Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/FSSe1tEDCP5eij1O2L6qukAQDhc.roa
File: FSSe1tEDCP5eij1O2L6qukAQDhc.roa (raw, json)
Hash identifier: xQCqNXwk7J8ALgUJnGIQA4t2bApXYtk3W+6tyFVQHYk=
Subject key identifier: 15:24:9E:D6:D1:03:08:FE:5E:8A:3D:4E:D8:BE:AA:BA:40:10:0E:17
Certificate issuer: /CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Certificate serial: 019F8977232E1A28BE7B5F76BB369FBFEEC3
Authority key identifier: E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/FSSe1tEDCP5eij1O2L6qukAQDhc.roa
Signing time: Wed 22 Jul 2026 10:55:14 +0000
ROA not before: Wed 22 Jul 2026 10:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50923
IP address blocks: 5.53.16.0/20 maxlen: 20
5.53.16.0/21 maxlen: 21
5.53.16.0/22 maxlen: 22
5.53.20.0/22 maxlen: 22
5.53.24.0/21 maxlen: 21
5.53.24.0/22 maxlen: 22
5.53.28.0/22 maxlen: 22
5.53.30.0/24 maxlen: 24
37.60.16.0/21 maxlen: 21
37.60.16.0/22 maxlen: 22
37.60.16.0/23 maxlen: 23
37.60.16.0/24 maxlen: 24
37.60.17.0/24 maxlen: 24
37.60.18.0/23 maxlen: 23
37.60.20.0/22 maxlen: 22
37.60.20.0/23 maxlen: 23
37.60.22.0/23 maxlen: 23
37.143.96.0/20 maxlen: 20
37.143.96.0/21 maxlen: 21
37.143.96.0/22 maxlen: 22
37.143.97.0/24 maxlen: 24
37.143.100.0/22 maxlen: 22
37.143.104.0/21 maxlen: 21
37.143.104.0/22 maxlen: 22
37.143.108.0/22 maxlen: 22
178.208.224.0/19 maxlen: 19
178.208.224.0/20 maxlen: 20
178.208.224.0/21 maxlen: 21
178.208.232.0/21 maxlen: 21
178.208.240.0/20 maxlen: 20
178.208.240.0/21 maxlen: 21
178.208.248.0/21 maxlen: 21
185.3.68.0/22 maxlen: 22
185.3.68.0/23 maxlen: 23
185.3.68.0/24 maxlen: 24
185.3.69.0/24 maxlen: 24
185.3.70.0/23 maxlen: 23
185.3.70.0/24 maxlen: 24
185.3.71.0/24 maxlen: 24
2a00:ae40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:77:23:2e:1a:28:be:7b:5f:76:bb:36:9f:bf:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Validity
Not Before: Jul 22 10:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15249ed6d10308fe5e8a3d4ed8beaaba40100e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:a9:82:19:f2:9b:f0:35:87:88:a3:f7:46:
b3:13:12:53:ed:4e:24:d9:dd:05:c9:d2:87:3d:c4:
6a:56:8c:87:30:cc:9f:98:fb:83:74:e3:5b:78:ae:
fc:d8:e8:e2:5c:13:8a:75:26:0b:fb:65:74:13:04:
3e:e6:f0:04:70:1d:88:b1:f8:36:03:8d:18:49:6e:
0d:9d:e6:d7:e8:91:b1:1d:7a:ad:20:d0:cf:9a:94:
9a:20:9e:a7:f9:af:9c:4f:90:6a:ea:72:d8:67:9e:
f7:ec:72:48:1b:e5:b1:4e:e3:83:15:89:5b:d6:eb:
3b:a6:9b:f4:3c:4d:4a:b0:8c:d7:94:f5:00:71:4b:
ab:f8:29:ff:39:12:90:c2:56:39:e4:b7:32:5a:12:
49:6b:38:74:56:30:66:d2:9f:31:6e:69:4a:fd:ad:
8f:6a:25:e6:91:2d:bd:ea:40:11:af:f7:c4:74:25:
21:72:08:ba:d4:e4:40:39:a0:00:77:37:66:e9:e5:
63:5c:a9:88:6b:31:98:93:34:b3:4b:ef:5b:a8:4a:
1b:88:99:7a:a4:ff:88:85:a8:e7:39:36:dd:51:79:
a8:54:d8:0a:fc:ae:f9:d3:ea:be:6f:26:e9:23:aa:
71:7b:c2:b1:20:43:f4:64:d0:8c:3a:19:45:d3:92:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:9E:D6:D1:03:08:FE:5E:8A:3D:4E:D8:BE:AA:BA:40:10:0E:17
X509v3 Authority Key Identifier:
keyid:E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/FSSe1tEDCP5eij1O2L6qukAQDhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.16.0/20
37.60.16.0/21
37.143.96.0/20
178.208.224.0/19
185.3.68.0/22
IPv6:
2a00:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
ad:cf:27:51:ec:df:8c:3b:2e:23:8f:02:10:0e:de:08:ee:8a:
8f:64:d4:ba:85:e5:31:9f:23:9b:b6:1b:23:15:41:f6:e2:02:
65:d4:b9:b7:45:aa:af:bb:ba:44:c7:c0:dc:e1:a4:9b:02:14:
60:ef:32:ca:b9:83:e2:b9:71:e0:e4:b8:db:5c:54:77:c1:0a:
7c:da:ca:14:c6:95:39:4f:61:8a:b8:64:25:f7:1e:e9:ae:cb:
e2:2d:37:5d:ff:2e:eb:2f:60:61:85:8b:55:e5:8f:83:4d:e3:
86:54:fc:0e:61:91:32:cc:cc:ac:48:93:20:11:d0:ae:d3:7a:
1c:6a:85:96:80:59:84:10:8b:b3:39:8e:97:83:17:0a:8c:bc:
d9:26:61:80:18:64:e2:58:61:1a:9f:5c:2e:0a:50:ff:4a:4f:
75:9a:14:c9:ee:d3:96:c7:27:60:f5:c9:41:37:d1:1b:da:a3:
09:e0:d1:a6:96:45:f8:a8:d7:18:64:bc:fb:7f:26:30:a6:44:
7f:f7:7e:b8:3d:5e:40:15:18:01:d1:0f:8f:d5:19:f6:55:47:
2e:a9:0b:e4:3b:60:9c:f5:58:e9:bc:02:2d:8b:e4:60:b3:4a:
d6:64:48:5d:df:1b:cf:c2:13:dd:6e:4c:38:10:9c:5d:25:9d:
24:3d:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:14 2026 by rpki-client