Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/IMBnqFlO2MWce5XnQUuToBAd_DE.roa
File: IMBnqFlO2MWce5XnQUuToBAd_DE.roa (raw, json)
Hash identifier: PZovr67JJRHNoATWxj27qXkK5aRe3tzkH7qovFq6kHk=
Subject key identifier: 20:C0:67:A8:59:4E:D8:C5:9C:7B:95:E7:41:4B:93:A0:10:1D:FC:31
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019CBDAC96DC9C387FD0E1AA48EB47B0D1E2
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/IMBnqFlO2MWce5XnQUuToBAd_DE.roa
Signing time: Thu 05 Mar 2026 11:05:30 +0000
ROA not before: Thu 05 Mar 2026 11:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
130.49.143.0/24 maxlen: 24
130.49.146.0/24 maxlen: 24
130.49.153.0/24 maxlen: 24
155.212.245.0/24 maxlen: 24
155.212.246.0/24 maxlen: 24
155.212.247.0/24 maxlen: 24
157.22.174.0/24 maxlen: 24
157.22.230.0/24 maxlen: 24
157.22.231.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.233.185.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
194.5.79.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:ac:96:dc:9c:38:7f:d0:e1:aa:48:eb:47:b0:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Mar 5 11:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20c067a8594ed8c59c7b95e7414b93a0101dfc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:f7:a8:6a:85:e7:4b:ba:71:93:62:dd:11:
77:84:e1:27:5b:ad:69:2d:5b:73:d3:4c:bb:ee:c2:
41:37:ff:25:2f:37:83:dc:ed:b1:91:59:32:19:25:
b6:5a:96:92:41:0f:f5:08:ca:09:8d:b1:41:88:ec:
04:e0:6b:ad:c6:c8:3a:7c:7a:6c:a8:10:07:46:e1:
46:0b:51:92:28:ea:61:5a:98:ab:ad:d1:7f:5f:d4:
ed:7a:63:73:1b:f3:4d:62:dc:1b:c2:0f:f7:4e:14:
3a:da:6c:3a:a6:2f:af:0c:6b:bf:7a:a9:85:ff:c5:
b9:61:a5:00:29:40:61:4e:67:6e:fe:7c:dd:4f:a7:
fe:1e:90:22:57:b1:0d:ab:1b:db:c3:65:fa:6f:e0:
21:23:08:5b:bb:6b:83:c9:e7:fa:98:b9:fc:0a:8f:
84:2b:6d:23:f3:6e:b6:fe:67:81:ca:fd:bd:38:80:
8f:40:33:f6:11:83:53:8e:ef:c3:fb:f6:46:9a:4b:
67:7c:ed:12:be:65:e9:5a:f9:f0:19:ec:6f:37:dc:
f6:d1:72:bd:90:30:d6:64:ae:94:37:22:3a:cb:5f:
0c:a5:03:43:5c:0c:97:f4:81:04:2a:55:7f:48:66:
71:c4:ad:9e:88:e0:49:5b:5b:95:60:4b:3e:b5:b7:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:67:A8:59:4E:D8:C5:9C:7B:95:E7:41:4B:93:A0:10:1D:FC:31
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/IMBnqFlO2MWce5XnQUuToBAd_DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
130.49.143.0/24
130.49.146.0/24
130.49.153.0/24
155.212.245.0-155.212.247.255
157.22.174.0/24
157.22.230.0/23
185.198.152.0/24
185.233.185.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/23
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:70:93:d6:1d:dc:ef:6d:af:3d:c2:f6:93:cf:32:02:ec:45:
d7:fe:b3:05:77:35:6a:8c:01:44:8b:82:ab:bc:a5:01:00:6b:
ad:a1:5f:56:bb:1e:4b:5d:77:d1:d9:99:a8:4b:f9:ed:a2:29:
8b:ef:89:6f:fb:d2:42:77:84:4a:47:e7:db:fd:28:87:9c:a5:
10:5c:ef:91:10:1a:14:f8:73:1b:4a:d3:e2:d6:49:a4:40:21:
00:e7:fb:d8:33:5e:c1:c5:22:6c:46:ec:67:ea:cb:91:36:3a:
71:12:68:33:01:6d:82:70:fd:fd:e2:10:6c:f7:85:44:6d:ea:
49:17:1c:ea:f0:0c:d1:7b:70:e8:f5:49:6a:ce:53:30:8f:51:
6d:49:6e:19:9f:76:3c:de:44:f6:43:da:ad:7f:73:ec:dd:51:
7c:7e:91:3e:8d:85:f9:20:3c:cf:2f:39:3e:1b:bf:61:ee:d8:
02:f5:c1:16:e7:a8:3a:de:5a:3d:c0:09:8a:72:c3:06:d3:1d:
d1:23:81:4d:f9:af:54:54:27:a3:b5:4e:9f:3c:0c:62:52:d3:
01:36:b9:ca:b6:53:89:b6:45:38:6c:30:98:2e:de:6c:7a:3f:
f6:6b:05:86:c9:5f:85:69:c0:d5:97:08:9f:18:22:6b:57:64:
5f:08:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:48:16 2026 by rpki-client