Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/RPt5k7y-VAMu34YaCIIef-nOQII.roa
File: RPt5k7y-VAMu34YaCIIef-nOQII.roa (raw, json)
Hash identifier: bOuBKk/Rho1r5yGSQObXjtTLuWRCdzlQHlOjUnu9/wE=
Subject key identifier: 44:FB:79:93:BC:BE:54:03:2E:DF:86:1A:08:82:1E:7F:E9:CE:40:82
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019CFCCD76B2D1F2954B99C12D3413E808D3
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/RPt5k7y-VAMu34YaCIIef-nOQII.roa
Signing time: Tue 17 Mar 2026 17:17:29 +0000
ROA not before: Tue 17 Mar 2026 17:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56718
IP address blocks: 5.252.36.0/22 maxlen: 24
5.252.37.0/24 maxlen: 24
5.252.38.0/23 maxlen: 24
192.166.137.0/24 maxlen: 24
192.166.138.0/24 maxlen: 24
2a0f:cac0:6::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:cd:76:b2:d1:f2:95:4b:99:c1:2d:34:13:e8:08:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Mar 17 17:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44fb7993bcbe54032edf861a08821e7fe9ce4082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:49:4c:a5:70:2e:83:0b:83:d1:c0:6a:b2:
78:6b:b3:29:ed:d3:31:5c:60:19:4c:b7:57:0c:99:
5f:cd:ec:eb:b9:8f:11:fd:f0:1e:10:1e:91:05:91:
fd:76:aa:e4:11:ea:cc:09:ae:9b:47:56:a6:0a:be:
84:11:3b:6b:d7:07:36:d4:81:ef:68:62:4d:74:64:
f0:08:e4:4f:07:02:8c:de:4c:83:41:a3:22:86:6a:
81:74:21:17:e6:69:59:9f:d5:3f:4e:76:25:a1:66:
4f:6a:08:6a:75:6e:1d:bc:88:97:91:27:19:8e:e2:
ee:b7:5c:1d:74:49:a3:bf:cc:38:bc:3f:d4:31:45:
9b:10:16:7b:5a:61:81:d8:b8:17:90:10:b4:fd:1c:
4c:b6:2d:6a:8e:a3:f7:9d:e9:f4:3f:f0:c3:e8:9a:
1d:6b:3f:1e:d9:93:a3:ed:43:6e:e8:39:d0:8a:9c:
37:c1:81:6a:be:41:6e:92:9f:26:13:cd:dc:64:c9:
15:fc:ef:d8:f7:f0:fa:dc:a8:99:ad:8f:f7:18:62:
1d:cd:0a:4c:cd:2c:ef:6d:c2:33:7f:f3:b9:99:52:
c4:2e:0c:da:58:f0:42:5f:3f:9a:a3:d7:4e:6c:b5:
d1:70:2c:32:15:7e:af:88:60:fb:90:e4:8f:da:88:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:79:93:BC:BE:54:03:2E:DF:86:1A:08:82:1E:7F:E9:CE:40:82
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/RPt5k7y-VAMu34YaCIIef-nOQII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.36.0/22
192.166.137.0-192.166.138.255
IPv6:
2a0f:cac0:6::/47
Signature Algorithm: sha256WithRSAEncryption
66:1a:d5:43:df:89:d5:c9:8a:fa:15:66:8e:10:85:ee:21:25:
ea:96:cf:71:6c:e4:8f:f4:02:0e:9e:17:cb:db:8f:aa:99:6c:
73:8a:5f:a9:f1:e4:d8:05:ae:7c:46:95:29:d5:19:28:5b:fa:
71:cf:fb:d5:d8:b3:26:16:ef:41:3a:f7:db:8d:6c:fb:d0:1d:
cf:56:f5:92:c2:bb:8b:61:d1:f3:5a:a2:48:84:f8:9c:d9:f4:
30:58:ce:bc:df:bd:25:43:5b:d0:90:68:5f:5f:13:c4:2c:47:
eb:24:7f:0f:81:7f:fc:c8:c1:94:f5:e0:b1:db:83:bf:15:02:
18:cc:92:f3:61:12:6a:f0:12:e5:de:8b:63:59:7b:c6:0d:bc:
84:46:ca:2a:a6:5c:c8:17:c5:d0:24:3f:1b:db:5d:b0:02:30:
84:e0:9d:01:c1:46:6e:4f:e0:56:8d:17:16:eb:e2:f4:b9:2c:
d6:cd:55:f4:c9:2a:d8:f8:80:24:10:da:09:33:d6:0f:f9:58:
45:68:44:7a:54:5a:92:02:41:e9:ef:f0:8b:0e:d4:91:79:ef:
3c:07:1c:07:b4:10:66:17:6d:d0:da:a6:1b:e9:bf:cc:03:d9:
c9:49:6c:72:d9:31:9e:ac:d3:4e:79:fa:fb:7d:88:88:e5:bc:
dd:b5:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:10 2026 by rpki-client