Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/X9x54sAG8w3l-mHNMKHxAPO9ltI.roa
File: X9x54sAG8w3l-mHNMKHxAPO9ltI.roa (raw, json)
Hash identifier: xlwxDru5yEZFAMpF66c13VJUz7UoYnf6iZAymM3Fcv4=
Subject key identifier: 5F:DC:79:E2:C0:06:F3:0D:E5:FA:61:CD:30:A1:F1:00:F3:BD:96:D2
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 019DF69899912689091CD9DCA5FB0039490D
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/X9x54sAG8w3l-mHNMKHxAPO9ltI.roa
Signing time: Tue 05 May 2026 05:24:49 +0000
ROA not before: Tue 05 May 2026 05:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215272
IP address blocks: 5.44.44.0/24 maxlen: 24
45.128.205.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
62.182.102.0/24 maxlen: 24
155.212.244.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
185.251.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f6:98:99:91:26:89:09:1c:d9:dc:a5:fb:00:39:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: May 5 05:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fdc79e2c006f30de5fa61cd30a1f100f3bd96d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:cd:58:e2:61:e1:fb:70:16:19:db:36:b7:
a4:18:ce:10:33:3d:8c:ee:fd:85:07:ed:2f:85:11:
03:a5:f1:e2:bc:3c:0a:02:ea:df:92:24:cc:0c:3f:
5f:ea:28:cc:bc:95:d4:9a:6a:fc:8f:99:c7:a1:e8:
d0:48:63:08:24:93:3d:e4:bc:c1:07:76:36:9b:c4:
da:df:40:39:65:a2:45:c5:91:3a:7f:0f:cf:f6:ee:
65:34:d7:13:76:b5:8d:39:40:4b:61:32:81:c3:f9:
75:7e:8e:59:b0:c5:07:be:98:c7:c6:ea:d4:5a:8a:
d9:05:81:e1:5b:50:a8:4a:67:20:0d:69:7b:de:00:
ff:c0:00:c2:d7:40:f0:13:bc:4c:95:e9:e9:29:42:
3c:2c:e0:e3:ad:01:12:b5:d8:be:44:c6:df:ca:a6:
e7:c4:88:19:6b:d1:3b:3f:07:65:b5:41:24:6e:37:
67:7b:a8:f0:90:01:4f:e7:cc:71:e0:63:12:e6:35:
5c:a9:9d:d4:60:e7:0c:2e:b7:88:ec:48:4c:9a:2c:
d5:e1:f2:a5:0c:bd:ad:d1:d8:23:e0:f8:e1:db:7b:
19:a7:3a:7f:bb:f1:81:96:e1:e7:69:41:69:e6:8c:
7d:2c:21:75:86:3c:4a:ac:fa:8e:ff:12:e2:66:8f:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:79:E2:C0:06:F3:0D:E5:FA:61:CD:30:A1:F1:00:F3:BD:96:D2
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/X9x54sAG8w3l-mHNMKHxAPO9ltI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.128.205.0/24
45.129.186.0/24
62.182.102.0/24
155.212.244.0/24
185.244.50.0/24
185.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:34:5a:7f:37:85:ea:ea:2c:a9:aa:95:02:14:dd:30:03:c8:
9b:11:8b:94:e6:80:80:e4:de:2a:9c:65:63:62:34:de:d3:c8:
55:ff:67:6c:d3:c5:0b:54:67:b3:07:65:85:17:1b:89:75:26:
2c:15:3a:5a:3d:65:7f:de:5a:e7:fa:b8:2a:72:25:7c:5b:22:
ca:89:eb:26:ad:06:68:af:fd:46:8c:80:d1:ca:1a:8e:b1:7d:
81:81:6f:31:97:78:de:a7:e4:a5:03:00:56:c6:af:f8:2d:8e:
fe:24:f3:af:e4:20:7e:77:1e:8b:fc:f2:33:d2:ad:cc:01:31:
b0:40:85:8d:8e:e1:1a:e3:12:08:71:b1:f8:9b:97:c3:21:b7:
9b:cf:a9:d3:72:36:c5:f5:36:3e:71:98:88:fa:cf:bb:cf:05:
a6:f6:9d:08:72:30:03:2a:eb:39:b8:0a:fc:02:14:0a:cb:57:
a3:89:76:ef:f8:98:e1:fc:82:8b:19:1b:15:8b:52:5f:52:b0:
f2:00:98:af:24:31:e8:33:64:8e:65:f0:71:3b:71:4d:80:db:
05:1d:8e:c3:a0:f3:83:2c:18:7e:eb:4b:4d:2c:40:8c:6b:04:
37:c9:bf:dc:f3:88:e2:a9:4b:df:25:d0:91:42:ee:c3:3b:30:
89:7a:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:33 2026 by rpki-client