Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/C4T5bmxMGbL1-cR1zz-VuXKeCG8.roa
File: C4T5bmxMGbL1-cR1zz-VuXKeCG8.roa (raw, json)
Hash identifier: msKAJnI9qa68IDEF0zcYcIvy+lu7WRdztygkKRE8PlU=
Subject key identifier: 0B:84:F9:6E:6C:4C:19:B2:F5:F9:C4:75:CF:3F:95:B9:72:9E:08:6F
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019FDC6409B43135E4E042E0F454387CF982
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/C4T5bmxMGbL1-cR1zz-VuXKeCG8.roa
Signing time: Fri 07 Aug 2026 13:22:51 +0000
ROA not before: Fri 07 Aug 2026 13:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59796
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
160.79.120.0/24 maxlen: 24
160.79.121.0/24 maxlen: 24
160.79.122.0/24 maxlen: 24
160.79.123.0/24 maxlen: 24
185.121.240.0/22 maxlen: 22
185.121.240.0/24 maxlen: 24
185.121.241.0/24 maxlen: 24
185.121.242.0/24 maxlen: 24
185.121.243.0/24 maxlen: 24
2a06:a180:10::/48 maxlen: 48
2a06:a180:1f::/48 maxlen: 48
2a06:a180:30::/48 maxlen: 48
2a06:a180:40::/48 maxlen: 48
2a06:a180:50::/48 maxlen: 48
2a06:a180:5f::/48 maxlen: 48
2a06:a180:60::/48 maxlen: 48
2a06:a180:70::/48 maxlen: 48
2a06:a180:80::/48 maxlen: 48
2a06:a180:a0::/48 maxlen: 48
2a06:a180:b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:64:09:b4:31:35:e4:e0:42:e0:f4:54:38:7c:f9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Aug 7 13:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b84f96e6c4c19b2f5f9c475cf3f95b9729e086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:db:36:e0:cf:13:3d:ce:b2:b3:1a:18:36:
01:de:40:ab:2c:38:1d:3a:77:34:92:aa:10:c5:50:
0a:83:e4:a2:dd:09:82:3a:bf:07:3a:a6:b5:c7:13:
6d:3f:7c:a4:6f:e5:80:b8:f9:f7:1b:f3:93:ad:9b:
14:e1:95:bb:4c:36:e6:6b:fb:94:65:48:0c:19:d4:
35:99:03:5d:4c:22:3c:b1:00:15:b8:19:5b:52:1a:
c4:f5:eb:fa:e2:97:d0:ad:e5:82:61:98:19:6a:62:
d6:f3:c8:d0:ba:cf:24:2c:8a:6c:bf:aa:13:2e:d8:
83:56:45:5b:1e:1e:db:62:30:77:7e:b8:97:e7:c2:
75:96:50:f2:4e:59:62:b1:e9:1b:10:bf:96:7a:eb:
c0:c1:a6:f8:64:23:6b:33:50:18:18:80:3d:2e:ff:
ae:40:fc:29:1d:90:a2:1f:27:c6:3f:73:a5:b5:41:
25:6d:9b:b0:69:98:41:87:14:07:44:25:bf:66:f3:
dc:ad:04:dc:38:17:11:ed:52:84:65:8d:8d:46:2d:
f8:68:e3:6f:a9:75:bb:63:33:03:83:6d:65:29:89:
a5:d3:b3:27:4a:76:fc:3a:a9:3c:d6:30:12:f9:fe:
d3:99:94:bf:a5:39:8f:38:d2:c2:70:b7:38:3c:64:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:F9:6E:6C:4C:19:B2:F5:F9:C4:75:CF:3F:95:B9:72:9E:08:6F
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/C4T5bmxMGbL1-cR1zz-VuXKeCG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
160.79.120.0/22
185.121.240.0/22
IPv6:
2a06:a180:10::/48
2a06:a180:1f::/48
2a06:a180:30::/48
2a06:a180:40::/48
2a06:a180:50::/48
2a06:a180:5f::-2a06:a180:60:ffff:ffff:ffff:ffff:ffff
2a06:a180:70::/48
2a06:a180:80::/48
2a06:a180:a0::/48
2a06:a180:b0::/48
Signature Algorithm: sha256WithRSAEncryption
62:fa:ca:e7:4e:6c:f1:bb:91:03:50:9b:7d:b9:d1:59:0f:a8:
68:24:b5:85:39:1f:ce:6f:b6:18:f8:2f:39:d3:54:fd:bd:59:
6f:37:2e:10:31:99:eb:34:23:f2:c2:40:f7:5d:b6:fe:74:3b:
6f:49:87:57:60:78:6d:76:22:fe:5e:ee:c3:f2:38:77:5f:dd:
30:fa:48:28:40:21:23:84:c7:e9:27:6e:02:fd:3d:88:26:cb:
f5:58:7f:19:f4:50:4f:4c:d8:06:8c:15:73:e5:89:9e:63:42:
5c:eb:a7:76:d0:1a:d1:17:05:6f:1b:b7:61:ea:f4:af:0b:c7:
5d:9e:03:f1:2a:34:bf:71:f6:dd:5d:26:3a:e1:c1:58:b8:68:
d2:23:5c:be:02:c8:d8:27:48:0f:7a:be:24:b8:20:aa:ef:1e:
cb:14:d2:8e:8c:41:b6:11:bb:da:c8:31:90:19:4b:5c:ef:06:
3d:c4:71:d3:58:37:97:18:6a:5d:06:c6:62:04:64:06:1d:43:
04:1a:ee:46:16:e8:6a:1a:f3:79:7c:6f:9d:6b:fd:90:a8:5c:
e8:0d:2c:32:ad:1c:e4:6a:d3:1e:92:8a:60:15:4f:38:0c:90:
ed:90:1e:14:87:8e:26:91:77:9c:8d:ae:dc:06:2f:4b:f2:a1:
a5:03:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:21:01 2026 by rpki-client