Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XLUleI4ifiMRoZY45wq69OnvQBI.roa
File: XLUleI4ifiMRoZY45wq69OnvQBI.roa (raw, json)
Hash identifier: a42jjAdVlf5FWTfZzsn+52qh1jW17xGlFf7excxrlhg=
Subject key identifier: 5C:B5:25:78:8E:22:7E:23:11:A1:96:38:E7:0A:BA:F4:E9:EF:40:12
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E991F0BC2EEF73E47D1EB74CD5D35AF12
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XLUleI4ifiMRoZY45wq69OnvQBI.roa
Signing time: Fri 05 Jun 2026 18:50:09 +0000
ROA not before: Fri 05 Jun 2026 18:50:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.182.117.0/24 maxlen: 24
31.40.250.0/24 maxlen: 24
45.129.197.0/24 maxlen: 24
62.204.52.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
91.242.234.0/24 maxlen: 24
130.255.172.0/24 maxlen: 24
130.255.175.0/24 maxlen: 24
185.253.4.0/24 maxlen: 24
193.42.119.0/24 maxlen: 24
194.69.164.0/24 maxlen: 24
195.64.127.0/24 maxlen: 24
212.24.120.0/24 maxlen: 24
212.52.18.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
213.109.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:1f:0b:c2:ee:f7:3e:47:d1:eb:74:cd:5d:35:af:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 5 18:50:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cb525788e227e2311a19638e70abaf4e9ef4012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:cf:64:da:82:83:46:dc:ae:5a:c0:e1:a5:
af:80:85:54:06:14:2b:38:76:14:ae:c5:f7:8c:f6:
41:83:84:7a:d6:e2:26:52:9b:37:25:38:15:e7:14:
fa:f9:5d:a6:c2:2a:9f:86:3e:52:63:d3:84:37:bf:
f4:92:64:d3:89:35:24:15:f5:48:54:cb:ed:d2:7e:
5a:ff:0a:0c:df:04:1c:c5:a6:49:62:e2:3a:e0:91:
c4:44:4d:45:67:58:a4:21:bf:5f:4b:46:0e:93:b4:
85:24:f5:c2:e4:c7:ad:47:09:79:49:6c:25:a6:b9:
a0:ad:42:e4:61:82:36:8a:92:0f:bb:56:40:00:e1:
48:71:dc:10:56:48:69:57:ce:96:24:6e:a2:e6:b8:
d8:c4:e5:f8:00:68:6f:4d:17:a2:f8:7e:2f:d4:12:
f2:15:8f:ee:5e:11:e1:1e:28:28:0f:57:9b:ff:71:
72:eb:8e:86:cd:40:77:81:16:eb:67:95:92:d7:00:
26:c0:a1:d0:ae:62:20:53:21:98:40:7f:31:be:fd:
5e:af:8c:22:51:12:57:ef:65:b2:dc:0d:f3:85:91:
04:4d:46:bd:b4:5c:b0:0f:c5:ba:ec:5d:80:e5:7b:
e6:d0:ec:e4:1d:66:69:52:40:fb:79:e4:9d:56:7e:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:25:78:8E:22:7E:23:11:A1:96:38:E7:0A:BA:F4:E9:EF:40:12
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XLUleI4ifiMRoZY45wq69OnvQBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.117.0/24
31.40.250.0/24
45.129.197.0/24
62.204.52.0/24
77.83.193.0/24
78.142.238.0/24
91.242.234.0/24
130.255.172.0/24
130.255.175.0/24
185.253.4.0/24
193.42.119.0/24
194.69.164.0/24
195.64.127.0/24
212.24.120.0/24
212.52.18.0/24
212.107.26.0/24
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5d:66:6f:fd:13:bd:4d:9c:22:a3:7a:4e:69:79:7a:e7:6f:
20:a7:8d:07:6a:37:de:e3:e1:1f:6f:2b:bd:85:5f:43:15:15:
2a:08:52:b4:5d:c0:e3:37:cb:c1:8d:c2:98:df:8a:8e:a8:38:
76:c2:3a:88:b1:30:d6:23:56:7c:5b:89:d8:b1:24:65:65:4f:
f4:6a:1f:2c:c1:98:ec:29:af:6e:6a:9f:0b:70:13:14:b7:2a:
3c:be:59:d2:07:18:fe:57:9c:06:f2:c1:b9:72:aa:ed:61:f4:
c1:31:38:b7:48:4c:61:8b:bc:65:1d:af:1a:42:b8:ab:be:f0:
f0:18:73:db:35:c2:11:92:02:94:5d:8b:b4:0a:7f:1e:11:89:
12:2b:76:69:5d:0f:1d:ce:5e:3e:ca:b6:2c:b4:e2:2e:77:02:
b1:46:48:3e:f9:bb:cf:b2:0c:0c:66:05:cb:94:4e:63:a8:d6:
63:ce:e4:88:7d:cc:66:ea:ff:cb:7c:6d:0c:4e:1b:d5:01:42:
2d:f4:e8:69:27:64:0e:db:1a:c1:5e:05:d2:c9:13:c0:9a:6d:
54:1f:ab:c5:e9:be:fe:d9:f0:b5:86:13:64:13:39:a1:96:c3:
f2:fa:06:cc:a0:95:79:78:5c:95:ba:40:37:e9:d5:e2:53:9d:
0d:ba:4d:62
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZ6ZHwvC7vc+R9HrdM1dNa8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNjA1MTg1MDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2I1MjU3ODhlMjI3ZTIzMTFhMTk2MzhlNzBhYmFmNGU5ZWY0MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydrPZNqCg0bcrlrA4aWvgIVUBhQr
OHYUrsX3jPZBg4R61uImUps3JTgV5xT6+V2mwiqfhj5SY9OEN7/0kmTTiTUkFfVI
VMvt0n5a/woM3wQcxaZJYuI64JHERE1FZ1ikIb9fS0YOk7SFJPXC5MetRwl5SWwl
prmgrULkYYI2ipIPu1ZAAOFIcdwQVkhpV86WJG6i5rjYxOX4AGhvTRei+H4v1BLy
FY/uXhHhHigoD1eb/3Fy646GzUB3gRbrZ5WS1wAmwKHQrmIgUyGYQH8xvv1er4wi
URJX72Wy3A3zhZEETUa9tFywD8W67F2A5Xvm0OzkHWZpUkD7eeSdVn5TmwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFFy1JXiOIn4jEaGWOOcKuvTp70ASMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvWExVbGVJNGlmaU1Sb1pZNDV3cTY5T252UUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQABbZ1AwQA
Hyj6AwQALYHFAwQAPsw0AwQATVPBAwQATo7uAwQAW/LqAwQAgv+sAwQAgv+vAwQA
uf0EAwQAwSp3AwQAwkWkAwQAw0B/AwQA1Bh4AwQA1DQSAwQA1GsaAwQA1W2ZMA0G
CSqGSIb3DQEBCwUAA4IBAQAFXWZv/RO9TZwio3pOaXl6528gp40Hajfe4+Efbyu9
hV9DFRUqCFK0XcDjN8vBjcKY34qOqDh2wjqIsTDWI1Z8W4nYsSRlZU/0ah8swZjs
Ka9uap8LcBMUtyo8vlnSBxj+V5wG8sG5cqrtYfTBMTi3SExhi7xlHa8aQrirvvDw
GHPbNcIRkgKUXYu0Cn8eEYkSK3ZpXQ8dzl4+yrYstOIudwKxRkg++bvPsgwMZgXL
lE5jqNZjzuSIfcxm6v/LfG0MThvVAUIt9OhpJ2QO2xrBXgXSyRPAmm1UH6vF6b7+
2fC1hhNkEzmhlsPy+gbMoJV5eFyVukA36dXiU50Nuk1i
-----END CERTIFICATE-----
Generated at Tue Jun 9 15:00:52 2026 by rpki-client