Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/DkfBHadjV5hCivz6mN22vFIwsKo.roa
File: DkfBHadjV5hCivz6mN22vFIwsKo.roa (raw, json)
Hash identifier: M3npshua+IYUg+jl7d/CJO6XhinOhlUvR9sQkjh5CFk=
Subject key identifier: 0E:47:C1:1D:A7:63:57:98:42:8A:FC:FA:98:DD:B6:BC:52:30:B0:AA
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 01A03D236FE246EB8030E8600C28D5E6AE17
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/DkfBHadjV5hCivz6mN22vFIwsKo.roa
Signing time: Wed 26 Aug 2026 08:15:27 +0000
ROA not before: Wed 26 Aug 2026 08:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29695
IP address blocks: 5.152.136.0/21 maxlen: 21
5.172.182.0/24 maxlen: 24
45.14.52.0/22 maxlen: 22
51.174.0.0/15 maxlen: 15
79.160.0.0/15 maxlen: 24
80.203.0.0/17 maxlen: 17
81.166.0.0/15 maxlen: 24
84.234.128.0/17 maxlen: 24
89.11.128.0/17 maxlen: 17
92.220.0.0/15 maxlen: 21
109.247.0.0/16 maxlen: 21
141.0.64.0/18 maxlen: 18
158.248.0.0/16 maxlen: 16
213.167.96.0/19 maxlen: 19
2a01:798::/29 maxlen: 32
2a11:5100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:23:6f:e2:46:eb:80:30:e8:60:0c:28:d5:e6:ae:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Aug 26 08:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e47c11da7635798428afcfa98ddb6bc5230b0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:ab:32:ab:9a:1d:0f:71:53:39:c7:0d:01:
29:42:f4:82:d4:fe:d8:13:57:b9:6c:b1:3e:20:ac:
5a:e5:8a:77:1f:bb:c7:a3:fb:3f:15:8c:4e:cb:00:
41:69:3d:3c:ba:b5:3b:40:24:d0:f6:7f:05:9c:7b:
84:06:67:bd:ee:eb:f8:00:e5:bc:c3:75:5e:20:b4:
32:f7:7d:d5:93:9c:2f:83:ed:20:33:cd:a7:d4:29:
45:8e:9c:f5:f7:31:10:18:a1:69:0a:3b:bf:46:5c:
be:dc:ae:3e:ad:ab:bb:18:28:ca:45:8c:e4:bc:51:
9d:86:b1:d8:86:44:fc:4b:60:d7:b5:96:f8:af:47:
70:72:c9:f6:cc:fa:3e:87:ae:aa:44:6c:a2:d3:d6:
ac:dd:32:3b:c3:99:bb:54:76:08:27:72:d7:4d:5e:
f5:fd:0c:22:f7:ff:4c:be:e5:be:df:29:49:6d:ba:
03:17:55:61:71:e5:32:0c:2e:64:ef:36:32:b9:89:
de:10:a9:3c:cb:5b:08:97:79:46:91:81:9c:2f:27:
fc:d4:4b:42:48:d4:e1:a4:00:b1:46:63:52:e2:6e:
d3:d9:18:ff:26:9f:7d:f9:45:07:a8:74:45:ee:23:
21:7d:7a:fe:36:97:33:57:c7:3c:d8:c0:3b:62:7b:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:C1:1D:A7:63:57:98:42:8A:FC:FA:98:DD:B6:BC:52:30:B0:AA
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/DkfBHadjV5hCivz6mN22vFIwsKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.136.0/21
5.172.182.0/24
45.14.52.0/22
51.174.0.0/15
79.160.0.0/15
80.203.0.0/17
81.166.0.0/15
84.234.128.0/17
89.11.128.0/17
92.220.0.0/15
109.247.0.0/16
141.0.64.0/18
158.248.0.0/16
213.167.96.0/19
IPv6:
2a01:798::/29
2a11:5100::/29
Signature Algorithm: sha256WithRSAEncryption
21:7f:f9:ce:0f:de:07:82:71:81:a3:f6:48:bb:76:b2:31:f8:
54:8b:5f:6c:25:b5:3a:b4:99:fd:b7:7c:71:fc:dc:41:e9:c6:
9a:89:32:33:df:fe:c6:1a:0b:19:f7:93:60:78:0e:27:78:c3:
75:29:01:0f:e2:f7:f4:ae:05:6c:e4:68:96:32:4e:aa:6e:7e:
dd:2c:62:54:83:cc:81:ec:79:a6:c8:2f:01:78:49:d4:90:86:
a4:56:85:15:cc:1e:1a:f6:d0:35:37:70:a7:79:e8:e2:47:fc:
b3:97:67:39:e7:b9:6f:5e:ce:37:29:ae:94:e1:c8:6e:a7:ad:
be:c2:fc:e8:80:d6:b1:3f:a2:99:22:f3:88:c8:db:9e:df:2e:
48:21:fd:a3:7a:27:c3:e4:6f:a0:97:67:e0:6d:ee:24:84:f4:
8f:cf:89:29:17:cc:df:49:20:39:55:4c:bd:2e:16:54:87:51:
2b:2d:76:ea:4d:5c:34:06:14:0f:09:5d:89:23:eb:8b:de:6e:
07:99:4a:32:dc:d6:38:f2:02:34:1b:ca:64:2a:dc:bc:c9:06:
59:41:2b:12:e6:7d:40:64:12:b4:27:5d:43:3f:16:76:88:57:
e5:33:74:be:12:f2:96:f2:bb:52:7b:06:f4:87:b9:71:6c:7e:
3c:62:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:27:34 2026 by rpki-client