Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/hT9OVzFmrzYlbYAvDWsZv-L8sqA.roa
File: hT9OVzFmrzYlbYAvDWsZv-L8sqA.roa (raw, json)
Hash identifier: 7cDNsZDZGRfsdfZq6eYs2uhKZxtSr7ljs8yOgJRuUwY=
Subject key identifier: 85:3F:4E:57:31:66:AF:36:25:6D:80:2F:0D:6B:19:BF:E2:FC:B2:A0
Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial: 019E4EFF550CB7060B4C2881772C3155A506
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/hT9OVzFmrzYlbYAvDWsZv-L8sqA.roa
Signing time: Fri 22 May 2026 09:23:36 +0000
ROA not before: Fri 22 May 2026 09:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 91.246.46.0/24 maxlen: 24
185.108.84.0/23 maxlen: 23
185.108.85.0/24 maxlen: 24
194.56.235.0/24 maxlen: 24
194.56.240.0/24 maxlen: 24
194.56.245.0/24 maxlen: 24
2a04:88c0::/30 maxlen: 30
2a04:88c0::/48 maxlen: 48
2a04:88c0:2::/48 maxlen: 48
2a04:88c0:3::/48 maxlen: 48
2a04:88c0:4::/48 maxlen: 48
2a04:88c0:5::/48 maxlen: 48
2a04:88c0:6::/48 maxlen: 48
2a04:88c0:7::/48 maxlen: 48
2a04:88c0:8::/48 maxlen: 48
2a04:88c0:9::/48 maxlen: 48
2a04:88c0:10::/48 maxlen: 48
2a04:88c0:11::/48 maxlen: 48
2a04:88c0:12::/48 maxlen: 48
2a04:88c0:13::/48 maxlen: 48
2a04:88c1::/32 maxlen: 32
2a04:88c2::/32 maxlen: 32
2a04:88c3::/32 maxlen: 32
2a0d:6100::/29 maxlen: 29
2a0f:48c0::/29 maxlen: 29
2a0f:8680::/29 maxlen: 29
2a0f:a940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ff:55:0c:b7:06:0b:4c:28:81:77:2c:31:55:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Validity
Not Before: May 22 09:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=853f4e573166af36256d802f0d6b19bfe2fcb2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:77:1a:07:84:c4:20:f2:f4:0c:10:06:17:
02:b9:fc:23:4a:24:bc:7c:89:74:a9:1d:d1:b6:f8:
81:4d:46:cf:38:95:34:30:43:ec:27:0b:02:18:8f:
ff:fb:b1:51:cc:21:a3:33:7d:d0:f8:88:c3:50:cd:
c5:37:a5:92:8c:34:90:d3:1b:0b:68:63:cf:29:95:
86:cc:a3:c7:7c:a8:dc:05:13:70:2d:4e:0b:83:76:
ac:7c:4c:22:96:86:8c:5c:cb:9a:b1:30:e1:3e:ff:
03:ff:b3:e4:f2:aa:0c:8c:ff:16:de:63:d8:d3:f8:
f7:ee:ec:fe:65:69:d6:bf:e5:56:17:a5:1e:b6:f4:
46:59:1a:d3:64:b8:f6:20:0f:82:16:79:7f:8c:37:
ed:08:2d:bd:42:8e:2b:15:ab:bc:b6:df:de:46:31:
75:5a:4a:11:5b:07:70:79:0c:5b:ae:54:b4:01:dd:
a0:5c:2e:c2:aa:29:0d:9f:b7:41:13:d4:b2:1a:f6:
2f:c6:db:7f:3f:51:e4:04:f7:b1:04:a2:b0:d8:b9:
cd:35:c4:15:9b:3f:91:3f:56:4c:b6:6c:35:ad:5c:
e7:c3:0b:0b:54:6b:a6:c8:52:a2:eb:39:5e:3d:a6:
87:ab:0d:48:27:be:29:72:47:6d:96:f8:0c:3f:9c:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:4E:57:31:66:AF:36:25:6D:80:2F:0D:6B:19:BF:E2:FC:B2:A0
X509v3 Authority Key Identifier:
keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/hT9OVzFmrzYlbYAvDWsZv-L8sqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.46.0/24
185.108.84.0/23
194.56.235.0/24
194.56.240.0/24
194.56.245.0/24
IPv6:
2a04:88c0::/30
2a0d:6100::/29
2a0f:48c0::/29
2a0f:8680::/29
2a0f:a940::/29
Signature Algorithm: sha256WithRSAEncryption
2c:42:28:00:cb:26:7e:00:5b:fe:23:c8:b4:37:e4:a6:e1:bc:
71:11:ba:a5:30:4c:eb:86:06:85:b4:8d:b0:93:96:26:ca:a0:
17:45:ef:c9:9f:2e:8b:b7:00:49:91:1d:89:39:0c:61:81:82:
80:72:64:b0:f8:5a:45:67:f9:1e:4e:9b:93:f4:4b:b7:2f:50:
a7:26:b7:01:bf:51:1e:66:b9:70:61:4d:ba:ed:b2:56:9b:cb:
9a:18:ce:b1:97:bb:f4:16:73:ef:53:54:7c:56:ef:6e:3e:03:
2f:e4:80:2d:07:56:f2:e6:f6:9c:69:00:e0:1d:88:80:18:87:
3f:85:1d:63:27:c6:e8:c4:f0:be:1b:42:22:69:5d:c1:cf:76:
7b:c4:54:6b:10:0e:5f:86:78:d8:3b:c2:ef:27:42:6e:a1:78:
1c:86:8e:68:1d:dd:3e:97:07:d5:59:15:24:59:db:37:be:62:
b0:8a:ad:6a:10:34:97:0b:31:d6:84:0d:4e:b9:6a:1d:0f:35:
e9:1e:ec:94:be:0e:73:82:0e:a5:ef:8f:7b:29:07:e8:e1:75:
fc:5e:81:d2:31:2a:61:d5:3e:e6:ed:d8:72:08:07:e6:a5:03:
c7:6f:11:7a:7c:80:a8:2b:5c:99:93:7e:b3:4d:51:f9:32:a2:
db:97:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:30 2026 by rpki-client