Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/24_TAE1gOjHul0shNH3vlh03qlM.roa
File: 24_TAE1gOjHul0shNH3vlh03qlM.roa (raw, json)
Hash identifier: GYBsxiKKB7QAecXqc/XnTeJ6ukkFBvU/odaR6RLYNno=
Subject key identifier: DB:8F:D3:00:4D:60:3A:31:EE:97:4B:21:34:7D:EF:96:1D:37:AA:53
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019E823C069923E70F663E8230CF606759DB
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/24_TAE1gOjHul0shNH3vlh03qlM.roa
Signing time: Mon 01 Jun 2026 08:10:32 +0000
ROA not before: Mon 01 Jun 2026 08:10:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56902
IP address blocks: 5.100.240.0/24 maxlen: 24
5.100.241.0/24 maxlen: 24
5.100.242.0/24 maxlen: 24
5.100.243.0/24 maxlen: 24
45.142.136.0/24 maxlen: 24
45.142.137.0/24 maxlen: 24
45.142.138.0/24 maxlen: 24
45.142.139.0/24 maxlen: 24
185.128.124.0/24 maxlen: 24
185.128.125.0/24 maxlen: 24
185.187.128.0/24 maxlen: 24
185.187.129.0/24 maxlen: 24
185.187.130.0/24 maxlen: 24
185.187.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:3c:06:99:23:e7:0f:66:3e:82:30:cf:60:67:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jun 1 08:10:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8fd3004d603a31ee974b21347def961d37aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:b1:8e:7a:2a:47:c6:6c:c5:bd:f5:10:c7:
f4:d4:a9:ec:23:bf:49:aa:19:6d:9c:18:14:27:12:
9e:ec:2e:4a:5f:69:14:b9:f9:7b:a6:41:d8:a5:3f:
58:f6:31:00:51:29:fd:5c:0a:36:3a:91:c1:4c:06:
d5:36:63:b6:29:74:51:fb:b4:6e:5a:81:93:6e:b2:
f2:d4:9b:98:c7:fd:96:58:c9:13:6d:b9:4c:39:2d:
86:59:85:81:2d:54:15:3f:c9:2d:44:c7:e0:f2:dd:
df:cd:40:c8:6a:dc:5d:d3:dc:c8:21:3d:bf:93:6f:
a9:61:f6:07:6a:60:9a:20:e9:df:63:6e:39:c8:7c:
75:b8:a7:9f:42:fe:b8:99:62:7f:a0:fd:e9:4f:d3:
77:9d:23:db:99:d8:9b:60:05:66:f8:d2:f1:e1:6f:
4e:cd:84:7f:9c:13:02:85:0d:25:fc:97:8e:ec:c9:
55:d3:a6:96:f7:bd:1a:3c:48:49:22:97:55:3b:0e:
67:9d:8f:5b:e3:4e:02:c9:af:2d:ba:46:0e:c2:e2:
46:21:4d:43:bd:c0:3f:39:13:95:03:23:87:83:89:
19:f1:8f:e0:43:7b:36:e3:b1:dd:11:19:ec:d7:fa:
b3:d2:4d:24:ec:aa:1a:17:aa:d5:de:ac:1c:57:ec:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8F:D3:00:4D:60:3A:31:EE:97:4B:21:34:7D:EF:96:1D:37:AA:53
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/24_TAE1gOjHul0shNH3vlh03qlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.240.0/22
45.142.136.0/22
185.128.124.0/23
185.187.128.0/22
Signature Algorithm: sha256WithRSAEncryption
03:26:81:34:a0:24:1c:02:16:9b:12:11:7c:0e:33:f5:4c:f7:
89:31:7b:9c:51:87:de:b4:b6:e8:00:25:09:8b:f8:74:ac:5d:
7e:e2:1a:c1:4f:ae:9c:82:41:4d:d4:46:63:e8:31:b7:d5:0b:
d6:0c:6c:f1:e1:ad:f0:c4:d4:c8:26:db:22:49:d1:13:2c:6f:
43:6b:c0:c9:4e:d2:9c:20:ef:d7:26:bf:64:67:5f:c0:0e:1a:
85:55:c5:b5:36:f4:c4:c9:85:4f:bb:fc:af:59:ca:31:79:ce:
df:ea:a4:3b:58:24:7d:f5:a0:3a:00:82:ab:eb:f1:2a:82:c6:
e1:e1:7e:5e:b9:3c:df:21:2c:f0:18:5e:a1:9c:e2:a4:3f:96:
7f:0c:c5:6e:87:ac:45:e9:3d:f3:fa:73:ee:40:9f:6d:9d:c0:
75:55:99:80:ab:3a:6a:2f:f9:21:1a:e4:da:d1:9d:bc:e4:75:
31:c0:ee:19:97:31:45:42:a6:da:41:d1:11:4c:d3:b0:f1:48:
82:28:13:7a:c5:6c:de:ed:6c:ad:4b:c5:ea:be:3f:4a:40:be:
66:cd:66:11:11:b8:26:9e:39:8c:66:55:42:c5:59:6a:83:79:
77:17:a5:f9:cb:28:e0:fc:ce:ae:04:09:31:94:95:b8:14:1b:
48:60:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:49 2026 by rpki-client