Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/5q5ubnYMVDRkzyNHxnu_nVIuH8Q.roa
File: 5q5ubnYMVDRkzyNHxnu_nVIuH8Q.roa (raw, json)
Hash identifier: gL6DKz0ttDjGDqOjSN97aJpmlYSAyuMVOk171iUlWRM=
Subject key identifier: E6:AE:6E:6E:76:0C:54:34:64:CF:23:47:C6:7B:BF:9D:52:2E:1F:C4
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 01A0336BF30B527ABA76CEB3506673C2146A
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/5q5ubnYMVDRkzyNHxnu_nVIuH8Q.roa
Signing time: Mon 24 Aug 2026 10:58:27 +0000
ROA not before: Mon 24 Aug 2026 10:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.243.54.0/24 maxlen: 24
178.251.184.0/24 maxlen: 24
178.251.185.0/24 maxlen: 24
178.251.186.0/24 maxlen: 24
178.251.188.0/24 maxlen: 24
178.251.189.0/24 maxlen: 24
178.251.190.0/24 maxlen: 24
2a00:1ed3::/32 maxlen: 48
2a00:1ed4::/32 maxlen: 48
2a00:1ed5::/32 maxlen: 48
2a00:1ed6::/32 maxlen: 48
2a00:1ed7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:6b:f3:0b:52:7a:ba:76:ce:b3:50:66:73:c2:14:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Aug 24 10:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6ae6e6e760c543464cf2347c67bbf9d522e1fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:34:a8:87:22:9a:1c:18:5a:8e:d5:aa:84:
ee:cf:5c:ad:1e:3a:7f:8b:5d:64:87:50:70:57:34:
f5:37:f5:f2:b1:34:6e:77:af:f9:15:c7:59:fd:6d:
85:d9:60:b9:16:9a:6e:0b:a0:c7:3c:21:88:12:67:
d5:91:8f:8a:e0:e6:87:7d:b3:37:e3:54:41:52:c7:
a1:9b:58:a6:d1:b0:52:04:14:b2:7a:6e:31:d9:a2:
d6:68:b3:96:db:c1:74:97:eb:d0:47:cf:57:f6:b8:
15:af:5b:db:6b:1b:bd:7a:a4:2c:f6:24:71:b3:0e:
96:15:e4:6a:b7:75:53:c0:88:fa:f2:ed:98:20:41:
20:18:24:74:a8:7b:b9:3a:f9:42:a9:65:de:92:1b:
f8:ec:1f:6f:8b:de:8e:0b:c6:b6:62:89:b4:61:93:
69:0e:1d:aa:fa:3a:38:c0:df:96:41:2d:e2:12:d0:
4f:3c:9c:04:c6:10:0a:cf:a2:d0:20:a8:21:ab:6e:
03:a8:85:14:d0:59:6e:b6:45:9d:9d:b8:91:75:48:
c6:99:6d:8c:a8:f2:b1:d3:65:aa:49:e5:7b:9c:e5:
fa:67:e0:e7:7b:a9:a7:dc:f2:a6:9d:51:eb:50:f6:
40:c3:47:db:3b:e5:62:89:8b:5c:a5:36:5c:6e:85:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:6E:6E:76:0C:54:34:64:CF:23:47:C6:7B:BF:9D:52:2E:1F:C4
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/5q5ubnYMVDRkzyNHxnu_nVIuH8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.54.0/24
178.251.184.0-178.251.186.255
178.251.188.0-178.251.190.255
IPv6:
2a00:1ed3::-2a00:1ed7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:a8:56:d0:61:91:12:b1:c8:2b:ca:dc:f3:52:5d:40:16:9c:
fd:fd:da:29:37:fc:2e:67:61:57:ee:49:c0:64:12:53:c4:ca:
2e:9c:d2:19:51:cf:75:c4:31:08:c1:dc:6b:bb:01:dd:c8:5b:
86:97:80:50:a0:1f:b4:33:ab:8d:11:68:9d:1f:79:4e:76:23:
40:48:ca:ab:3d:37:ab:05:d9:bf:94:67:c3:7a:3f:8b:25:16:
36:d2:fd:d8:a2:0b:6e:ab:1e:a3:1d:84:c1:84:10:2c:28:a6:
b8:42:07:8f:45:1d:ca:0a:64:ec:69:f9:77:72:2f:e6:72:e4:
1a:d0:d1:15:20:a0:d6:1b:09:91:e3:11:36:04:ef:cd:7b:fc:
27:8b:e6:15:67:df:74:6e:d2:fb:1a:52:12:a7:1a:37:df:86:
34:ff:4d:f5:a9:69:59:2c:f4:d4:45:6f:65:6a:c5:cf:26:6c:
92:be:34:6d:96:b0:df:8f:f2:71:b1:70:bd:ae:e6:e5:95:4f:
f5:ca:4d:13:36:a0:cc:53:34:9e:49:a2:be:7d:37:5a:9d:f2:
31:69:75:6d:10:49:ad:8d:25:45:24:8d:09:9c:2f:bc:29:cb:
fe:f7:f9:f4:52:0d:f3:77:4b:e6:24:9e:e7:be:35:38:d4:6b:
e9:42:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:45 2026 by rpki-client