Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/K1hlDg6Jw49-m395W6unv0PmwOI.roa
File: K1hlDg6Jw49-m395W6unv0PmwOI.roa (raw, json)
Hash identifier: 8+aK881dnXffC3EyaveeuAhYpPNlDPtqZ8vN3JCL5rU=
Subject key identifier: 2B:58:65:0E:0E:89:C3:8F:7E:9B:7F:79:5B:AB:A7:BF:43:E6:C0:E2
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019FFB503D741AB719A65066A87549A24959
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/K1hlDg6Jw49-m395W6unv0PmwOI.roa
Signing time: Thu 13 Aug 2026 13:29:27 +0000
ROA not before: Thu 13 Aug 2026 13:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 5.62.16.0/24 maxlen: 24
5.62.18.0/24 maxlen: 24
5.62.19.0/24 maxlen: 24
5.62.20.0/24 maxlen: 24
5.62.22.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.24.0/24 maxlen: 24
5.62.33.0/24 maxlen: 24
5.62.34.0/24 maxlen: 24
5.62.35.0/24 maxlen: 24
5.62.39.0/24 maxlen: 24
5.62.41.0/24 maxlen: 24
5.62.43.0/24 maxlen: 24
5.62.47.0/24 maxlen: 24
5.62.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:50:3d:74:1a:b7:19:a6:50:66:a8:75:49:a2:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Aug 13 13:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b58650e0e89c38f7e9b7f795baba7bf43e6c0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:27:8c:f1:da:9a:90:a0:ab:d3:72:7a:99:
91:6c:f1:70:56:d7:98:bd:3a:f1:2b:d2:72:c4:2a:
e7:a0:f4:d3:98:e9:87:8d:3b:8d:05:95:1f:b7:f6:
53:a3:ab:33:ce:e0:90:b3:09:f6:db:57:91:c8:80:
c5:34:df:d7:52:51:63:b6:b5:d0:1b:37:6e:b2:d0:
d2:f8:b7:59:a1:ff:60:16:46:7f:17:51:45:9a:bd:
24:2c:12:de:c1:4f:21:26:33:24:99:52:60:7e:a5:
98:d9:04:72:b5:29:7a:93:51:f3:c6:42:43:ed:d2:
30:b7:5b:d5:c9:f0:41:e0:8a:7b:29:c9:fe:93:cc:
c8:18:7d:7a:04:3b:8f:e5:a7:32:d8:de:84:33:c2:
6b:8f:22:96:e0:ac:ef:25:25:5f:df:29:4a:86:22:
e0:78:ec:03:de:fe:65:dc:29:17:1f:17:74:01:6d:
68:3d:1d:21:f1:0f:8a:64:f9:52:3a:a7:c6:e8:db:
8a:44:e3:b4:69:f6:95:fa:6b:f3:60:48:40:80:13:
98:23:e0:0a:e3:89:be:de:f8:9a:03:e6:2c:cf:81:
3b:80:ec:75:ee:3a:cc:a6:01:59:a0:10:cf:8c:7c:
62:9d:24:2d:22:dc:ec:29:92:e7:b9:cd:e2:52:d4:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:65:0E:0E:89:C3:8F:7E:9B:7F:79:5B:AB:A7:BF:43:E6:C0:E2
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/K1hlDg6Jw49-m395W6unv0PmwOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.16.0/24
5.62.18.0-5.62.20.255
5.62.22.0-5.62.24.255
5.62.33.0-5.62.35.255
5.62.39.0/24
5.62.41.0/24
5.62.43.0/24
5.62.47.0/24
5.62.49.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f5:fa:e0:6f:0d:82:15:2e:cb:f3:a3:1d:a4:b1:60:36:a2:
68:b7:bb:11:3b:22:9d:9a:19:a1:30:54:5e:dc:ba:64:20:c3:
6e:63:cc:17:07:12:9b:83:6a:f6:81:57:b4:45:2b:b2:a3:c9:
b5:23:6d:24:49:17:97:ad:be:cb:8a:b3:4a:63:f9:95:fa:ed:
ec:e8:b3:c9:26:e0:d0:c4:fd:75:b2:a3:c7:8b:bd:89:5f:fd:
46:cd:45:73:5b:f7:5a:d1:3b:53:68:c0:8a:47:57:cc:e0:9b:
0e:38:e1:9e:83:5a:9c:63:d2:10:16:f6:e4:0a:50:91:7c:84:
8d:73:23:d6:d0:67:ad:7b:45:ad:7f:7f:44:cb:6f:7c:ae:0f:
f2:cd:e7:a5:0f:c3:3b:a0:ab:4f:d0:2c:2f:a1:a1:bb:c2:be:
84:c1:83:b4:38:6c:c7:59:fd:59:7c:21:15:fb:46:f8:af:9e:
3e:2a:b3:4b:ec:5e:9a:75:21:11:13:d5:0e:38:07:5c:63:ef:
e1:81:fe:01:47:93:23:64:11:96:8c:b3:2c:31:29:e9:5c:e1:
6b:6f:e0:3c:03:48:e4:03:da:20:4e:f1:42:0b:ea:31:4c:06:
af:3b:01:5b:1c:b9:33:5e:c8:7e:65:9c:a5:db:c0:73:3a:ad:
d6:0f:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:43 2026 by rpki-client