Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5o5yOlT5KWJLrkgldZ97edML4GU.roa
File: 5o5yOlT5KWJLrkgldZ97edML4GU.roa (raw, json)
Hash identifier: +3UdFZfWiCIe+RhRbxox53Z+4srFMvwoePbRQm25M3w=
Subject key identifier: E6:8E:72:3A:54:F9:29:62:4B:AE:48:25:75:9F:7B:79:D3:0B:E0:65
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019D667D1228A4016CDD58EDD77E0D1E9DE2
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5o5yOlT5KWJLrkgldZ97edML4GU.roa
Signing time: Tue 07 Apr 2026 05:49:25 +0000
ROA not before: Tue 07 Apr 2026 05:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
9.249.8.0/21 maxlen: 21
9.249.24.0/22 maxlen: 22
135.132.0.0/19 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.152.0/21 maxlen: 21
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:7d:12:28:a4:01:6c:dd:58:ed:d7:7e:0d:1e:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Apr 7 05:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e68e723a54f929624bae4825759f7b79d30be065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:e6:b0:ba:7f:30:78:5a:08:73:35:3f:68:
a7:af:ff:20:64:87:75:a3:a9:53:86:93:81:c8:b9:
c2:69:84:fa:65:a0:d5:fc:b8:56:91:24:e3:f5:ee:
92:96:c5:72:fb:cd:29:fc:69:1d:5d:f6:93:95:ea:
dc:9f:5b:44:a2:1b:55:ff:be:d4:71:c3:49:71:16:
e4:8f:a4:89:bc:18:05:8a:dc:b8:d6:1a:65:c4:79:
3c:b8:62:5a:0d:4b:62:3a:50:20:22:a6:2c:f9:0f:
a1:dc:32:f8:75:87:aa:69:da:af:95:96:d3:bb:ef:
7d:15:33:84:cd:ac:2c:83:c6:8d:0f:11:99:60:42:
50:81:90:40:82:bf:28:0e:92:bd:50:91:36:78:9e:
8b:46:ff:db:fb:70:46:89:88:1d:ed:8f:1e:fc:dd:
c3:22:00:8e:4c:60:e4:a8:f0:8a:99:73:4b:33:05:
21:2e:a8:5a:d4:cf:7b:c9:c8:02:3a:ff:5d:b5:7f:
74:13:5d:af:a3:58:1e:b9:f2:a4:3a:00:0f:87:f4:
88:3a:e5:a0:73:05:44:d3:28:17:4b:e9:93:3c:aa:
72:9e:53:45:8e:3b:c9:6e:32:70:73:99:d8:33:e5:
f5:5c:83:98:ee:e8:ee:db:1a:13:e8:db:9c:34:7c:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8E:72:3A:54:F9:29:62:4B:AE:48:25:75:9F:7B:79:D3:0B:E0:65
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5o5yOlT5KWJLrkgldZ97edML4GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
9.249.8.0/21
9.249.24.0/22
135.132.0.0/19
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
170.100.152.0/21
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
89:aa:1a:91:0f:c9:7b:38:33:e3:6c:bf:01:1f:5c:0a:db:09:
1e:f1:75:e8:83:8f:6d:ae:52:9c:1d:81:32:8b:62:fc:ba:86:
e4:42:48:2d:ec:40:02:9e:38:8e:e1:bf:78:e9:a9:1c:ab:f2:
a5:87:34:f0:3f:3b:4d:26:f6:92:cb:e7:0a:be:c5:4d:5d:a5:
06:8b:de:81:b7:a0:2a:ea:46:32:b4:ec:df:41:a5:3b:5f:81:
6b:fe:c7:aa:82:37:72:17:dd:b3:7d:56:70:1f:57:b0:0c:ee:
b2:f7:d3:db:d9:39:5b:42:b6:8a:30:01:fd:85:c8:43:37:4a:
f1:7f:a6:6a:06:49:b2:ea:60:f4:cb:f4:e3:b6:71:4e:93:d4:
d6:20:2c:d2:60:61:a6:30:42:53:28:7a:d8:be:d8:d1:29:b5:
25:e9:ad:b3:0b:03:2e:28:59:6a:3e:72:7f:c5:56:62:21:17:
56:66:ff:a5:70:b2:7d:03:22:53:95:b9:d2:c9:fe:72:52:a9:
54:12:f9:91:07:90:f6:13:44:23:f7:e4:8b:25:bc:40:c2:34:
cb:3d:a2:6f:b8:8c:9e:be:a0:c4:db:98:4c:2d:03:92:12:1f:
f3:4b:a9:fd:b3:fa:77:33:fa:0d:66:c5:28:79:7b:1e:91:b8:
34:19:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 01:48:40 2026 by rpki-client