130.184.0-45.130.186.255
45.140.7.0/24
45.152.136.0/24
45.152.138.0/24
45.154.120.0/22
77.83.20.0/22
77.83.48.0/22
80.243.230.0/23
84.252.64.0/23
85.31.52.0/24
86.62.53.0-86.62.55.255
88.218.80.0/22
88.218.239.0/24
91.132.126.0/23
91.245.238.0/23
95.214.93.0-95.214.95.255
95.214.244.0/22
176.113.40.0/22
176.118.188.0/24
176.118.190.0/23
185.155.100.0/24
185.177.77.0-185.177.79.255
193.9.57.0-193.9.59.255
193.31.124.0/23
193.47.36.0/22
193.56.22.0/24
193.160.69.0/24
193.160.74.0/23
193.202.113.0/24
193.228.48.0/22
194.53.188.0/22
194.104.4.0/24
194.104.7.0/24
194.124.41.0/24
212.69.133.0/24
212.69.135.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:db:a0:31:0b:3d:23:a8:c9:2e:00:3e:c7:4e:d7:83:d0:e6:
2d:d3:b8:d4:29:d0:02:e8:b9:b6:46:bf:14:6e:cb:0f:3f:9e:
30:62:18:ee:09:eb:0a:d1:f7:f4:71:a4:d5:25:9b:e4:a6:85:
eb:4b:4e:75:85:e1:f4:70:29:c7:76:30:15:59:25:40:1d:32:
51:cf:c4:34:93:15:35:c6:d8:59:43:e0:03:57:e4:f5:60:55:
81:b1:e5:48:a3:60:8c:7e:9d:9a:53:dd:da:76:26:a2:46:31:
f5:96:ef:9f:80:bf:91:32:e7:74:f8:5e:56:d4:6b:4f:40:a2:
05:1c:33:4d:e6:f7:0b:8a:5e:1e:2e:61:a0:25:11:5a:7b:96:
d5:06:9e:ba:99:11:53:af:09:d4:eb:d7:92:b5:6c:e5:f2:96:
4e:67:ee:90:91:25:b5:40:c6:f2:ce:e1:89:2f:8d:82:f0:5f:
c6:8d:8a:1e:bd:d5:2a:c8:6c:4c:8c:f1:78:de:fd:6c:48:e8:
36:58:aa:c5:d6:d6:f4:5f:30:1e:b7:43:4f:18:d4:04:80:a6:
9f:74:b2:fd:82:03:39:a6:01:55:e1:80:16:31:54:dc:73:b9:
bb:48:48:07:b6:1b:b8:1e:00:bc:9b:ae:b4:5a:da:73:2e:b1:
03:e1:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:33 2026 by rpki-client