Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/Sed5TXawx-pe7deLRsaBjMpQUrU.roa
File: Sed5TXawx-pe7deLRsaBjMpQUrU.roa (raw, json)
Hash identifier: 3CIh4AtSxM72o2T6G5WEq9evxe16ZJq4vShxSr/X5GY=
Subject key identifier: 49:E7:79:4D:76:B0:C7:EA:5E:ED:D7:8B:46:C6:81:8C:CA:50:52:B5
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A1638FB03F05E81DDF5907AA79A90AE555
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/Sed5TXawx-pe7deLRsaBjMpQUrU.roa
Signing time: Thu 22 Oct 2026 12:22:03 +0000
ROA not before: Thu 22 Oct 2026 12:22:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 5.61.232.0/21 maxlen: 21
5.181.60.0/22 maxlen: 22
5.181.61.0/24 maxlen: 24
5.188.140.0/22 maxlen: 22
37.139.32.0/22 maxlen: 22
37.139.40.0/22 maxlen: 22
45.84.128.0/22 maxlen: 22
62.217.160.0/20 maxlen: 20
79.137.174.0/23 maxlen: 23
79.137.240.0/21 maxlen: 21
83.166.232.0/21 maxlen: 21
83.166.248.0/21 maxlen: 21
83.217.216.0/22 maxlen: 22
84.23.52.0/22 maxlen: 22
85.192.32.0/22 maxlen: 22
87.239.104.0/21 maxlen: 21
89.208.84.0/22 maxlen: 22
89.208.196.0/22 maxlen: 22
89.208.208.0/22 maxlen: 22
89.208.216.0/23 maxlen: 23
89.208.218.0/23 maxlen: 23
89.208.220.0/22 maxlen: 22
89.208.228.0/22 maxlen: 22
89.221.228.0/22 maxlen: 22
89.221.232.0/22 maxlen: 22
89.221.235.0/24 maxlen: 24
89.221.236.0/22 maxlen: 22
90.156.148.0/22 maxlen: 22
90.156.151.0/24 maxlen: 24
90.156.212.0/22 maxlen: 22
90.156.216.0/22 maxlen: 22
90.156.232.0/21 maxlen: 21
91.231.132.0/22 maxlen: 22
91.231.132.0/24 maxlen: 24
91.231.133.0/24 maxlen: 24
91.231.134.0/24 maxlen: 24
94.100.176.0/20 maxlen: 20
94.139.244.0/22 maxlen: 22
94.139.244.0/24 maxlen: 24
95.163.32.0/19 maxlen: 19
95.163.180.0/22 maxlen: 22
95.163.208.0/21 maxlen: 21
95.163.216.0/22 maxlen: 22
95.163.248.0/21 maxlen: 21
109.120.180.0/22 maxlen: 22
109.120.188.0/22 maxlen: 22
128.140.168.0/21 maxlen: 21
130.49.224.0/19 maxlen: 19
138.16.192.0/20 maxlen: 20
138.16.240.0/20 maxlen: 20
138.16.240.0/24 maxlen: 24
146.185.208.0/22 maxlen: 22
146.185.240.0/22 maxlen: 22
155.212.192.0/20 maxlen: 20
161.104.104.0/21 maxlen: 21
176.112.168.0/21 maxlen: 21
178.22.88.0/21 maxlen: 21
178.237.16.0/20 maxlen: 24
178.237.29.0/24 maxlen: 24
185.5.136.0/22 maxlen: 22
185.86.144.0/22 maxlen: 22
185.130.112.0/22 maxlen: 22
185.131.68.0/22 maxlen: 22
185.180.200.0/22 maxlen: 22
185.187.63.0/24 maxlen: 24
185.241.192.0/22 maxlen: 22
188.93.56.0/21 maxlen: 21
195.211.20.0/22 maxlen: 22
213.219.212.0/22 maxlen: 22
217.69.128.0/20 maxlen: 20
2a00:1148::/29 maxlen: 29
2a00:1148::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:8f:b0:3f:05:e8:1d:df:59:07:aa:79:a9:0a:e5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 12:22:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49e7794d76b0c7ea5eedd78b46c6818cca5052b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:2e:fe:e0:40:50:f1:14:99:e3:bd:45:2b:
fb:ce:8c:2e:96:d4:6a:3c:aa:26:04:ae:0c:d4:0a:
e4:16:b7:07:86:95:63:c4:79:87:9b:3b:b3:a4:c8:
ba:5f:24:f5:0e:46:5b:dc:29:25:85:52:d2:15:ac:
69:f7:60:2e:7e:9d:32:04:9f:6b:b6:22:6e:d1:9f:
e4:52:fc:aa:13:e0:4f:48:59:46:16:3b:b6:fa:24:
1f:cb:52:17:b3:4a:cd:7f:a3:6b:78:7a:96:44:51:
40:c1:08:06:fa:68:7f:7b:d0:a5:3b:9e:f6:48:9c:
37:8d:d2:e5:57:75:43:fe:01:99:46:f0:ee:d0:c1:
0b:ae:05:85:cc:31:7a:b3:49:6b:1d:c9:52:1e:40:
e1:c2:93:84:02:b5:51:75:bd:33:0f:b4:dd:ec:fe:
5d:54:84:9c:b3:ea:a2:27:ef:5d:86:cd:2e:89:79:
51:5b:ce:9a:26:de:11:28:ed:15:30:59:4d:b3:86:
9b:d1:41:2e:f5:e3:48:f1:35:1e:f8:17:3f:54:e1:
c0:41:5f:2d:be:cb:70:c4:8d:1d:16:f0:3e:48:96:
05:b8:21:aa:18:6e:55:bb:fa:dc:7e:38:99:68:9c:
26:f8:ca:01:08:c3:71:ed:96:61:57:7f:a3:90:e2:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:79:4D:76:B0:C7:EA:5E:ED:D7:8B:46:C6:81:8C:CA:50:52:B5
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/Sed5TXawx-pe7deLRsaBjMpQUrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.232.0/21
5.181.60.0/22
5.188.140.0/22
37.139.32.0/22
37.139.40.0/22
45.84.128.0/22
62.217.160.0/20
79.137.174.0/23
79.137.240.0/21
83.166.232.0/21
83.166.248.0/21
83.217.216.0/22
84.23.52.0/22
85.192.32.0/22
87.239.104.0/21
89.208.84.0/22
89.208.196.0/22
89.208.208.0/22
89.208.216.0/21
89.208.228.0/22
89.221.228.0-89.221.239.255
90.156.148.0/22
90.156.212.0-90.156.219.255
90.156.232.0/21
91.231.132.0/22
94.100.176.0/20
94.139.244.0/22
95.163.32.0/19
95.163.180.0/22
95.163.208.0-95.163.219.255
95.163.248.0/21
109.120.180.0/22
109.120.188.0/22
128.140.168.0/21
130.49.224.0/19
138.16.192.0/20
138.16.240.0/20
146.185.208.0/22
146.185.240.0/22
155.212.192.0/20
161.104.104.0/21
176.112.168.0/21
178.22.88.0/21
178.237.16.0/20
185.5.136.0/22
185.86.144.0/22
185.130.112.0/22
185.131.68.0/22
185.180.200.0/22
185.187.63.0/24
185.241.192.0/22
188.93.56.0/21
195.211.20.0/22
213.219.212.0/22
217.69.128.0/20
IPv6:
2a00:1148::/29
Signature Algorithm: sha256WithRSAEncryption
1f:cd:a5:49:d7:05:c9:7b:d6:78:77:a7:14:e2:fa:a1:20:8f:
21:5a:d2:17:b9:d9:b0:9c:d1:af:97:47:3b:e7:3f:88:af:9e:
2c:24:0d:4d:14:40:81:14:f3:a0:e4:0c:ef:5d:82:05:f3:60:
b8:a2:00:02:fa:71:be:a7:34:bb:3f:2a:e5:5f:c6:1b:e8:70:
d5:61:b3:59:8c:1f:c1:d1:d5:fe:60:58:8d:8c:8a:5a:05:4f:
69:0f:ec:81:d5:ee:c4:a1:1a:1c:79:4e:47:8f:2e:73:4f:d4:
c8:5b:8c:cd:91:3f:3a:49:de:8c:95:87:83:c0:ee:ca:c0:ae:
3f:ad:24:db:9d:b9:8e:ee:6d:d4:af:30:ed:82:19:18:47:ce:
8e:ca:93:26:59:16:99:ef:d3:8d:1c:33:46:e2:a1:d5:9b:33:
80:13:4e:f3:ba:4b:72:b8:c3:74:46:1d:c9:d9:a6:d2:3b:b8:
fd:02:20:25:a3:1f:8f:ef:f4:b3:a4:4b:98:48:dd:23:70:92:
1b:d1:be:d6:2a:c6:6f:46:22:43:66:4e:68:eb:c3:e4:42:19:
ab:46:5b:be:bf:3f:02:b2:0f:ed:8b:4f:9b:37:0d:43:1a:86:
d6:6f:74:bf:4c:44:75:dc:c9:ba:4d:35:db:13:3d:7f:6a:02:
db:bf:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:19 2026 by rpki-client