Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/E5M5U2XEaV0_ZLbju-437p796kM.roa
File: E5M5U2XEaV0_ZLbju-437p796kM.roa (raw, json)
Hash identifier: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=
Subject key identifier: 13:93:39:53:65:C4:69:5D:3F:64:B6:E3:BB:EE:37:EE:9E:FD:EA:43
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019DFD6DA84F5A3B34DBCEF8213053358CDC
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/E5M5U2XEaV0_ZLbju-437p796kM.roa
Signing time: Wed 06 May 2026 13:15:15 +0000
ROA not before: Wed 06 May 2026 13:15:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212157
IP address blocks: 147.181.0.0/22 maxlen: 24
147.181.24.0/22 maxlen: 24
147.181.24.0/23 maxlen: 24
147.181.26.0/23 maxlen: 24
185.52.4.0/22 maxlen: 24
2a04:9a00:1010::/44 maxlen: 48
2a04:9a00:1030::/44 maxlen: 48
2a04:9a00:1040::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:6d:a8:4f:5a:3b:34:db:ce:f8:21:30:53:35:8c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 6 13:15:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1393395365c4695d3f64b6e3bbee37ee9efdea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:12:43:69:f9:19:4b:10:e5:90:42:0b:51:
ae:64:85:46:9e:4e:72:f4:b0:be:f0:f9:0a:06:06:
4d:bf:cb:76:7c:06:18:ad:6a:f3:c1:82:4b:0e:ff:
f4:fb:45:e6:9b:b2:39:ff:f4:9b:bf:10:bd:35:8f:
f4:e8:56:1b:a3:b8:41:80:37:66:0a:6b:23:22:fc:
10:a6:6a:ab:c1:59:c2:70:10:65:57:d6:52:43:0b:
0f:bc:c3:73:2c:f6:d9:6f:20:d4:9e:7a:36:b9:09:
36:d5:cc:ba:a9:71:e8:fc:c8:07:45:5c:38:27:7d:
d8:68:96:65:55:47:2d:54:ea:00:4f:9d:90:31:b5:
e9:ff:04:7e:0a:6e:21:c0:e1:78:fd:33:a4:45:4a:
43:69:b0:a5:d9:60:1a:d8:a9:5f:dd:25:df:3f:27:
cf:01:18:5d:78:35:6b:49:15:49:ab:69:a2:08:ad:
be:07:09:73:4b:91:73:48:49:46:90:6c:ad:f9:4c:
5b:a8:08:99:8a:c2:2e:b7:e4:b5:54:e2:45:7a:5b:
16:3d:80:97:92:ba:31:99:66:a6:2b:23:06:bc:0d:
98:04:32:b9:b4:d8:64:fc:9b:f5:75:45:a2:f4:17:
ab:d1:0f:0d:5c:7c:3a:50:93:ac:58:ee:f6:bd:90:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:39:53:65:C4:69:5D:3F:64:B6:E3:BB:EE:37:EE:9E:FD:EA:43
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/E5M5U2XEaV0_ZLbju-437p796kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.0.0/22
147.181.24.0/22
185.52.4.0/22
IPv6:
2a04:9a00:1010::/44
2a04:9a00:1030::-2a04:9a00:104f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:95:85:b7:60:46:53:7f:bd:2c:9e:f3:2d:f0:48:63:3f:76:
85:e0:78:ee:d2:89:06:56:88:97:60:65:af:ec:b3:58:83:6c:
7f:ca:0e:8c:80:60:66:ec:b1:5b:9d:8b:84:01:87:54:0c:ee:
b7:c4:8c:37:26:73:ad:d3:ce:a7:22:ee:b6:fc:45:e8:fc:26:
47:c6:20:24:0f:f4:53:34:35:bf:e3:ea:2d:69:db:8d:66:97:
a4:ec:81:9b:1c:80:fc:69:89:31:85:ae:30:2e:09:7d:66:47:
2e:2f:fc:3d:db:18:82:e8:f7:4c:11:a7:7d:c5:c5:9a:c6:ad:
39:fb:85:1e:44:40:2c:c2:bc:68:8a:1e:03:52:dc:48:eb:8c:
f2:bb:20:5c:f9:64:01:8b:48:d3:cd:4f:c0:1b:e8:c5:9c:49:
e7:e4:dd:37:8b:12:3e:26:20:58:ff:93:42:6f:2a:21:d7:f0:
f2:e8:d9:ae:a4:e4:17:22:e7:a0:a4:47:1c:30:0b:de:5e:5a:
4e:08:4b:eb:14:1e:b6:af:44:d8:60:23:8f:cd:28:a5:39:e6:
b5:5d:2d:10:1f:aa:85:93:39:53:25:fb:be:ac:74:87:bd:54:
b9:09:ef:43:43:be:dd:27:be:ff:e2:2a:27:ce:fe:a8:a0:d6:
5e:de:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:10 2026 by rpki-client