Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/5xL91cicHjEr0Gua0-R4t1teYC0.roa
File: 5xL91cicHjEr0Gua0-R4t1teYC0.roa (raw, json)
Hash identifier: skf5Tl39Q8VUYq9a2IZC66UhAhkPNinq994IXxIAa7A=
Subject key identifier: E7:12:FD:D5:C8:9C:1E:31:2B:D0:6B:9A:D3:E4:78:B7:5B:5E:60:2D
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019D083B7D333F658F456267D791917CD18E
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/5xL91cicHjEr0Gua0-R4t1teYC0.roa
Signing time: Thu 19 Mar 2026 22:33:29 +0000
ROA not before: Thu 19 Mar 2026 22:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:3b:7d:33:3f:65:8f:45:62:67:d7:91:91:7c:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Mar 19 22:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e712fdd5c89c1e312bd06b9ad3e478b75b5e602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:d6:71:db:27:19:db:1e:34:c4:07:16:53:
ad:cc:e0:2a:5f:07:89:81:88:49:d1:41:0c:14:ce:
3f:17:4c:bc:ae:e4:db:88:e1:3d:49:dd:97:13:8e:
12:46:69:7d:03:7e:92:63:e1:09:0b:f7:bd:bf:67:
28:a6:11:70:dd:80:be:43:eb:34:81:bf:e0:9f:38:
8d:d3:95:41:ea:18:35:d9:2c:a9:f9:c4:57:4c:bf:
82:4f:6d:c5:5b:30:62:80:3a:38:16:82:e4:7c:7d:
45:63:0a:85:8b:56:cd:05:5f:b0:8f:ea:13:ff:c2:
63:b7:e1:10:49:30:51:ba:63:20:f5:b7:17:05:d2:
f9:80:76:aa:6d:24:61:82:6c:f3:d5:a4:77:5b:a3:
74:90:4b:0d:cf:ef:a0:57:40:05:e1:a5:ce:f8:05:
39:f9:12:33:12:c6:8b:c5:5e:74:74:9e:a7:18:83:
00:75:f3:e8:82:42:8b:63:94:a8:f8:8b:21:55:88:
55:3e:62:b3:58:8e:7c:c8:bf:14:a8:f0:bb:78:39:
06:42:be:1d:c2:15:ad:47:11:69:d6:31:ce:5b:12:
5a:f9:e2:7c:ff:35:1b:a3:07:75:e2:06:80:86:af:
3d:a7:25:06:78:48:a5:9f:e1:59:e8:a3:79:a8:4e:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:FD:D5:C8:9C:1E:31:2B:D0:6B:9A:D3:E4:78:B7:5B:5E:60:2D
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/5xL91cicHjEr0Gua0-R4t1teYC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:d4:af:44:18:06:ab:7e:42:bf:5d:98:ec:5f:0e:32:a8:51:
9a:af:81:95:56:40:35:4f:45:a2:c9:23:9a:fb:00:7e:e5:75:
e8:25:8e:50:71:45:1c:f0:41:04:ac:19:de:35:09:62:0c:bc:
dc:49:69:53:1c:a5:70:14:7f:7b:bd:b0:3f:81:25:7a:a4:12:
21:a8:3b:66:02:b5:8c:7d:e4:40:b7:65:81:f9:63:75:30:84:
fc:a3:a8:0e:36:a8:0e:7a:64:5a:35:e7:74:e2:c8:68:31:46:
fd:cf:4d:57:18:02:ed:ba:4c:38:48:09:02:aa:39:98:c4:de:
e6:c5:a0:b6:88:bc:50:b8:f0:f2:14:27:f2:fa:fa:41:8a:f8:
fb:fb:98:70:5a:48:98:7a:22:d0:95:9b:e1:8f:d3:6c:25:ae:
93:85:92:a6:65:d5:ab:fa:2d:b8:0b:5f:40:c6:e3:b4:0c:50:
37:43:e9:c7:aa:9d:f9:c8:f5:6f:ca:e5:12:f6:fe:68:19:81:
a1:60:ea:03:0a:cd:2d:63:2d:c8:61:8e:70:ed:f4:97:c4:88:
fc:c5:bc:a5:44:d7:a0:a9:09:8d:bf:e1:89:c0:2d:22:a9:1d:
7f:51:2a:58:95:d8:7f:8c:96:25:c5:5e:64:92:ea:f3:69:33:
53:40:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:42:52 2026 by rpki-client