Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/U5PzUqS57vTjjx9_NuB_p28poME.roa
File: U5PzUqS57vTjjx9_NuB_p28poME.roa (raw, json)
Hash identifier: EecuoD5KCgYIaHtGBTK+FwW6d592SQsn5M0lKdZlos8=
Subject key identifier: 53:93:F3:52:A4:B9:EE:F4:E3:8F:1F:7F:36:E0:7F:A7:6F:29:A0:C1
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01A12AABF66CADC091150BE5DB020E499930
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/U5PzUqS57vTjjx9_NuB_p28poME.roa
Signing time: Sun 11 Oct 2026 11:14:35 +0000
ROA not before: Sun 11 Oct 2026 11:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.163.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.174.240/30 maxlen: 30
5.201.175.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
45.143.252.0/22 maxlen: 22
45.248.164.0/22 maxlen: 22
46.36.96.0/20 maxlen: 20
46.36.97.0/24 maxlen: 24
46.36.100.0/23 maxlen: 23
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/23 maxlen: 23
46.36.102.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/23 maxlen: 23
46.36.106.0/24 maxlen: 24
80.94.80.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.9.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.132.228.0/24 maxlen: 24
103.132.229.0/24 maxlen: 24
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
176.126.223.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.49.106.0/23 maxlen: 23
185.49.106.0/24 maxlen: 24
185.49.107.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
185.255.98.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.70.0/24 maxlen: 24
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
193.30.30.0/24 maxlen: 24
193.46.214.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
194.242.22.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:ab:f6:6c:ad:c0:91:15:0b:e5:db:02:0e:49:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Oct 11 11:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5393f352a4b9eef4e38f1f7f36e07fa76f29a0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:b9:33:1e:d6:e7:0b:d8:03:45:d2:ec:0d:
e5:cb:19:5f:1e:1a:02:d3:28:40:50:05:b3:b6:0d:
cd:80:57:7b:5b:dd:e6:b0:05:e0:a2:9f:56:3e:8a:
11:7c:78:49:54:c2:c9:7e:8c:3d:90:42:4c:5e:8b:
d4:b1:7a:1b:bd:5a:d4:2c:40:1e:2f:f6:47:b5:7a:
c0:74:22:3b:ad:eb:28:09:5d:a8:e9:56:e1:3a:42:
5c:01:9f:04:d5:cd:6d:81:85:7d:8f:6f:60:e6:98:
27:79:e6:5a:a7:67:9b:ed:7d:09:08:2d:a9:ae:bc:
92:da:f2:c2:50:bd:99:6b:9b:e5:b8:15:2a:bf:e0:
0c:ce:7b:f7:ce:7e:9c:dc:5e:59:fe:09:7e:32:46:
f9:b9:af:68:bb:f1:b4:04:9d:60:af:88:92:f0:61:
ad:65:6d:9e:c0:46:c3:40:b5:46:b0:d0:ed:46:ae:
9f:ba:54:97:65:94:a7:51:6e:2b:27:e6:1c:7d:f0:
c4:e5:24:84:76:01:3c:1e:51:c0:d2:12:8c:39:60:
df:b3:df:74:b4:b1:e3:c2:88:f7:54:5e:d2:b6:dc:
d6:16:51:b3:8d:0c:91:15:77:c9:0f:54:1c:d7:2f:
ba:f1:10:f4:e7:9d:02:84:ae:51:9d:bf:19:bc:08:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:F3:52:A4:B9:EE:F4:E3:8F:1F:7F:36:E0:7F:A7:6F:29:A0:C1
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/U5PzUqS57vTjjx9_NuB_p28poME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.83.12.0/22
45.95.88.0/22
45.143.252.0/22
45.248.164.0/22
46.36.96.0/20
80.94.80.0/23
89.37.0.0/20
89.40.35.0/24
89.43.0.0/20
91.209.183.0-91.209.184.255
91.239.59.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
176.126.223.0/24
185.22.30.0/23
185.49.106.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
185.255.98.0/23
188.213.64.0/20
193.30.30.0/24
193.46.214.0/24
194.180.238.0/24
194.242.22.0/24
195.149.127.0/24
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
75:11:c9:5f:09:96:0a:28:2b:4b:26:da:1f:b0:3b:90:27:c6:
1b:7b:7e:c0:d1:c9:0e:3d:ef:01:37:d7:1c:3b:9e:07:4f:36:
7e:5f:cd:bb:69:1a:3e:67:9a:5d:3e:c0:39:5b:26:20:56:14:
02:30:53:95:24:97:42:ca:93:c2:1d:7e:5b:a1:97:db:f7:0e:
07:81:45:60:11:0c:b6:a6:5c:46:c9:b0:7b:30:2d:34:38:83:
0a:45:2b:58:21:44:93:7a:df:e8:37:2b:04:7c:8d:cf:99:55:
f3:9a:8f:c5:4b:a5:11:9f:f8:c4:71:da:80:c9:85:a1:d7:72:
28:63:4a:99:45:1c:a7:4d:69:0a:14:b6:01:b2:fa:11:63:f4:
59:32:0a:ec:04:c6:2a:68:4e:fb:65:28:4d:56:bd:b8:b0:15:
97:e6:80:10:03:45:fc:20:7c:39:fa:30:73:80:09:ee:c2:c1:
32:6e:51:3e:2d:70:6f:ce:37:bc:53:07:a9:97:e9:d1:2a:b1:
b3:6e:7a:75:2b:ac:ea:00:aa:00:75:a3:78:e0:db:ed:35:04:
10:97:97:2d:5a:ae:a1:e1:5f:34:d5:76:72:0d:b2:b4:a9:b8:
2d:86:e2:37:73:12:61:2c:e4:ca:ef:80:3f:7f:5b:7b:2f:ad:
3a:8a:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:18:57 2026 by rpki-client