Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5M5SewMrUcSzlAUU2Y5kgyVPlzU.roa
File: 5M5SewMrUcSzlAUU2Y5kgyVPlzU.roa (raw, json)
Hash identifier: 5PHuG/2yfg/F7djopO/P8LSJ7njDaw8qARAXQJpOJT8=
Subject key identifier: E4:CE:52:7B:03:2B:51:C4:B3:94:05:14:D9:8E:64:83:25:4F:97:35
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019E2C8864EFAD33707C1EA7E814D0B71209
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5M5SewMrUcSzlAUU2Y5kgyVPlzU.roa
Signing time: Fri 15 May 2026 16:46:36 +0000
ROA not before: Fri 15 May 2026 16:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
91.233.121.0/24 maxlen: 24
92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.185.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.93.107.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.115.32.0/24 maxlen: 24
185.115.35.0/24 maxlen: 24
185.192.20.0/24 maxlen: 24
185.192.21.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
185.200.197.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:88:64:ef:ad:33:70:7c:1e:a7:e8:14:d0:b7:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: May 15 16:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4ce527b032b51c4b3940514d98e6483254f9735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:14:04:f4:5a:ff:f7:e4:7a:ce:4c:28:84:
8f:65:43:9a:30:24:bf:5c:64:7c:65:a4:b7:80:d1:
0c:8e:26:94:fb:46:c4:5b:d6:05:b7:83:ef:61:00:
ed:71:1c:2d:9d:54:de:e7:c9:19:3d:44:66:c7:09:
c9:8c:df:f0:69:0d:ed:ae:35:64:8c:30:f4:1f:bd:
4e:59:e0:8a:52:b8:2b:ed:47:60:39:e5:50:2c:0c:
b8:a8:d6:ab:5d:38:87:e6:bb:0e:36:19:56:bb:95:
b1:6b:aa:ed:17:80:64:d6:db:20:5b:69:e7:82:73:
44:7d:05:75:6c:12:ba:a6:ff:e0:8d:c1:a0:50:ec:
d7:94:d2:89:34:21:ed:df:ee:ac:bb:b4:7b:fa:1c:
af:3d:91:6b:0d:df:7f:8a:c5:ea:e1:d8:09:fa:45:
9b:63:e5:76:02:02:15:1e:04:bc:a4:9b:1e:09:4f:
a5:30:20:5e:4d:35:42:17:a3:5b:17:a1:7a:58:3d:
96:1c:bf:e7:28:ea:eb:84:1d:04:e8:eb:e7:b3:0d:
1b:b3:78:02:a4:72:50:5b:27:e5:10:a5:d5:61:52:
56:a6:15:a4:59:c3:5d:ad:a3:42:5e:31:ff:03:4e:
14:c3:39:30:a4:97:d6:e0:31:a5:92:b0:5b:50:d8:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:52:7B:03:2B:51:C4:B3:94:05:14:D9:8E:64:83:25:4F:97:35
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5M5SewMrUcSzlAUU2Y5kgyVPlzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
89.187.77.0/24
91.233.121.0/24
92.42.1.0/24
92.63.224.0/24
148.222.185.0-148.222.186.255
176.98.40.0/24
185.93.104.0/22
185.109.48.0/24
185.115.32.0/24
185.115.35.0/24
185.192.20.0/23
185.192.23.0/24
185.200.197.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
a1:d9:5b:5f:24:a3:1b:d9:0a:79:2e:bc:dd:a5:ad:43:30:1b:
69:a4:e8:90:9b:92:f7:84:00:48:84:3f:9e:29:4b:8c:0f:d0:
a4:a5:8e:45:b1:eb:aa:8e:b3:e5:71:9e:61:0d:91:4f:65:d9:
2e:f5:a1:40:59:77:fa:84:56:a1:1b:c7:8b:33:bb:94:e9:de:
21:f2:f7:fa:d0:be:06:39:11:a4:3d:d9:0a:51:fa:a4:b3:d7:
0b:cb:41:fc:b0:d8:be:8c:2e:98:10:0a:12:3d:b7:e5:5e:6e:
b7:d3:a6:28:db:67:5c:47:aa:44:b3:e1:c1:ba:74:3b:b2:e4:
9b:c1:2b:bb:75:8d:b8:3e:76:de:7f:84:2e:77:18:82:75:74:
10:a7:09:11:ea:76:42:1e:a0:10:95:1a:e9:95:1e:7d:6c:ee:
3f:8c:28:fd:8e:04:1d:7d:58:32:9a:8e:9b:d9:fd:74:dd:85:
00:cc:58:33:b5:0b:03:88:a7:21:f9:f7:10:c1:6a:71:bc:c5:
aa:d2:5f:e9:7e:ba:d7:1a:db:71:1a:ed:8b:e0:c5:3c:c8:1d:
50:d5:ff:cf:61:38:81:28:1c:b5:77:e1:50:83:ae:10:32:cb:
8c:85:5a:b9:5e:e8:89:0d:0d:74:4d:3b:d5:da:21:f8:cf:a1:
bd:75:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 15:05:11 2026 by rpki-client