Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/6ELmck5UKAzxtyJ9Jioe0jWPZjM.roa
File: 6ELmck5UKAzxtyJ9Jioe0jWPZjM.roa (raw, json)
Hash identifier: 9bZscTPtVDy0spLF747D2VURhyt15TKV6T8tKmnGwo8=
Subject key identifier: E8:42:E6:72:4E:54:28:0C:F1:B7:22:7D:26:2A:1E:D2:35:8F:66:33
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019FFB6256DC0480B3D3A59A7C2A16BBBCAC
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/6ELmck5UKAzxtyJ9Jioe0jWPZjM.roa
Signing time: Thu 13 Aug 2026 13:49:13 +0000
ROA not before: Thu 13 Aug 2026 13:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 5.2.64.0/20 maxlen: 20
5.2.64.0/24 maxlen: 24
5.2.65.0/24 maxlen: 24
5.2.66.0/24 maxlen: 24
5.2.67.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
5.2.71.0/24 maxlen: 24
5.2.72.0/24 maxlen: 24
5.2.73.0/24 maxlen: 24
5.2.74.0/24 maxlen: 24
5.2.75.0/24 maxlen: 24
5.2.76.0/24 maxlen: 24
5.2.77.0/24 maxlen: 24
5.2.78.0/24 maxlen: 24
5.2.79.0/24 maxlen: 24
5.255.96.0/19 maxlen: 19
5.255.96.0/24 maxlen: 24
5.255.97.0/24 maxlen: 24
5.255.98.0/24 maxlen: 24
5.255.99.0/24 maxlen: 24
5.255.100.0/24 maxlen: 24
5.255.101.0/24 maxlen: 24
5.255.102.0/24 maxlen: 24
5.255.103.0/24 maxlen: 24
5.255.104.0/24 maxlen: 24
5.255.105.0/24 maxlen: 24
5.255.106.0/24 maxlen: 24
5.255.107.0/24 maxlen: 24
5.255.108.0/24 maxlen: 24
5.255.109.0/24 maxlen: 24
5.255.110.0/24 maxlen: 24
5.255.111.0/24 maxlen: 24
5.255.112.0/24 maxlen: 24
5.255.113.0/24 maxlen: 24
5.255.114.0/24 maxlen: 24
5.255.115.0/24 maxlen: 24
5.255.116.0/24 maxlen: 24
5.255.117.0/24 maxlen: 24
5.255.118.0/24 maxlen: 24
5.255.119.0/24 maxlen: 24
5.255.120.0/24 maxlen: 24
5.255.121.0/24 maxlen: 24
5.255.122.0/24 maxlen: 24
5.255.123.0/24 maxlen: 24
5.255.124.0/24 maxlen: 24
5.255.125.0/24 maxlen: 24
5.255.126.0/24 maxlen: 24
5.255.127.0/24 maxlen: 24
88.214.28.0/24 maxlen: 24
88.214.29.0/24 maxlen: 24
88.214.30.0/24 maxlen: 24
88.214.31.0/24 maxlen: 24
103.251.164.0/22 maxlen: 22
103.251.164.0/24 maxlen: 24
103.251.165.0/24 maxlen: 24
103.251.166.0/24 maxlen: 24
103.251.167.0/24 maxlen: 24
150.129.8.0/22 maxlen: 22
150.129.8.0/24 maxlen: 24
150.129.9.0/24 maxlen: 24
150.129.10.0/24 maxlen: 24
185.31.172.0/22 maxlen: 24
185.31.174.0/24 maxlen: 24
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
192.76.163.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a04:52c0::/32 maxlen: 32
2a04:52c0:1::/48 maxlen: 64
2a04:52c0:101::/48 maxlen: 64
2a04:52c0:102::/48 maxlen: 64
2a04:52c0:103::/48 maxlen: 64
2a04:52c0:104::/48 maxlen: 64
2a04:52c0:105::/48 maxlen: 64
2a04:52c0:106::/48 maxlen: 64
2a04:52c0:107::/48 maxlen: 64
2a04:52c0:108::/48 maxlen: 64
2a04:52c0:109::/48 maxlen: 64
2a04:52c0:110::/48 maxlen: 64
2a04:52c0:111::/48 maxlen: 64
2a04:52c0:112::/48 maxlen: 64
2a04:52c0:113::/48 maxlen: 64
2a04:52c0:114::/48 maxlen: 64
2a04:52c0:115::/48 maxlen: 64
2a04:52c0:116::/48 maxlen: 64
2a04:52c0:117::/48 maxlen: 64
2a04:52c0:118::/48 maxlen: 64
2a04:52c0:119::/48 maxlen: 64
2a04:52c0:120::/48 maxlen: 64
2a04:52c0:121::/48 maxlen: 64
2a04:52c0:122::/48 maxlen: 64
2a04:52c0:123::/48 maxlen: 64
2a04:52c0:124::/48 maxlen: 64
2a04:52c0:125::/48 maxlen: 64
2a04:52c0:126::/48 maxlen: 64
2a04:52c0:127::/48 maxlen: 64
2a04:52c0:128::/48 maxlen: 64
2a04:52c0:129::/48 maxlen: 64
2a04:52c0:130::/48 maxlen: 64
2a04:52c0:131::/48 maxlen: 64
2a04:52c0:132::/48 maxlen: 64
2a04:52c0:133::/48 maxlen: 64
2a04:52c0:134::/48 maxlen: 64
2a04:52c0:135::/48 maxlen: 64
2a04:52c0:136::/48 maxlen: 64
2a04:52c0:138::/48 maxlen: 64
2a04:52c0:139::/48 maxlen: 64
2a04:52c0:140::/48 maxlen: 64
2a04:52c0:141::/48 maxlen: 64
2a04:52c0:142::/48 maxlen: 64
2a04:52c0:1000::/48 maxlen: 64
2a04:52c0:1674::/48 maxlen: 64
2a04:52c0:5001::/48 maxlen: 64
2a04:52c0:6000::/36 maxlen: 64
2a04:52c0:7000::/36 maxlen: 64
2a0f:6bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:62:56:dc:04:80:b3:d3:a5:9a:7c:2a:16:bb:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Aug 13 13:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e842e6724e54280cf1b7227d262a1ed2358f6633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:79:d4:b5:8b:55:3e:50:9d:eb:1c:ed:57:
17:e5:87:d7:0b:47:af:ab:7f:21:e8:2f:ec:55:61:
6e:d0:f6:19:40:55:2c:3e:a0:15:e6:53:7c:ef:0e:
94:bb:4f:e7:79:44:a6:15:99:b1:87:6f:7f:d6:0c:
76:94:32:17:06:6d:59:a4:35:9c:bf:70:49:d0:54:
e1:d7:45:9b:fc:c1:be:fb:1c:c1:7f:3d:d9:f5:59:
da:2d:ee:87:d3:d4:5e:e3:69:ea:97:4f:28:11:7f:
cf:10:15:3e:6a:e8:07:ed:e6:79:9c:0b:95:a7:6a:
fe:91:fc:d5:d1:72:02:7f:1f:f3:f5:d1:e8:72:06:
42:66:1a:80:09:32:20:9a:28:90:cf:2c:e4:d5:ed:
66:d0:0c:58:de:28:b7:1c:a8:07:e9:ae:32:f1:05:
16:a8:81:d9:82:ff:ee:58:33:02:65:4b:1f:0e:f5:
27:a5:2c:86:3c:71:5f:e4:62:ef:6f:3f:c8:a1:64:
5c:5a:bf:4c:0e:72:3d:03:92:6e:a1:6b:e9:56:46:
41:85:74:2d:cc:f6:78:35:9c:aa:df:6c:68:e6:6f:
07:1b:31:70:78:39:59:eb:bd:82:33:6b:dd:03:e6:
d5:99:5a:53:c3:da:7b:d9:52:d8:44:fb:66:19:e2:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:E6:72:4E:54:28:0C:F1:B7:22:7D:26:2A:1E:D2:35:8F:66:33
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/6ELmck5UKAzxtyJ9Jioe0jWPZjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
88.214.28.0/22
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:79:04:3c:5b:26:af:b5:66:0f:66:66:3e:03:95:79:89:0d:
c5:70:cb:d8:8d:19:fe:ec:97:63:33:d4:21:98:d1:e6:b6:02:
91:ff:34:f6:d0:97:e7:76:53:da:92:56:d7:0c:00:27:27:39:
b5:95:11:9b:ed:9a:b9:a5:46:43:96:9f:83:cc:97:96:3d:a9:
0b:aa:f0:d8:85:4a:3a:2f:23:2a:38:7c:a6:d5:4e:1c:bd:d2:
22:28:7c:56:97:5d:c7:bc:1d:61:7d:63:08:f6:0a:3d:5a:5f:
6b:79:b4:d3:84:c8:29:fd:49:da:48:00:28:30:f5:24:e3:e2:
71:a6:ed:26:ba:80:6d:91:21:e6:72:a6:8f:6a:a5:ca:de:9e:
29:bc:f8:d4:d8:3c:17:f5:c0:ef:92:e8:6b:2c:f1:c2:30:7a:
82:be:a9:f4:71:fb:6d:3c:25:8d:29:cc:1e:65:02:5e:1f:33:
9e:5c:2b:b1:0c:c9:aa:4b:57:f5:49:68:6e:56:83:d3:be:fe:
c7:f4:65:28:ce:5a:31:e3:02:63:ac:8e:5c:14:a6:2e:98:62:
56:30:03:fd:b6:d8:85:6d:65:9e:4d:e1:05:cc:d6:c2:b5:9f:
f6:8f:41:87:13:17:d9:51:5f:2a:62:ee:09:42:9a:75:25:20:
f2:37:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:49:42 2026 by rpki-client