Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/_vpq-qi4EQKFfckyOrU1g_mLI6k.roa
File: _vpq-qi4EQKFfckyOrU1g_mLI6k.roa (raw, json)
Hash identifier: NEepCH4VA5uYtx4dkADmgFVyzmZ4nNQxuJCHt+PP3M8=
Subject key identifier: FE:FA:6A:FA:A8:B8:11:02:85:7D:C9:32:3A:B5:35:83:F9:8B:23:A9
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019E8D177C0094DDF8180AA4066B4F1E152E
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/_vpq-qi4EQKFfckyOrU1g_mLI6k.roa
Signing time: Wed 03 Jun 2026 10:46:26 +0000
ROA not before: Wed 03 Jun 2026 10:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204548
IP address blocks: 45.83.41.0/24 maxlen: 24
63.250.59.0/24 maxlen: 24
63.250.60.0/24 maxlen: 24
79.108.162.0/24 maxlen: 24
81.28.6.0/24 maxlen: 24
83.229.84.0/24 maxlen: 24
83.229.85.0/24 maxlen: 24
83.229.86.0/24 maxlen: 24
83.229.87.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.240.144.0/24 maxlen: 24
185.47.174.0/24 maxlen: 24
185.53.210.0/24 maxlen: 24
185.139.230.0/24 maxlen: 24
185.181.10.0/24 maxlen: 24
185.227.108.0/24 maxlen: 24
185.227.111.0/24 maxlen: 24
185.237.14.0/24 maxlen: 24
185.237.15.0/24 maxlen: 24
185.237.96.0/24 maxlen: 24
185.237.97.0/24 maxlen: 24
185.247.118.0/24 maxlen: 24
194.36.88.0/24 maxlen: 24
194.37.80.0/24 maxlen: 24
195.238.122.0/24 maxlen: 24
2a06:c5c0:1100::/48 maxlen: 48
2a07:3b80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:17:7c:00:94:dd:f8:18:0a:a4:06:6b:4f:1e:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jun 3 10:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fefa6afaa8b81102857dc9323ab53583f98b23a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:66:25:b0:eb:c7:1f:c6:07:d7:51:dd:31:
7e:95:f6:e3:59:38:9f:cc:3b:f3:94:c0:ae:9d:c3:
82:ca:62:4e:0e:6a:0f:66:16:a2:90:0b:98:1b:88:
42:8c:0e:a9:97:56:93:45:33:15:a3:f2:78:1a:2a:
67:47:ad:2e:bb:f4:87:ca:49:95:ea:fe:45:b3:46:
04:7a:47:a2:4c:8c:4c:85:05:32:4f:3c:8a:f9:d4:
b3:06:d8:83:95:c2:36:fd:ee:20:a5:90:d0:f8:d2:
eb:84:b3:dc:0d:d1:e4:ab:a0:a9:43:92:37:66:3a:
aa:a6:12:e5:05:e4:6a:d3:46:78:d8:c4:13:c1:bf:
c5:d3:0e:fb:2b:f9:96:a9:f4:1a:4d:6d:60:df:ae:
c8:fe:01:7c:c6:5e:fc:36:c6:8e:b4:d8:6e:3b:04:
09:d5:53:5e:cc:7e:ec:69:de:3f:3f:e9:77:63:00:
44:68:2c:2a:bb:b0:6d:96:d6:5e:7a:7e:2b:29:4b:
3e:e0:ba:c3:33:ec:2c:fc:69:ce:99:2b:3f:b9:c9:
dd:9b:e6:fc:40:08:a0:58:f2:9f:b0:02:5a:ee:62:
6f:4a:42:5e:de:5a:70:b7:e3:70:e7:3d:f6:33:6c:
1d:ac:ce:33:13:6b:28:73:de:b0:31:e1:ce:d4:f8:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:6A:FA:A8:B8:11:02:85:7D:C9:32:3A:B5:35:83:F9:8B:23:A9
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/_vpq-qi4EQKFfckyOrU1g_mLI6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.41.0/24
63.250.59.0-63.250.60.255
79.108.162.0/24
81.28.6.0/24
83.229.84.0/22
103.13.211.0/24
103.240.144.0/24
185.47.174.0/24
185.53.210.0/24
185.139.230.0/24
185.181.10.0/24
185.227.108.0/24
185.227.111.0/24
185.237.14.0/23
185.237.96.0/23
185.247.118.0/24
194.36.88.0/24
194.37.80.0/24
195.238.122.0/24
IPv6:
2a06:c5c0:1100::/48
2a07:3b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
8d:a5:25:4e:3a:57:ec:e7:c7:cc:4d:ae:02:bf:52:e1:cc:de:
0b:85:fa:63:58:37:83:a8:e9:a5:65:09:c8:8a:ab:df:3f:e7:
f7:90:63:c6:b2:40:90:1d:11:61:81:37:11:5b:02:3f:96:1a:
c8:c0:eb:3f:8d:84:01:f3:8c:bf:c9:b5:f0:a8:5b:04:0f:14:
07:42:ad:71:e2:99:40:77:0a:2e:e0:1c:a5:d7:83:ab:a7:9b:
13:ed:a5:9f:f6:21:82:1c:6b:a1:39:88:cf:1d:e3:e8:09:80:
5d:b3:2f:06:12:b4:c5:2d:f4:79:3f:8b:af:93:77:d8:0c:f7:
d1:de:f3:60:a0:75:8a:c9:fe:24:00:24:d4:14:1e:e4:d5:5d:
d1:aa:cd:2d:73:9e:92:93:f8:54:dd:11:c4:08:30:e8:32:a3:
f4:9c:0f:79:99:80:34:ac:d8:45:aa:07:26:e5:a4:e5:40:36:
92:45:dd:c2:05:86:7f:ea:12:45:e8:74:8c:e3:90:2f:01:35:
84:87:b4:4a:07:c7:fb:cc:67:53:6d:a5:5c:ff:76:dc:64:29:
66:e9:6e:ba:09:0f:ab:00:b4:c6:46:5c:df:20:c6:b7:20:46:
df:28:22:c4:b8:8f:76:17:87:03:38:ff:93:3f:45:fa:4d:84:
66:65:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:22 2026 by rpki-client