Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/X_fEJIYYuwQlx3XcGK0irNSX02o.roa
File: X_fEJIYYuwQlx3XcGK0irNSX02o.roa (raw, json)
Hash identifier: Pqs0Zhky1DYH+KL+3hoS8to+Kz8z6fF9tAhtoYNSPQo=
Subject key identifier: 5F:F7:C4:24:86:18:BB:04:25:C7:75:DC:18:AD:22:AC:D4:97:D3:6A
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019DE4055A399404B4245C32CAAC97548469
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/X_fEJIYYuwQlx3XcGK0irNSX02o.roa
Signing time: Fri 01 May 2026 14:50:49 +0000
ROA not before: Fri 01 May 2026 14:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39700
IP address blocks: 78.108.128.0/20 maxlen: 24
80.246.202.0/24 maxlen: 24
81.30.38.0/24 maxlen: 24
91.142.240.0/21 maxlen: 24
91.142.248.0/22 maxlen: 24
141.255.178.0/23 maxlen: 23
176.74.224.0/24 maxlen: 24
2001:4cb8::/29 maxlen: 48
2001:4cb9::/32 maxlen: 32
2a00:c080:101c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:05:5a:39:94:04:b4:24:5c:32:ca:ac:97:54:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: May 1 14:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ff7c4248618bb0425c775dc18ad22acd497d36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:84:74:42:13:56:03:2b:90:ad:66:73:59:
54:75:62:e7:a8:52:52:69:a4:ac:11:1f:53:e1:ab:
c3:10:02:e3:0e:f4:d6:c1:ca:ce:e8:29:9a:68:34:
90:6f:ed:2a:84:c1:3c:48:86:3c:e0:53:65:46:04:
91:2f:46:ba:9d:92:d5:09:e2:62:4e:ac:a6:08:a1:
62:5c:a8:70:67:57:30:c8:46:87:20:43:07:00:77:
15:03:80:03:63:f4:34:2e:bc:8f:69:b2:1d:19:e8:
8b:a5:48:f4:b9:b7:6f:a4:6c:cb:9d:78:6c:69:8e:
70:55:e0:8e:52:19:52:22:a2:2d:fb:8b:48:ad:78:
0a:fd:c6:a2:43:ab:c3:ef:dc:97:d0:3e:0b:39:d7:
a4:b6:d4:d9:eb:67:0e:84:2d:b1:59:30:bc:e2:9e:
65:81:aa:53:8c:3c:80:5d:a5:20:65:bc:08:55:85:
02:16:b1:04:9f:6b:46:8e:e7:1e:f6:49:dc:1b:29:
ca:0d:f6:1c:d6:60:3c:ca:52:8c:02:49:a3:2a:6f:
3b:57:d0:c1:02:d4:c5:31:18:ab:e6:97:11:cb:21:
4f:4c:48:a0:97:74:30:4a:5e:a0:9d:a1:a2:06:6e:
8c:0a:9f:59:06:a9:86:6c:5f:f3:dc:6c:31:0f:43:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:C4:24:86:18:BB:04:25:C7:75:DC:18:AD:22:AC:D4:97:D3:6A
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/X_fEJIYYuwQlx3XcGK0irNSX02o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.128.0/20
80.246.202.0/24
81.30.38.0/24
91.142.240.0-91.142.251.255
141.255.178.0/23
176.74.224.0/24
IPv6:
2001:4cb8::/29
2a00:c080:101c::/48
Signature Algorithm: sha256WithRSAEncryption
7c:73:b4:a0:7e:e0:43:4a:6e:d2:2e:27:ee:ef:10:e9:99:0a:
02:60:cc:26:2f:47:c9:de:e5:39:a1:b2:ef:c7:c2:1f:12:c9:
a5:c3:d4:f8:c0:e0:24:d1:5f:05:b3:65:d6:34:30:0b:a3:0d:
f5:3a:9a:01:f7:22:bd:8b:87:0f:f7:94:9e:7b:c1:ba:9d:44:
53:4f:c6:4e:1e:e3:26:c1:5f:e3:60:b6:02:07:b9:bb:8c:96:
6c:36:74:b4:8d:87:a5:c0:6d:0d:7a:3b:c6:2e:53:15:db:84:
3f:03:cf:74:ed:c7:58:18:19:9c:b7:bb:29:9a:39:7f:bb:96:
6a:eb:5a:60:ed:aa:45:1c:0a:f3:d1:af:f9:3b:0b:49:4f:64:
d1:2e:5f:98:8d:2a:27:91:fb:8e:d5:77:13:ab:20:29:bb:8d:
0e:56:66:53:d1:69:db:1b:37:89:e8:ae:43:bc:56:3f:9d:ce:
2f:a0:47:c1:2d:95:4f:10:94:06:52:b0:ab:ac:93:53:d7:18:
05:8b:4f:71:91:fc:b3:5d:1e:84:e2:d1:66:1b:4a:dd:d5:84:
bc:2f:92:b5:d1:63:20:d0:53:12:c8:96:dc:87:3b:26:c6:36:
0d:5f:f4:30:8d:5f:df:a6:08:cd:b3:53:02:83:be:ce:10:9d:
2b:48:22:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:22 2026 by rpki-client