Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/5YzsLbvo1eEM56OytpeUbwdRlg0.roa
File: 5YzsLbvo1eEM56OytpeUbwdRlg0.roa (raw, json)
Hash identifier: 7piLzYpDBaxI4WC+KagvEaQCtvnYZvzdJriEMBRo3+8=
Subject key identifier: E5:8C:EC:2D:BB:E8:D5:E1:0C:E7:A3:B2:B6:97:94:6F:07:51:96:0D
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A08AA2E8CE72CEA1A98511D7DB3A114B7E
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/5YzsLbvo1eEM56OytpeUbwdRlg0.roa
Signing time: Thu 10 Sep 2026 09:25:27 +0000
ROA not before: Thu 10 Sep 2026 09:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200555
IP address blocks: 2.58.188.0/22 maxlen: 24
31.14.60.0/22 maxlen: 24
89.39.216.0/21 maxlen: 24
185.58.208.0/22 maxlen: 24
185.58.208.0/24 maxlen: 24
185.58.209.0/24 maxlen: 24
185.58.210.0/24 maxlen: 24
185.58.211.0/24 maxlen: 24
194.146.55.0/24 maxlen: 24
194.146.63.0/24 maxlen: 24
194.146.70.0/24 maxlen: 24
194.146.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:a2:e8:ce:72:ce:a1:a9:85:11:d7:db:3a:11:4b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Sep 10 09:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e58cec2dbbe8d5e10ce7a3b2b697946f0751960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:98:de:8a:c1:b0:12:48:5e:05:41:d0:0c:
dc:db:eb:c7:a0:f3:b4:68:9e:60:2a:31:e6:0e:86:
34:cb:f7:c1:c8:cb:b4:86:91:9f:2d:d9:fc:d3:9e:
58:89:45:cb:08:81:3f:0f:0f:8c:b6:08:a3:35:4e:
19:7f:85:a7:0e:66:11:be:32:fe:d0:bc:29:b2:bf:
8e:fd:c0:04:50:20:e4:9b:29:93:ed:0e:25:91:83:
86:17:73:0c:65:00:35:ff:86:a9:b1:7c:2d:df:cb:
23:f2:db:85:c0:0d:a9:ba:ce:b9:58:03:f9:24:7e:
4a:41:14:27:69:05:d2:73:d8:39:b2:5a:ec:3c:61:
76:09:55:11:ab:9a:45:94:23:08:39:6c:5a:2c:71:
d1:21:56:01:d8:dc:1e:3c:e5:9e:75:26:95:04:e3:
69:7b:63:b4:53:4b:ef:bd:16:74:de:ff:ab:ba:98:
07:ae:78:95:21:b1:af:c4:06:f5:64:fd:ca:72:13:
a1:44:64:66:43:9a:77:1c:d8:49:e0:40:4a:5e:61:
09:c6:20:fc:6f:94:9b:7e:39:a9:b5:2b:37:60:c5:
db:a1:63:e3:ea:e4:b1:37:88:ea:d0:48:4a:17:de:
f8:90:4e:8c:c8:8e:2f:ae:1d:29:7e:9b:54:6c:6a:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:EC:2D:BB:E8:D5:E1:0C:E7:A3:B2:B6:97:94:6F:07:51:96:0D
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/5YzsLbvo1eEM56OytpeUbwdRlg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.188.0/22
31.14.60.0/22
89.39.216.0/21
185.58.208.0/22
194.146.55.0/24
194.146.63.0/24
194.146.70.0/24
194.146.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:86:4b:30:20:2c:8f:04:c9:fa:b2:84:cb:9e:66:cd:bc:d1:
26:80:70:74:1b:c2:ca:99:b9:16:c4:03:04:20:67:d0:47:84:
31:59:d8:5c:07:e4:75:75:c2:10:c7:e4:7e:91:9d:9d:3c:9e:
e6:52:9c:1b:44:72:da:7f:51:87:e6:57:04:a8:12:47:c7:31:
ee:90:ad:3c:41:59:09:83:ef:4c:22:e2:ab:13:2a:41:96:71:
78:a6:10:39:96:bf:19:3f:77:1d:da:ad:f2:04:83:75:4b:44:
0a:f6:4f:43:3b:26:57:37:e2:f7:a5:da:3d:71:1c:04:57:7d:
61:64:de:53:cc:64:65:4d:7c:7f:4e:c0:a6:7f:19:2a:72:d3:
fe:23:3b:5d:a0:86:14:5e:ad:f7:47:54:dc:13:30:dd:f0:1c:
dd:41:6a:e7:1a:7b:58:f8:c3:00:ca:d6:78:38:c0:99:57:d5:
4d:21:f5:63:e6:6c:e4:7f:e2:0d:85:7a:18:79:ab:d2:99:64:
31:1e:26:e7:b6:50:0b:c0:cc:58:1b:8a:40:ee:b9:13:8b:a9:
b4:be:c7:97:58:18:9c:29:b6:f4:57:1e:0e:86:50:6a:58:a3:
3b:b3:ed:7e:a5:81:d0:c5:a8:b8:9d:36:a7:ec:fa:4c:bb:e2:
da:9e:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:13:49 2026 by rpki-client