Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XEbzly7m-DH_VB32IsDauSuUm0U.roa
File: XEbzly7m-DH_VB32IsDauSuUm0U.roa (raw, json)
Hash identifier: OAn+4/uThLlYN4TbofhXM1/DvNN98xK3KmGoJkqiU/4=
Subject key identifier: 5C:46:F3:97:2E:E6:F8:31:FF:54:1D:F6:22:C0:DA:B9:2B:94:9B:45
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0869A33F07EAA7E1CA4CD3720A3CB2464
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XEbzly7m-DH_VB32IsDauSuUm0U.roa
Signing time: Wed 09 Sep 2026 14:37:27 +0000
ROA not before: Wed 09 Sep 2026 14:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.180.22.0/24 maxlen: 24
5.180.31.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/24 maxlen: 24
45.15.129.0/24 maxlen: 24
45.15.145.0/24 maxlen: 24
45.15.146.0/24 maxlen: 24
45.15.154.0/24 maxlen: 24
45.15.155.0/24 maxlen: 24
45.15.164.0/24 maxlen: 24
45.15.179.0/24 maxlen: 24
45.15.186.0/24 maxlen: 24
45.82.248.0/24 maxlen: 24
45.83.23.0/24 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.128.0/24 maxlen: 24
45.83.149.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/24 maxlen: 24
45.92.161.0/24 maxlen: 24
45.92.163.0/24 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/24 maxlen: 24
45.92.193.0/24 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.51.0/24 maxlen: 24
45.128.57.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.249.0/24 maxlen: 24
95.214.250.0/24 maxlen: 24
171.22.115.0/24 maxlen: 24
213.59.119.0/24 maxlen: 24
213.59.120.0/24 maxlen: 24
213.59.126.0/24 maxlen: 24
213.59.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:9a:33:f0:7e:aa:7e:1c:a4:cd:37:20:a3:cb:24:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 9 14:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c46f3972ee6f831ff541df622c0dab92b949b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:d2:53:e8:1c:dc:a3:0e:61:31:ca:b5:ac:
79:0c:72:c8:32:70:df:8e:0c:8c:e2:58:aa:7f:cb:
ab:06:50:ba:ee:da:a5:c5:73:18:5e:46:fb:1c:4d:
f3:0e:11:ca:90:90:a5:0e:ce:5b:06:3a:71:e7:1a:
c3:8c:91:c6:a9:f2:21:2b:26:8e:1a:3a:49:6e:d9:
64:be:52:86:e3:9c:17:6d:1b:81:8c:0b:69:70:74:
ce:4b:8c:cd:92:a7:a1:6b:77:89:e2:0d:ac:aa:8f:
b5:1e:ce:1e:d7:bc:fe:6f:79:37:8e:5d:3a:7b:9c:
aa:40:d1:18:08:9a:bf:e5:93:c7:d1:8f:88:27:6a:
80:ef:41:a1:26:b6:fc:f8:11:44:d8:fb:93:6b:de:
0c:0b:c4:c8:a0:b6:03:a7:69:83:4a:45:7c:f1:1f:
8f:37:cd:5b:89:c1:1f:55:c3:65:39:d3:c4:dd:0a:
08:f5:5a:13:46:f0:9f:26:76:78:be:bf:66:f2:95:
92:43:f6:47:22:8d:c8:91:62:12:d6:29:1b:4b:b7:
6f:b6:2b:f1:8d:dc:53:f1:c7:7b:64:8a:27:4a:1b:
8b:1f:d2:90:33:fa:08:bb:4a:15:66:2c:47:02:f5:
18:b8:40:11:6e:6e:21:bd:e4:0a:ac:76:81:ab:b5:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:46:F3:97:2E:E6:F8:31:FF:54:1D:F6:22:C0:DA:B9:2B:94:9B:45
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XEbzly7m-DH_VB32IsDauSuUm0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.22.0/24
5.180.31.0/24
45.9.18.0/23
45.15.125.0/24
45.15.128.0/23
45.15.145.0-45.15.146.255
45.15.154.0/23
45.15.164.0/24
45.15.179.0/24
45.15.186.0/24
45.82.248.0/24
45.83.23.0-45.83.25.255
45.83.128.0/24
45.83.149.0/24
45.86.65.0/24
45.86.67.0-45.86.70.255
45.86.74.0/23
45.88.176.0/23
45.92.140.0/22
45.92.160.0/23
45.92.163.0-45.92.167.255
45.92.192.0-45.92.194.255
45.128.51.0/24
45.128.57.0-45.128.58.255
92.118.236.0/22
95.214.249.0-95.214.250.255
171.22.115.0/24
213.59.119.0-213.59.120.255
213.59.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:6e:ca:c5:96:6b:fe:ea:a4:43:1a:9f:bc:54:b9:ce:76:5b:
eb:67:48:c7:8c:1c:df:30:c7:f3:c1:db:1d:89:18:23:20:56:
39:85:4f:e3:ac:b6:aa:6d:7d:9d:52:6a:2e:4f:a9:c1:44:bc:
b7:6e:7f:0d:54:00:39:16:1b:7b:12:1e:7c:c9:a2:97:7f:f4:
75:1f:62:a9:6e:89:c2:9c:8b:ff:f4:b2:ff:1d:1b:9f:8c:02:
fd:ec:a2:16:c6:cc:db:52:5a:21:5b:ce:f0:0f:76:a5:64:a0:
ed:d8:14:cd:d2:ad:15:d1:08:dd:47:f2:b5:82:f4:30:20:d7:
0f:a4:04:01:5b:b7:28:17:75:0a:ff:33:f6:0b:39:fb:c7:e0:
38:95:e1:9a:36:be:8d:e2:d3:17:69:a9:8d:1d:78:4e:00:a2:
77:9f:ca:50:0e:6d:98:0b:19:f9:ee:62:c6:bf:3d:32:2b:ae:
fd:5e:2c:c0:bf:50:34:8e:dc:4a:c6:31:42:c2:e6:dd:3c:b6:
80:1e:61:e2:e7:0f:d3:62:dc:18:3b:33:b5:08:8f:d6:c1:db:
6a:19:fa:c4:97:39:b5:e2:4c:9a:26:89:17:ca:f7:92:69:b9:
66:89:ff:a0:ff:31:0e:76:c8:9a:9a:f3:cc:ee:6f:f5:b4:00:
05:fd:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:15 2026 by rpki-client