Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/_DzVp-qQbUGUWJR9yTGDbteQ9eI.roa
File: _DzVp-qQbUGUWJR9yTGDbteQ9eI.roa (raw, json)
Hash identifier: JCR4JCzOBUmsSicgbt13vgqc/sqq+RW2fZ4Pr3z6YPQ=
Subject key identifier: FC:3C:D5:A7:EA:90:6D:41:94:58:94:7D:C9:31:83:6E:D7:90:F5:E2
Certificate issuer: /CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Certificate serial: 019F236869B75045B0BEE16879CF93FB86FA
Authority key identifier: A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/_DzVp-qQbUGUWJR9yTGDbteQ9eI.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62336
IP address blocks: 5.63.32.0/19 maxlen: 20
37.228.144.0/22 maxlen: 22
91.191.176.0/22 maxlen: 22
91.198.32.0/24 maxlen: 24
91.200.108.0/22 maxlen: 22
91.211.8.0/22 maxlen: 22
185.39.84.0/22 maxlen: 22
195.230.108.0/24 maxlen: 24
213.244.48.0/20 maxlen: 20
2a01:41e0::/32 maxlen: 32
2a01:41e1::/32 maxlen: 32
2a01:41e3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:b7:50:45:b0:be:e1:68:79:cf:93:fb:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc3cd5a7ea906d419458947dc931836ed790f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:90:7a:61:31:21:fb:ff:8e:78:f1:8d:c0:
50:17:f6:12:b6:9d:fa:c5:fb:18:64:9c:02:c5:7c:
97:40:5d:47:82:ab:27:e4:e1:d3:be:8d:e4:b1:fa:
14:f0:9e:1d:87:b2:7a:23:f9:36:6b:4d:6a:4b:3e:
78:b2:d2:17:9e:2f:6c:9d:41:45:7f:91:fe:ed:90:
be:dc:40:14:f9:55:e4:25:14:de:bf:68:87:e6:89:
f5:50:b7:cc:58:ac:00:a5:e0:e4:5d:6f:f9:cf:83:
3e:32:00:60:65:55:68:f1:0a:64:67:9d:d3:77:9a:
04:63:94:e3:95:12:ba:f6:ce:36:03:59:1b:dd:94:
f6:93:1f:39:19:a0:d1:34:0f:e6:b2:f7:18:11:ae:
7e:ec:bb:46:60:a3:50:2f:1e:ce:84:e9:11:22:c1:
51:4d:33:d6:05:65:e6:c1:e8:a6:89:a1:1d:f3:fa:
1a:94:2a:8f:38:36:95:ce:13:d2:03:62:80:73:90:
4f:59:b4:20:7e:56:79:f4:bb:cf:d2:e1:92:94:76:
e5:8a:0f:9c:1f:fa:ac:a5:b3:2e:39:7c:e4:a4:03:
0c:aa:f7:ea:fa:43:17:60:14:29:8f:6a:5d:99:95:
cc:0a:c0:91:fd:b0:85:6c:f4:2b:d1:34:4b:e3:f8:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:D5:A7:EA:90:6D:41:94:58:94:7D:C9:31:83:6E:D7:90:F5:E2
X509v3 Authority Key Identifier:
keyid:A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/_DzVp-qQbUGUWJR9yTGDbteQ9eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.32.0/19
37.228.144.0/22
91.191.176.0/22
91.198.32.0/24
91.200.108.0/22
91.211.8.0/22
185.39.84.0/22
195.230.108.0/24
213.244.48.0/20
IPv6:
2a01:41e0::/31
2a01:41e3::/32
Signature Algorithm: sha256WithRSAEncryption
9e:21:69:df:7a:04:d5:bc:f1:d9:95:da:71:3f:87:83:8a:57:
01:2d:8f:c0:de:b0:c3:95:ef:aa:90:e8:6b:ab:b7:ee:e5:b4:
c5:81:a4:d5:02:d9:7f:c3:f0:9b:7d:d8:95:3c:bd:8d:62:3f:
b1:ff:58:fb:6f:67:34:b7:ba:d7:80:d8:15:32:e3:80:dc:fe:
a7:75:f7:f9:63:54:6c:94:71:16:26:1d:83:96:61:af:e1:c2:
8b:66:9e:6a:a5:99:51:b9:73:73:34:ff:f7:fc:b9:e7:fa:19:
7c:0d:cd:ff:84:3b:15:4e:9c:6f:dc:b5:19:26:32:40:0a:4d:
28:90:23:4f:d5:c9:dd:bf:27:10:ec:f6:7d:d6:5c:a5:38:49:
a3:2b:46:1b:85:7c:e2:87:58:01:7a:54:ba:ad:8a:8c:3f:4f:
bc:1a:1b:b8:6e:9c:f8:ea:e2:60:2b:de:f9:94:5a:04:d2:c6:
42:7d:58:12:f7:27:99:ac:5f:04:c7:15:83:93:69:60:82:1e:
2f:8d:1d:c5:32:c0:e8:34:92:b5:61:7b:04:1d:c5:7f:a7:82:
b5:b4:f2:3c:33:ed:5a:38:81:e7:56:7b:73:95:6f:2d:0c:b2:
09:02:e6:fd:4c:18:c3:06:3c:52:fb:f7:79:a8:66:0d:fa:67:
16:1d:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:18 2026 by rpki-client