Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/52yA9BTYj8C-CK48PlhjlYZCXzs.roa
File: 52yA9BTYj8C-CK48PlhjlYZCXzs.roa (raw, json)
Hash identifier: +7vF6PWb+ojACouhrlSNEcVXEx2+EURBpf2h+g/vLCA=
Subject key identifier: E7:6C:80:F4:14:D8:8F:C0:BE:08:AE:3C:3E:58:63:95:86:42:5F:3B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A171F7C5DA8BB810F75826FAF27879B675
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/52yA9BTYj8C-CK48PlhjlYZCXzs.roa
Signing time: Sun 25 Oct 2026 07:30:25 +0000
ROA not before: Sun 25 Oct 2026 07:30:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219472
IP address blocks: 5.57.38.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
178.239.145.0/24 maxlen: 24
185.215.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:f7:c5:da:8b:b8:10:f7:58:26:fa:f2:78:79:b6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 25 07:30:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e76c80f414d88fc0be08ae3c3e58639586425f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:03:fc:49:7b:d1:db:04:31:38:88:ba:a8:
ec:24:65:ea:a2:9e:42:f2:b0:22:ab:3d:4d:41:88:
d7:b9:24:a2:db:27:42:44:ca:9a:0d:a8:2e:2e:8f:
9e:9f:a3:31:76:30:dc:61:04:ab:95:5d:aa:2c:88:
f0:e3:83:26:77:16:05:92:d2:a9:55:70:a5:88:1a:
0b:1b:c4:e6:0b:31:01:a7:e0:ac:db:d9:07:cc:24:
59:ef:4f:be:4e:61:84:c7:24:76:eb:4d:7a:4e:fb:
5c:40:78:8d:0b:65:65:d9:d8:ff:f6:f6:8f:ad:ba:
20:86:18:79:24:a3:82:7e:cc:51:29:f7:c0:49:e9:
dd:ab:41:bc:8d:c0:a1:45:83:7d:e2:5b:0b:41:39:
d9:42:b4:0b:b5:14:e0:e7:a0:05:f4:66:52:95:0f:
b8:f2:90:9b:bc:74:4d:9a:13:4d:07:66:f3:a5:86:
a0:ac:00:fc:19:70:61:54:4e:80:5d:72:8d:3f:04:
8b:02:91:60:45:ed:a2:d5:84:54:59:20:76:be:39:
53:9d:92:b7:24:3e:e1:fc:23:92:f7:3e:01:a5:1f:
1e:5e:16:d6:8c:b6:3f:29:62:f8:b9:03:8c:3e:ab:
28:a0:66:be:6a:50:2a:b0:65:03:ef:4a:47:41:e9:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:80:F4:14:D8:8F:C0:BE:08:AE:3C:3E:58:63:95:86:42:5F:3B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/52yA9BTYj8C-CK48PlhjlYZCXzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.38.0/24
37.32.47.0/24
178.239.145.0/24
185.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
31:40:c3:b6:0d:a7:49:a2:8d:30:b0:7b:6b:80:c7:bd:b5:c0:
1e:14:80:32:3c:b5:cd:a1:4d:e9:da:37:5b:bb:22:cf:53:87:
f5:4c:41:f2:cf:fe:04:51:01:47:27:f3:2c:3d:9f:8a:5d:28:
bb:91:f1:61:05:15:45:01:a5:76:84:54:f7:69:2d:43:20:09:
5e:8d:cb:9a:0f:99:47:b9:59:ed:b5:bd:ce:eb:c9:77:28:bd:
9f:35:d0:fb:29:e2:e7:28:77:20:01:ad:15:17:61:4d:13:10:
84:69:34:63:c3:ba:bb:fe:f0:43:52:17:7f:38:e6:b8:de:c4:
aa:4d:a9:5c:3c:83:cf:47:90:c2:8f:bd:5c:bd:e8:0f:e7:65:
3c:c8:87:1f:00:3e:d7:39:a7:f3:9b:7d:63:98:7a:6c:dc:61:
a9:13:32:9d:32:f9:c2:37:b5:4b:7b:d2:26:e3:95:4e:59:32:
79:3a:eb:a4:53:b4:c9:95:e4:97:6f:b9:88:24:51:27:cd:d4:
ca:fa:d3:14:25:16:8a:ba:c3:e7:59:ed:cb:9f:04:3c:90:05:
bd:48:03:e7:90:ab:8c:60:d3:5d:32:a5:37:8e:08:2e:5c:1b:
4f:d5:c6:d2:42:60:83:46:72:a0:02:dc:4f:0e:72:ea:d4:22:
e0:cf:cc:8b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFx98Xai7gQ91gm+vJ4ebZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYxMDI1MDczMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzZjODBmNDE0ZDg4ZmMwYmUwOGFlM2MzZTU4NjM5NTg2NDI1ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0AD/El70dsEMTiIuqjsJGXqop5C
8rAiqz1NQYjXuSSi2ydCRMqaDaguLo+en6MxdjDcYQSrlV2qLIjw44MmdxYFktKp
VXCliBoLG8TmCzEBp+Cs29kHzCRZ70++TmGExyR26016TvtcQHiNC2Vl2dj/9vaP
rboghhh5JKOCfsxRKffASendq0G8jcChRYN94lsLQTnZQrQLtRTg56AF9GZSlQ+4
8pCbvHRNmhNNB2bzpYagrAD8GXBhVE6AXXKNPwSLApFgRe2i1YRUWSB2vjlTnZK3
JD7h/COS9z4BpR8eXhbWjLY/KWL4uQOMPqsooGa+alAqsGUD70pHQembrwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOdsgPQU2I/AvgiuPD5YY5WGQl87MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvNTJ5QTlCVFlqOEMtQ0s0OFBsaGpsWVpDWHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABTkmAwQA
JSAvAwQAsu+RAwQAudfnMA0GCSqGSIb3DQEBCwUAA4IBAQAxQMO2DadJoo0wsHtr
gMe9tcAeFIAyPLXNoU3p2jdbuyLPU4f1TEHyz/4EUQFHJ/MsPZ+KXSi7kfFhBRVF
AaV2hFT3aS1DIAlejcuaD5lHuVnttb3O68l3KL2fNdD7KeLnKHcgAa0VF2FNExCE
aTRjw7q7/vBDUhd/OOa43sSqTalcPIPPR5DCj71cvegP52U8yIcfAD7XOafzm31j
mHps3GGpEzKdMvnCN7VLe9Im45VOWTJ5OuukU7TJleSXb7mIJFEnzdTK+tMUJRaK
usPnWe3LnwQ8kAW9SAPnkKuMYNNdMqU3jgguXBtP1cbSQmCDRnKgAtxPDnLq1CLg
z8yL
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:58:55 2026 by rpki-client