Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/pbnN9srlyaf0BgeZnbG7vJQQcDg.roa
File: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (raw, json)
Hash identifier: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=
Subject key identifier: A5:B9:CD:F6:CA:E5:C9:A7:F4:06:07:99:9D:B1:BB:BC:94:10:70:38
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019E1C8769A7BE3D7E94D39547A0EEE609CE
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/pbnN9srlyaf0BgeZnbG7vJQQcDg.roa
Signing time: Tue 12 May 2026 14:11:36 +0000
ROA not before: Tue 12 May 2026 14:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 189.81.196.0/23 maxlen: 23
189.104.54.0/23 maxlen: 23
189.104.80.0/23 maxlen: 23
189.104.118.0/23 maxlen: 23
189.104.148.0/23 maxlen: 23
189.104.164.0/23 maxlen: 23
189.104.210.0/23 maxlen: 23
189.104.234.0/23 maxlen: 23
205.188.80.0/22 maxlen: 22
205.188.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:87:69:a7:be:3d:7e:94:d3:95:47:a0:ee:e6:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 12 14:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5b9cdf6cae5c9a7f40607999db1bbbc94107038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:7e:2e:45:64:3c:a4:0a:7b:ff:a1:3c:77:
c6:46:34:e2:50:99:33:fa:cc:bc:02:18:87:f9:c7:
3c:e1:e2:27:8a:d4:7a:30:d2:17:a5:5c:c2:00:36:
a4:95:40:23:9f:c9:d7:62:38:20:12:96:86:3d:8e:
15:a0:9e:c0:a9:21:94:81:81:6a:d2:f9:ad:88:fc:
40:c3:5d:6f:04:2f:2a:92:6e:fa:74:7f:27:e1:47:
b6:26:16:78:34:2a:28:99:3c:5c:69:ea:67:68:b5:
29:fc:33:d9:f0:20:39:06:d7:ef:56:52:44:31:fa:
67:2c:ca:ac:e0:a6:a5:60:0a:69:50:c5:08:d8:91:
bb:dc:67:ab:a6:a4:08:43:59:f6:c6:19:cf:14:ff:
e3:10:41:e7:a1:f1:b3:76:9b:32:d2:42:da:10:74:
66:9c:bb:b5:9d:c8:58:b4:21:19:2c:bf:68:c9:bf:
84:f0:cd:d5:58:0f:06:e7:53:f8:0c:cd:bb:eb:c9:
6e:28:39:90:97:60:4d:e5:ce:16:7a:87:9f:d6:23:
5d:e5:68:98:2b:6d:22:9d:04:0b:3a:a6:ed:d1:fb:
c3:26:17:99:e4:a9:f1:34:13:3d:24:b9:a6:88:7f:
af:51:9a:41:5f:9c:03:db:8e:7b:6b:0e:85:e0:fa:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:CD:F6:CA:E5:C9:A7:F4:06:07:99:9D:B1:BB:BC:94:10:70:38
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/pbnN9srlyaf0BgeZnbG7vJQQcDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.196.0/23
189.104.54.0/23
189.104.80.0/23
189.104.118.0/23
189.104.148.0/23
189.104.164.0/23
189.104.210.0/23
189.104.234.0/23
205.188.80.0/22
205.188.224.0/22
Signature Algorithm: sha256WithRSAEncryption
79:83:33:42:0c:fb:66:62:87:5a:6f:0c:cc:61:60:67:49:9a:
20:84:57:3f:a6:16:dd:15:c4:82:8d:6a:16:1b:40:7f:70:c7:
f7:ed:18:c4:c6:77:41:2f:58:8c:7c:52:8a:76:ab:b7:e9:30:
36:fe:f3:a3:a3:14:0f:3c:87:ce:52:a7:52:ce:07:37:39:7d:
96:4e:bb:ce:41:bc:18:42:cf:5d:2f:0f:a7:8a:79:b5:16:1d:
59:76:57:9f:2f:35:e8:a2:01:99:ee:eb:e1:63:4f:c0:1b:7b:
18:63:1e:f9:df:14:5a:65:77:a1:21:71:60:9d:46:4c:98:f6:
d0:6c:3b:0f:f0:e6:79:d5:da:27:e4:e2:62:3e:5d:50:a3:b2:
ef:36:ee:27:16:a2:7f:34:af:69:90:78:be:77:60:38:6a:0a:
6f:b9:49:26:38:4a:cb:e6:2e:74:06:08:0c:33:2e:68:18:0b:
34:cd:b2:5a:35:c2:4a:eb:0e:54:65:0f:7d:53:e4:0b:83:da:
09:e9:bc:7f:c8:fb:4c:b7:76:72:a7:8c:8e:ce:60:aa:46:ba:
b4:28:8e:31:80:2c:9e:35:2f:cf:7b:e5:9f:7c:1f:7d:51:9e:
0a:f6:13:59:2b:fe:e1:bc:b3:8b:f8:58:9d:f0:50:0b:d6:43:
04:87:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:18 2026 by rpki-client