Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/5fyuVmfLSeALcs0J2JM4gml6SDw.roa
File: 5fyuVmfLSeALcs0J2JM4gml6SDw.roa (raw, json)
Hash identifier: 6PLb2XbuMUB255BWvIZP7Um84f6SEoVbOEshOMtbzmk=
Subject key identifier: E5:FC:AE:56:67:CB:49:E0:0B:72:CD:09:D8:93:38:82:69:7A:48:3C
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 01A13110FBF3406203502438C113866B2B55
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/5fyuVmfLSeALcs0J2JM4gml6SDw.roa
Signing time: Mon 12 Oct 2026 17:02:38 +0000
ROA not before: Mon 12 Oct 2026 17:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12417
IP address blocks: 46.174.136.0/24 maxlen: 24
46.174.137.0/24 maxlen: 24
91.234.46.0/24 maxlen: 24
178.218.160.0/20 maxlen: 24
178.218.163.0/24 maxlen: 24
178.218.170.0/24 maxlen: 24
178.218.171.0/24 maxlen: 24
178.218.172.0/24 maxlen: 24
178.218.173.0/24 maxlen: 24
178.218.174.0/24 maxlen: 24
185.220.24.0/22 maxlen: 24
185.220.24.0/24 maxlen: 24
185.220.25.0/24 maxlen: 24
185.220.27.0/24 maxlen: 24
2a0b:ee41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:10:fb:f3:40:62:03:50:24:38:c1:13:86:6b:2b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Oct 12 17:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5fcae5667cb49e00b72cd09d8933882697a483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:11:b3:70:cf:5c:df:c0:fb:27:64:d4:1a:
f5:00:87:c2:35:ab:81:d4:5a:fe:f1:eb:5c:d5:71:
c1:ea:a4:52:de:1a:82:92:fa:11:89:06:4d:93:37:
59:9a:38:4a:d7:56:62:62:58:42:32:f0:fe:fd:da:
f8:fe:32:3f:02:93:da:47:7b:ed:33:e9:ef:dc:30:
58:53:cf:8a:72:8e:fb:93:9d:e1:0a:4d:8f:2d:16:
8e:da:2e:7b:d3:45:c6:b9:93:fb:7b:8c:ff:6d:3f:
bf:db:ef:04:8b:6b:96:7d:ec:45:fe:e0:f3:c1:5a:
6a:38:75:13:05:4a:1e:1e:26:e6:5c:2f:61:ff:7d:
8d:00:6d:c3:5d:7b:f7:ab:b7:bb:c7:86:54:67:bd:
17:60:8e:60:e8:15:cf:5c:72:46:77:6d:7e:7e:47:
a8:46:03:74:85:53:d7:fd:70:1b:85:29:90:db:38:
77:5b:a0:16:e4:c6:48:86:ab:a0:f3:4e:23:18:8b:
5b:d8:46:1f:a7:f6:6a:2d:33:bb:95:d7:18:cb:ef:
96:1f:3e:ed:45:bd:3e:ad:06:28:77:a5:a9:aa:63:
f1:5b:39:29:e7:13:5e:b4:fc:e0:31:14:89:07:04:
7f:03:e0:59:22:cb:ae:76:41:55:df:08:11:c9:83:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:AE:56:67:CB:49:E0:0B:72:CD:09:D8:93:38:82:69:7A:48:3C
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/5fyuVmfLSeALcs0J2JM4gml6SDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0/23
91.234.46.0/24
178.218.160.0/20
185.220.24.0/22
IPv6:
2a0b:ee41::/32
Signature Algorithm: sha256WithRSAEncryption
88:f8:ff:f3:d5:77:3d:a3:fb:6b:de:65:f3:6a:54:46:f6:94:
75:2f:2e:92:90:49:05:0c:8e:07:7d:e0:e4:fc:55:31:79:24:
55:34:75:2c:1a:a9:fd:32:24:69:05:59:3e:8e:e2:ea:b7:5f:
07:43:8a:09:ba:7d:05:95:60:c5:a2:69:b1:32:c9:d9:fc:8e:
36:bd:f7:77:0b:86:23:0a:d2:2f:a6:38:4d:f7:90:2b:64:ad:
ba:25:71:b7:bf:27:5a:de:11:4f:02:76:d5:89:cd:43:41:19:
3e:b7:d8:5d:9c:c2:ac:a7:39:52:83:4e:61:a9:90:82:0e:1c:
8c:cb:0b:ba:ec:fb:34:79:a7:30:f8:56:5d:7d:5b:7b:74:98:
42:99:d5:99:81:f2:4a:8d:6c:21:80:5e:42:82:87:f9:05:e7:
2d:2e:bd:60:71:d8:ff:3d:84:41:6d:f2:a4:d3:88:5c:97:ca:
78:85:bf:25:4f:13:64:12:22:76:6f:cc:5f:3d:11:c4:ca:62:
ff:1f:26:e6:9b:8d:d1:02:c2:6f:2a:05:b5:71:ff:1d:65:ca:
30:80:14:88:dd:e2:3c:2d:76:56:b8:25:c1:cc:84:d8:44:07:
92:18:b7:81:69:ce:be:5c:a6:46:18:d5:e0:91:7a:a4:c4:6c:
8a:c1:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:20 2026 by rpki-client