Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/5-8A-Jtguk4c0zw03gWcTS2JHrk.roa
File: 5-8A-Jtguk4c0zw03gWcTS2JHrk.roa (raw, json)
Hash identifier: EMcolqjYtxL2odJigbooGYOxo0xOZo49xkFasVkABn0=
Subject key identifier: E7:EF:00:F8:9B:60:BA:4E:1C:D3:3C:34:DE:05:9C:4D:2D:89:1E:B9
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019F3C3DD0DFAFD27FF315AC76522596EBAD
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/5-8A-Jtguk4c0zw03gWcTS2JHrk.roa
Signing time: Tue 07 Jul 2026 11:01:51 +0000
ROA not before: Tue 07 Jul 2026 11:01:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41421
IP address blocks: 31.214.137.0/24 maxlen: 24
31.214.138.0/24 maxlen: 24
31.214.140.0/24 maxlen: 24
31.214.145.0/24 maxlen: 24
37.157.200.0/21 maxlen: 21
86.106.22.0/24 maxlen: 24
89.35.60.0/23 maxlen: 23
89.250.192.0/20 maxlen: 20
91.132.112.0/23 maxlen: 23
93.115.39.0/24 maxlen: 24
103.248.24.0/24 maxlen: 24
159.253.240.0/21 maxlen: 21
185.53.132.0/22 maxlen: 24
185.104.155.0/24 maxlen: 24
185.128.156.0/22 maxlen: 22
185.170.65.0/24 maxlen: 24
185.194.212.0/22 maxlen: 24
188.65.40.0/21 maxlen: 21
193.91.4.0/24 maxlen: 24
193.91.12.0/23 maxlen: 23
194.5.180.0/24 maxlen: 24
2a01:b8e0::/32 maxlen: 32
2a02:4c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:3d:d0:df:af:d2:7f:f3:15:ac:76:52:25:96:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jul 7 11:01:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ef00f89b60ba4e1cd33c34de059c4d2d891eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:0c:97:a3:85:f4:37:a3:16:91:d3:a7:d9:
f1:44:17:b6:7f:0a:4f:3a:49:6a:6d:08:34:a4:46:
05:8b:64:bd:c6:ce:55:11:e2:00:63:13:15:cb:fa:
b1:db:5a:67:1b:db:c2:1f:6a:6c:a1:f3:cd:a8:0f:
44:00:09:00:96:df:52:51:1f:ac:4c:0c:f2:21:ad:
8d:ba:8d:27:90:67:a2:b0:f6:97:7f:83:55:31:d7:
0a:2e:b0:4b:10:4d:3f:98:15:f4:e3:44:0c:24:60:
28:4e:d1:ff:04:1f:84:9e:f5:44:f8:a3:ed:95:73:
9d:86:6d:32:79:57:03:9a:f2:79:da:44:87:5f:2f:
25:9b:3e:03:e5:55:8e:4e:ee:00:bc:1e:13:00:71:
9d:a8:45:cc:df:d6:0b:64:2f:5a:9e:c4:92:b5:17:
81:4c:34:4b:8e:af:58:97:b4:f2:48:65:a2:6a:e5:
70:a3:5d:b3:13:18:98:6a:74:20:d9:dd:88:71:9e:
9b:e5:7d:9a:ee:55:d8:89:6b:d8:7b:b4:81:af:18:
5a:82:da:73:e6:b0:13:1d:ae:dc:36:07:c3:88:61:
11:13:24:57:88:e3:29:e5:80:09:28:5e:a6:ae:8c:
3c:45:60:43:37:85:59:96:cf:f4:62:ae:3b:72:21:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EF:00:F8:9B:60:BA:4E:1C:D3:3C:34:DE:05:9C:4D:2D:89:1E:B9
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/5-8A-Jtguk4c0zw03gWcTS2JHrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.137.0-31.214.138.255
31.214.140.0/24
31.214.145.0/24
37.157.200.0/21
86.106.22.0/24
89.35.60.0/23
89.250.192.0/20
91.132.112.0/23
93.115.39.0/24
103.248.24.0/24
159.253.240.0/21
185.53.132.0/22
185.104.155.0/24
185.128.156.0/22
185.170.65.0/24
185.194.212.0/22
188.65.40.0/21
193.91.4.0/24
193.91.12.0/23
194.5.180.0/24
IPv6:
2a01:b8e0::/32
2a02:4c80::/32
Signature Algorithm: sha256WithRSAEncryption
02:00:96:e7:d6:a2:73:c6:58:3c:11:35:b4:bf:c5:58:ee:91:
79:38:2b:96:42:b3:33:ea:3b:2b:60:f6:2a:d6:d8:be:79:be:
36:33:bc:01:03:28:43:e5:11:0a:a3:0d:af:8c:76:c9:27:a7:
d2:5c:42:cb:20:66:2e:be:73:7f:50:a2:9c:55:e7:62:7a:61:
92:4c:7e:4c:68:6f:ac:20:47:39:00:37:af:a2:76:fa:92:39:
4b:f7:1a:20:eb:d1:c0:99:64:19:7b:ff:3e:20:53:74:f5:2a:
7a:53:0c:1a:d7:8e:ba:2a:87:e0:f2:91:da:07:62:c1:71:62:
ef:4f:69:f0:3f:44:77:85:b8:99:f7:ae:5c:89:7f:c4:18:21:
56:3f:d9:61:d6:7c:a8:97:8f:ab:cd:5f:84:dd:c8:89:d0:0a:
a4:ee:59:c0:bb:e6:8b:09:b7:aa:5c:32:94:39:e0:ab:09:99:
0e:4e:94:4d:e7:82:6e:b5:32:24:93:4b:d8:cb:50:ea:1d:f7:
4c:86:14:9d:c2:4b:1e:0a:6f:7d:38:d4:5f:26:99:7c:8e:5a:
33:82:6a:d0:22:62:56:10:15:72:46:b6:4d:90:9c:a1:73:c6:
8c:82:d4:c9:12:54:69:9e:90:21:38:6b:17:75:8a:2c:36:94:
41:03:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:21 2026 by rpki-client