Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/5OmLqr-n2zcW4kgovd5IkFO4hRQ.roa
File: 5OmLqr-n2zcW4kgovd5IkFO4hRQ.roa (raw, json)
Hash identifier: kqJ79xZfjQgal3yQwhNWvSTOtnt5qS22CzhectHYrfM=
Subject key identifier: E4:E9:8B:AA:BF:A7:DB:37:16:E2:48:28:BD:DE:48:90:53:B8:85:14
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019E36BA906448623B783D1FC8CA24D3AFF3
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/5OmLqr-n2zcW4kgovd5IkFO4hRQ.roa
Signing time: Sun 17 May 2026 16:17:36 +0000
ROA not before: Sun 17 May 2026 16:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:36:ba:90:64:48:62:3b:78:3d:1f:c8:ca:24:d3:af:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 17 16:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4e98baabfa7db3716e24828bdde489053b88514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:96:b6:02:53:0b:bf:94:8f:e9:fb:e6:8e:
3d:96:8e:60:d2:32:63:dd:26:3a:55:5d:97:08:5b:
df:95:46:4b:e1:56:fa:c6:82:8b:23:4b:8f:ca:52:
42:7c:fb:5f:69:c4:50:86:35:58:f6:19:b5:f8:2f:
36:93:a8:79:37:6e:7c:0c:14:4b:00:05:fa:53:a6:
2e:e4:6b:cd:24:32:4f:62:dd:42:0a:2b:8f:73:43:
33:78:02:9e:0f:1b:31:24:85:66:de:3f:fb:f1:b6:
e3:68:3d:6b:5d:8e:f6:5f:44:2e:bd:e9:48:73:50:
62:92:e9:e5:00:18:81:b5:19:b0:9b:a7:ac:53:f2:
e0:dd:e7:19:56:d6:d1:47:1f:00:05:00:57:4a:00:
68:73:13:8e:a8:03:f0:b1:98:62:69:f0:59:8d:c3:
f7:c8:45:4f:2d:f6:d7:d6:01:0c:f1:ad:fa:09:cb:
ba:68:c5:71:90:08:c8:c4:a6:6c:dd:b7:d5:7b:c1:
63:e2:cc:c0:5b:d3:be:14:37:27:95:72:fc:ee:22:
9b:e0:fc:15:a3:b8:ba:d3:d5:cd:72:2b:d5:b0:24:
cf:28:d4:54:82:76:88:9e:47:9d:15:61:d8:54:1c:
79:b0:3a:e4:6c:5c:c8:68:5b:e2:90:b9:68:c7:79:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:8B:AA:BF:A7:DB:37:16:E2:48:28:BD:DE:48:90:53:B8:85:14
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/5OmLqr-n2zcW4kgovd5IkFO4hRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.234.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.159.255
91.92.34.0/24
91.92.40.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.207.0/24
93.152.210.0/23
93.152.214.0-93.152.218.255
93.152.221.0-93.152.223.255
93.152.226.0/23
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:97:ec:3d:33:0f:89:82:db:63:8b:fb:fc:c5:81:e1:46:5c:
a9:4f:00:23:07:72:de:11:d6:0c:61:6c:a4:04:5b:9f:7b:ca:
03:ca:97:b4:bb:34:70:b2:46:e7:d9:eb:c6:95:ba:2f:93:89:
c9:99:48:14:8f:34:b6:98:43:f7:33:2b:c1:79:59:28:88:17:
a1:21:72:a9:f9:76:74:5a:ce:23:a4:74:b8:41:06:14:3f:b6:
a4:b8:2e:a8:c6:f1:f6:dc:2b:5a:c5:2d:7f:03:53:a0:8a:5e:
bf:9c:21:4a:f4:9a:bc:b4:65:be:79:af:14:6d:4f:86:90:c1:
60:a7:ef:7d:4b:21:7b:b4:72:ff:67:b8:1f:31:5c:48:76:fe:
0b:b2:7e:8d:37:a6:fc:b9:5f:64:be:98:e1:84:a4:03:79:ad:
b7:41:d9:a4:22:58:04:d6:26:cc:f4:69:12:53:fe:ab:bc:96:
a9:56:05:77:78:ec:2f:0d:56:38:7a:1b:2e:83:84:bd:af:b8:
78:4c:bc:f7:f7:39:f4:76:3d:a0:f9:6d:82:9a:f6:22:77:ed:
6a:8f:22:39:3b:d2:46:39:9c:56:81:2f:e4:75:12:ce:d8:f8:
d7:9e:31:77:1c:bb:ca:9c:2a:7e:c9:59:ea:51:4c:f9:30:99:
9e:88:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:02:40 2026 by rpki-client