Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/5YE7fWWVytrvyua3_nXs2dNJAvY.roa
File: 5YE7fWWVytrvyua3_nXs2dNJAvY.roa (raw, json)
Hash identifier: 42Mqmvv7wLcjd4Y1FmsKUjmJVC4FJiFFxreVYptF9Xs=
Subject key identifier: E5:81:3B:7D:65:95:CA:DA:EF:CA:E6:B7:FE:75:EC:D9:D3:49:02:F6
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019EECD0E6264184AB426774EAE54CB26C5A
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/5YE7fWWVytrvyua3_nXs2dNJAvY.roa
Signing time: Mon 22 Jun 2026 00:52:53 +0000
ROA not before: Mon 22 Jun 2026 00:52:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44285
IP address blocks: 5.1.43.0/24 maxlen: 24
37.32.32.0/21 maxlen: 21
37.32.32.0/22 maxlen: 22
37.32.32.0/24 maxlen: 24
37.32.33.0/24 maxlen: 24
37.32.34.0/24 maxlen: 24
37.32.35.0/24 maxlen: 24
37.32.36.0/22 maxlen: 24
37.32.37.0/24 maxlen: 24
37.32.38.0/24 maxlen: 24
37.32.39.0/24 maxlen: 24
37.75.243.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.244.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
45.9.252.0/22 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.253.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
45.87.4.0/23 maxlen: 24
45.140.224.0/22 maxlen: 22
45.140.228.0/22 maxlen: 24
45.156.180.0/22 maxlen: 24
45.156.192.0/22 maxlen: 24
46.28.72.0/21 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.73.0/24 maxlen: 24
46.28.74.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
80.249.114.0/24 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/22 maxlen: 22
84.47.224.0/24 maxlen: 24
84.47.225.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
84.47.228.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.230.0/23 maxlen: 24
84.47.231.0/24 maxlen: 24
85.198.24.0/22 maxlen: 24
85.198.48.0/20 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.182.248.0/22 maxlen: 22
185.182.248.0/23 maxlen: 23
185.182.250.0/23 maxlen: 23
185.182.250.0/24 maxlen: 24
185.182.251.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
195.110.38.0/23 maxlen: 23
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
217.172.120.0/21 maxlen: 24
217.172.124.0/23 maxlen: 23
217.172.126.0/23 maxlen: 23
217.172.127.0/24 maxlen: 24
2a02:828::/29 maxlen: 29
2a02:828::/32 maxlen: 32
2a02:828::/48 maxlen: 48
2a02:828::/64 maxlen: 64
2a02:828:1::/48 maxlen: 48
2a02:829::/32 maxlen: 32
2a02:82a::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
2a02:82e::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 22:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:d0:e6:26:41:84:ab:42:67:74:ea:e5:4c:b2:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 22 00:52:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5813b7d6595cadaefcae6b7fe75ecd9d34902f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:a9:52:f7:83:ef:84:38:fb:76:fa:68:6e:
59:a2:cf:37:1a:be:cd:a5:81:69:52:f0:c3:06:6c:
b0:33:4f:a9:14:db:39:bd:f6:d0:29:b7:a2:4f:1e:
a4:1f:60:21:80:60:f9:be:90:03:6a:15:3d:ee:ec:
6e:5b:a0:21:96:cd:94:09:cd:30:aa:51:78:a7:c1:
77:71:f7:e9:88:6a:bd:75:b6:62:b1:ba:f8:2d:2a:
af:37:03:c5:43:de:43:6b:24:a3:44:40:c2:38:e5:
f8:ca:e4:38:80:91:cf:8e:ed:8a:00:df:17:ac:57:
ac:05:6c:fb:51:92:18:c7:67:a2:52:b2:7b:a4:ef:
61:ef:5f:e7:18:71:d2:3a:d2:2d:db:bb:08:0d:7e:
a0:67:0e:60:0f:72:74:ec:a6:0c:56:07:74:4f:3e:
56:f9:6f:e8:1c:4b:eb:73:04:f0:ab:0c:1d:ec:78:
37:be:ff:3f:f2:8f:6b:d4:37:c4:52:ad:91:a2:73:
1c:55:57:55:d3:32:53:21:e3:c8:33:17:40:20:33:
b4:05:40:51:48:bf:13:6b:03:f3:60:0e:9c:4c:cc:
2e:38:2d:2b:a0:4b:7b:68:3b:7c:bd:af:dc:98:10:
5a:fa:9b:1b:b8:b6:70:82:ab:c3:9c:a7:7e:33:7c:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:3B:7D:65:95:CA:DA:EF:CA:E6:B7:FE:75:EC:D9:D3:49:02:F6
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/5YE7fWWVytrvyua3_nXs2dNJAvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.43.0/24
37.32.32.0/21
37.75.243.0-37.75.247.255
45.9.252.0/22
45.87.4.0/23
45.140.224.0/21
45.156.180.0/22
45.156.192.0/22
46.28.72.0/21
78.110.120.0/22
80.249.114.0/24
84.47.224.0/21
85.198.24.0/22
85.198.48.0/20
88.135.37.0-88.135.39.255
91.236.168.0/23
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
3b:fe:23:47:bf:e9:8f:43:c4:ec:40:fe:be:c3:b3:b8:8a:31:
b2:6d:26:64:9a:38:ed:e3:84:51:21:76:93:7e:d8:4c:78:2f:
b7:91:79:24:63:4f:5b:60:3c:f2:57:cc:fb:97:97:e7:b4:93:
97:13:93:87:bc:bc:8b:1c:5a:6e:cf:ff:b5:3a:54:4d:fc:59:
65:c3:4b:77:25:6c:e1:f0:3d:40:de:4b:4b:04:63:62:4b:b1:
1b:7a:35:60:1e:c7:c1:37:a8:f6:c6:25:6c:31:91:41:32:0f:
2b:c3:ba:4b:92:2d:50:29:fa:cd:82:f9:12:ae:4e:56:c3:3e:
33:e9:8e:ee:98:69:3a:3b:d5:c9:4f:99:a9:4c:38:77:6d:05:
28:59:fe:9a:59:d3:8e:d9:47:a5:ae:69:68:0d:2e:6c:46:e6:
52:83:5c:93:13:e8:99:89:2a:f2:b2:75:3d:99:65:5e:32:65:
96:97:10:ef:a8:75:ea:24:c2:12:81:e6:f8:ad:eb:6e:2a:a3:
e8:b1:c6:8b:1f:d1:39:30:a7:a5:92:e9:a6:67:f8:39:b7:46:
16:52:68:3d:13:6f:34:dd:bd:ad:df:c0:1e:8c:d5:c4:09:79:
31:42:d4:10:6b:81:bd:80:ce:eb:16:36:fe:89:4e:07:87:d2:
8f:a4:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 07:05:41 2026 by rpki-client