Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/5H4eDScCfFAm38LxmGO7nserXGw.roa
File: 5H4eDScCfFAm38LxmGO7nserXGw.roa (raw, json)
Hash identifier: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=
Subject key identifier: E4:7E:1E:0D:27:02:7C:50:26:DF:C2:F1:98:63:BB:9E:C7:AB:5C:6C
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 019F23693E96CEB2FE5628DB6815E44EB49C
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/5H4eDScCfFAm38LxmGO7nserXGw.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206436
IP address blocks: 185.223.52.0/24 maxlen: 24
193.202.96.0/21 maxlen: 24
193.202.104.0/24 maxlen: 24
2a10:8580::/48 maxlen: 48
2a10:8580:1::/48 maxlen: 48
2a10:8581::/48 maxlen: 48
2a10:8581:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3e:96:ce:b2:fe:56:28:db:68:15:e4:4e:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e47e1e0d27027c5026dfc2f19863bb9ec7ab5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:f0:cb:6b:0b:bb:cf:cb:4a:1e:63:44:86:
de:b2:8c:c7:a1:5b:af:81:b9:52:51:5d:9e:37:b9:
1a:b0:0f:ed:fa:43:67:cb:31:87:09:09:bf:26:59:
71:04:4f:7f:6a:57:13:85:59:61:1a:c8:5a:3a:0a:
79:7f:d2:bf:61:b1:d1:46:4b:67:f6:58:e6:a7:9c:
4a:65:bc:fa:fc:3e:b3:8d:19:91:2b:c6:65:5f:91:
49:ba:7f:7d:ec:62:a7:97:a5:a1:af:33:8d:bc:b2:
90:34:de:2b:33:89:0e:e8:90:3c:88:7d:33:7a:11:
45:06:cd:0e:eb:22:8a:d3:8c:ff:d7:d9:ec:5d:8d:
41:9b:12:5f:17:92:f1:68:49:8b:f8:93:32:c6:c6:
e8:45:44:ed:d8:61:39:79:27:2b:39:9c:26:4e:fd:
79:73:72:e3:fe:c3:52:6d:d5:1a:7f:7d:73:0b:da:
ff:53:16:1b:a8:b9:ac:0d:ee:70:1e:f3:b7:68:68:
89:45:0e:7b:68:99:10:f7:4e:a6:13:a0:77:49:32:
82:ee:3e:fe:19:b0:84:d9:b4:b2:d9:d2:93:a2:88:
88:3c:af:cb:f7:5d:a7:9c:96:6a:30:c8:20:af:d8:
07:dc:b3:e2:3c:d7:e6:3e:e2:a5:5d:7f:71:25:e5:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:1E:0D:27:02:7C:50:26:DF:C2:F1:98:63:BB:9E:C7:AB:5C:6C
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/5H4eDScCfFAm38LxmGO7nserXGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.52.0/24
193.202.96.0-193.202.104.255
IPv6:
2a10:8580::/47
2a10:8581::/47
Signature Algorithm: sha256WithRSAEncryption
62:e2:9d:89:c4:89:8a:6e:80:af:f5:e4:f6:b4:89:50:c7:38:
17:2c:96:2e:a1:2d:66:e4:49:98:c2:46:8e:b7:c6:ec:fa:b9:
eb:11:38:5a:c5:38:dc:93:52:3f:a7:14:8a:eb:ae:23:f6:fc:
bd:e2:ee:88:a0:32:c1:80:a7:3f:c2:48:5f:7d:2a:98:f7:56:
a6:93:ce:2a:42:ff:0e:d5:8a:d7:55:0f:86:6e:3a:75:01:d1:
19:15:83:88:9d:f8:1a:53:fa:d7:42:26:62:1e:43:00:40:94:
e7:7e:bf:3c:cc:82:f0:ae:f3:1b:4f:b9:f3:f2:39:4f:2b:0e:
24:eb:b2:28:d6:5d:5f:a7:cf:7a:b9:ee:5d:ad:2b:25:92:6d:
6e:88:7c:dd:9d:0c:0e:97:bd:ca:0a:65:f0:69:5e:0f:52:8c:
0d:3b:a5:85:ff:0c:48:73:3f:1c:e3:fb:e2:06:26:31:0f:f3:
f5:6f:ce:23:b6:e1:88:d2:86:ac:16:38:e3:2f:f9:d3:9e:20:
b4:12:6f:f3:2e:07:fc:71:d8:ff:38:05:cd:ab:48:10:e1:52:
0a:80:5f:79:8b:2a:a7:91:4b:fd:fb:91:fa:0b:38:8c:11:d6:
2f:74:75:b0:33:a2:d2:8c:e7:57:e6:8a:bc:93:4b:8d:43:92:
47:0b:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:18 2026 by rpki-client