Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iT5AnWkXlwGoL342Adi5GaZgM10.roa
File: iT5AnWkXlwGoL342Adi5GaZgM10.roa (raw, json)
Hash identifier: O0y210b9jVBsySlVqWJCJ+WxqQ5nAWATI+T7DYMavNY=
Subject key identifier: 89:3E:40:9D:69:17:97:01:A8:2F:7E:36:01:D8:B9:19:A6:60:33:5D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0EF61CF31D6367CE4DF40D2BD5F2718AA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iT5AnWkXlwGoL342Adi5GaZgM10.roa
Signing time: Tue 29 Sep 2026 22:55:59 +0000
ROA not before: Tue 29 Sep 2026 22:55:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.180.22.0/24 maxlen: 24
5.180.31.0/24 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/24 maxlen: 24
45.15.129.0/24 maxlen: 24
45.15.145.0/24 maxlen: 24
45.15.146.0/24 maxlen: 24
45.15.154.0/24 maxlen: 24
45.15.155.0/24 maxlen: 24
45.15.164.0/24 maxlen: 24
45.15.179.0/24 maxlen: 24
45.15.186.0/24 maxlen: 24
45.82.248.0/24 maxlen: 24
45.83.23.0/24 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.128.0/24 maxlen: 24
45.83.149.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.88.183.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/24 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/24 maxlen: 24
45.92.161.0/24 maxlen: 24
45.92.163.0/24 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/24 maxlen: 24
45.92.193.0/24 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.51.0/24 maxlen: 24
45.128.57.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.249.0/24 maxlen: 24
95.214.250.0/24 maxlen: 24
171.22.115.0/24 maxlen: 24
213.59.119.0/24 maxlen: 24
213.59.120.0/24 maxlen: 24
213.59.126.0/24 maxlen: 24
213.59.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:61:cf:31:d6:36:7c:e4:df:40:d2:bd:5f:27:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 29 22:55:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=893e409d69179701a82f7e3601d8b919a660335d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:54:10:bc:d2:07:06:10:00:f5:c2:24:96:
d9:1d:5b:8b:59:10:d3:18:a7:71:0c:d8:9f:f1:76:
12:7d:60:db:be:11:a5:25:0b:43:f1:a0:13:12:3c:
47:a4:a1:c9:16:35:8f:2d:77:29:43:7a:70:e6:a4:
1d:80:b0:84:c5:0a:bf:a1:19:2d:96:44:ae:dd:8d:
01:27:37:2e:23:d8:81:b4:4b:1f:68:82:c8:ea:ed:
95:97:26:f8:f8:c1:f5:6e:22:7a:a8:fa:56:41:cf:
1c:ea:c3:6e:9b:5a:2c:0b:03:c7:32:b5:b9:22:2c:
e9:2c:82:6b:a9:7c:26:a3:51:00:1d:d9:c5:e9:3c:
ea:11:7d:67:00:4e:e8:ab:ad:1b:66:f3:0c:92:d1:
7d:ae:53:02:a7:5e:9d:88:00:22:c7:a6:1c:68:f1:
79:98:d3:d0:ba:6d:03:8a:8d:6c:9e:75:d2:f9:37:
21:99:cf:bf:31:f1:65:32:8b:5d:1b:bd:ba:f2:3e:
da:6d:01:21:f8:ec:f2:e2:9c:35:7a:86:69:2e:6a:
27:73:75:5f:e4:03:0a:f6:43:5a:d2:6e:9a:51:74:
18:73:20:05:56:0a:cf:06:58:05:ea:34:a6:5a:f1:
6d:95:b8:c4:0d:38:8d:e5:1e:55:bf:cf:fb:e4:30:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:40:9D:69:17:97:01:A8:2F:7E:36:01:D8:B9:19:A6:60:33:5D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iT5AnWkXlwGoL342Adi5GaZgM10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.22.0/24
5.180.31.0/24
45.15.125.0/24
45.15.128.0/23
45.15.145.0-45.15.146.255
45.15.154.0/23
45.15.164.0/24
45.15.179.0/24
45.15.186.0/24
45.82.248.0/24
45.83.23.0-45.83.25.255
45.83.128.0/24
45.83.149.0/24
45.86.65.0/24
45.86.67.0-45.86.70.255
45.86.74.0/23
45.88.176.0/23
45.88.183.0/24
45.89.105.0-45.89.106.255
45.92.140.0/22
45.92.160.0/23
45.92.163.0-45.92.167.255
45.92.192.0-45.92.194.255
45.128.51.0/24
45.128.57.0-45.128.58.255
92.118.236.0/22
95.214.249.0-95.214.250.255
171.22.115.0/24
213.59.119.0-213.59.120.255
213.59.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:57:e5:d5:c6:27:dd:9c:25:ba:6b:9d:f6:f3:98:5e:c3:9a:
05:be:f1:7c:89:7a:42:28:07:43:cb:f3:f8:50:db:94:8e:cb:
fa:e8:26:ac:2a:69:44:2f:61:1c:96:01:4a:c4:25:d1:fd:5f:
91:54:a0:19:4d:a7:47:99:9b:83:46:29:91:f1:f5:2f:13:63:
e8:b0:2b:01:a7:7e:90:a7:53:ad:c4:7b:ee:f8:f9:a4:d8:23:
05:e2:6f:4c:eb:70:12:79:9f:d6:5c:cd:52:e3:65:12:7f:85:
08:c9:6c:a0:78:1a:39:8e:f9:74:6e:72:f6:a8:92:b2:aa:a7:
7a:6a:9e:9f:83:e9:85:d6:a7:88:44:79:d9:f5:3d:08:f7:3a:
9a:db:7b:07:19:44:ee:15:79:d3:5b:58:1c:fc:3b:d0:41:8e:
f4:38:8d:ac:0b:50:5d:ab:3f:e2:30:44:f0:0c:f9:15:29:66:
54:48:8d:6f:0b:24:6c:f9:99:6a:61:cc:fb:80:3c:e7:f1:4e:
46:b8:91:2c:8c:30:b6:90:da:55:bb:b1:08:f8:cf:59:ae:c0:
92:ce:62:db:a6:20:e3:61:b7:f8:13:41:6e:a4:f4:fd:df:ea:
a6:6c:b0:82:e5:6b:17:61:2d:41:27:66:cb:02:49:df:e9:92:
58:2f:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:11 2026 by rpki-client