Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa
File: 5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa (raw, json)
Hash identifier: 3HB3Pm/gwM+qHx/iqgvsnkZiNMNHUAb9tRWCmqy13kA=
Subject key identifier: E5:53:95:8B:5C:CC:72:5F:D1:6F:3E:52:B4:4E:9D:6D:8B:FA:CC:23
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01A0CAFBAF598333874B1E82F734CF511802
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa
Signing time: Tue 22 Sep 2026 21:18:07 +0000
ROA not before: Tue 22 Sep 2026 21:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34625
IP address blocks: 37.75.232.0/24 maxlen: 24
37.75.233.0/24 maxlen: 24
37.75.234.0/24 maxlen: 24
37.75.235.0/24 maxlen: 24
37.75.236.0/24 maxlen: 24
37.75.237.0/24 maxlen: 24
37.75.238.0/24 maxlen: 24
37.75.239.0/24 maxlen: 24
195.242.236.0/24 maxlen: 24
195.242.238.0/24 maxlen: 24
195.242.239.0/24 maxlen: 24
212.119.56.0/24 maxlen: 24
212.119.57.0/24 maxlen: 24
212.119.58.0/24 maxlen: 24
212.119.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:fb:af:59:83:33:87:4b:1e:82:f7:34:cf:51:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Sep 22 21:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e553958b5ccc725fd16f3e52b44e9d6d8bfacc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:f0:c8:82:0d:cf:5a:23:8e:f7:ca:2d:38:
c4:db:95:d4:ca:63:98:e4:0e:69:e1:c6:0e:53:38:
96:e1:49:cd:7c:16:92:0d:47:91:8d:c4:c1:b4:94:
96:fc:ed:df:7a:c1:c1:03:ee:38:df:e6:62:84:49:
a7:95:90:65:d6:f7:ff:b8:40:01:35:f3:db:51:74:
46:64:ac:eb:ec:66:50:06:ad:44:19:9e:a4:9f:68:
bd:70:71:06:f8:99:c1:39:9b:1c:e8:d0:cd:1f:8e:
d7:00:61:2c:4b:b9:7c:b2:dd:e3:6a:8f:ec:34:50:
f3:da:4e:bc:a8:fb:87:c7:4c:aa:8b:64:b4:d5:cc:
bc:a2:dd:b4:4d:76:9f:21:b6:b4:14:22:13:30:2b:
1e:5c:e0:c2:bd:ee:51:f5:ae:d8:e4:6b:c9:26:f0:
6c:78:ae:c8:89:10:ac:5b:bf:26:64:99:42:98:75:
79:09:2a:c5:7e:fb:16:cc:63:c6:5e:06:a5:3f:ae:
19:e6:92:6c:ca:d4:35:75:79:17:8d:44:e9:01:f2:
c4:57:2a:59:e5:d4:82:7c:d5:8b:83:0e:f5:5d:bb:
a2:86:54:ae:aa:c9:4c:23:81:f5:4d:5d:05:6c:fd:
88:b6:10:23:8f:25:ac:a9:d1:ca:4c:8a:98:3a:0a:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:95:8B:5C:CC:72:5F:D1:6F:3E:52:B4:4E:9D:6D:8B:FA:CC:23
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.232.0/21
195.242.236.0/24
195.242.238.0/23
212.119.56.0/22
Signature Algorithm: sha256WithRSAEncryption
03:9e:5d:2a:84:08:03:c9:a3:d9:c2:d6:42:94:21:0c:57:89:
ed:b3:ae:6a:30:66:67:1e:01:91:90:45:a8:89:cc:3a:85:93:
b1:27:aa:dc:33:75:14:d1:4b:87:94:b0:bf:3e:d3:4e:36:3f:
8e:63:c7:8e:ba:d6:3c:10:75:43:60:e0:62:b0:f1:ea:64:00:
b0:ff:32:40:81:ca:62:50:90:d4:38:97:ef:83:7d:9e:43:8d:
d8:76:7e:79:06:ca:89:b8:0e:00:18:f0:0d:d5:23:d7:0c:c0:
ac:05:69:53:8b:31:f4:f0:5d:ca:c3:3f:5f:85:3f:7f:de:a7:
96:5f:bb:93:c5:8d:48:9b:b1:53:b4:13:78:e5:82:fb:f9:7a:
df:ed:92:58:0e:41:62:44:ec:a0:76:89:c0:cd:4c:cc:86:15:
fe:16:54:34:86:6c:4a:c6:81:49:e9:8e:69:9e:a7:ca:30:d1:
3d:df:25:84:7c:f9:8d:34:40:2e:51:ed:ec:06:86:3e:5d:02:
e6:6a:27:b8:2d:ca:d5:bb:35:29:77:a8:8a:73:c4:56:3d:66:
b3:0b:c1:e1:c4:82:f1:90:e5:be:9f:0e:6f:5c:d1:0d:cf:85:
b7:4d:85:3e:70:8e:9a:74:3f:3d:2e:b2:d5:17:72:13:81:30:
67:48:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:44:14 2026 by rpki-client