Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/B5LeEaJvi3HeQSD41vCBPOSwCqA.roa
File: B5LeEaJvi3HeQSD41vCBPOSwCqA.roa (raw, json)
Hash identifier: J8iyDcJo2rN2bShtgQufGUQCMMmmWJ3P0+AOI3a4/74=
Subject key identifier: 07:92:DE:11:A2:6F:8B:71:DE:41:20:F8:D6:F0:81:3C:E4:B0:0A:A0
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019F65F29D564D23BF0CA79236757F5A8B6F
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/B5LeEaJvi3HeQSD41vCBPOSwCqA.roa
Signing time: Wed 15 Jul 2026 13:23:46 +0000
ROA not before: Wed 15 Jul 2026 13:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57935
IP address blocks: 5.61.26.0/24 maxlen: 24
5.61.27.0/24 maxlen: 24
92.119.56.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:f2:9d:56:4d:23:bf:0c:a7:92:36:75:7f:5a:8b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jul 15 13:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0792de11a26f8b71de4120f8d6f0813ce4b00aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:dc:fc:bf:af:29:26:45:4f:5b:9a:15:3a:
17:2a:00:24:96:c8:d6:b7:3e:75:bd:cd:18:cb:49:
fc:cd:1f:b7:1e:32:39:77:c7:d8:68:59:80:25:cf:
d8:6f:d0:b0:9b:58:8f:c6:86:78:b4:39:4a:fd:4a:
fa:5b:e8:a2:b2:7b:24:9d:4a:32:4f:e6:24:fc:b0:
f1:44:51:aa:d1:c1:70:ae:6e:31:ed:21:38:b1:e0:
11:d5:11:68:1c:39:57:97:4e:95:7c:96:d6:cd:d7:
35:57:29:15:30:0a:04:fe:a9:f9:cc:25:58:87:51:
8b:86:90:a5:0c:b5:ed:e8:2a:8f:9d:73:60:ae:74:
2d:f3:2a:eb:e3:96:5f:c0:b5:93:ae:b6:03:84:5b:
b5:9e:28:02:e4:4d:01:ea:65:10:53:e5:26:d6:81:
0a:5b:bb:2f:d2:da:96:29:77:ac:90:44:79:26:8e:
bb:d5:91:94:d8:dc:74:3b:39:ca:37:c2:f2:1f:51:
34:98:35:2e:da:8f:5b:63:a1:1a:2e:de:28:3a:00:
7f:3e:15:e3:7c:41:d9:16:fd:eb:e2:32:75:ec:78:
16:34:08:83:d2:c7:19:2f:1a:6c:e4:be:8a:c7:5c:
a7:19:94:f0:2f:06:a8:c2:70:a7:91:99:3f:e8:83:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:DE:11:A2:6F:8B:71:DE:41:20:F8:D6:F0:81:3C:E4:B0:0A:A0
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/B5LeEaJvi3HeQSD41vCBPOSwCqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.26.0/23
92.119.56.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
78:40:3d:50:16:3c:88:d0:15:80:db:44:a9:7c:18:45:eb:62:
19:89:4a:17:ec:b7:2c:54:9d:70:7b:fa:2e:af:24:9e:cf:4d:
0f:86:88:cc:8d:51:02:1a:e3:6c:87:bc:e5:a3:32:b1:09:58:
83:a6:85:09:fd:52:6f:33:91:c9:0c:4e:af:17:34:61:86:f2:
44:7a:1c:fa:71:21:54:51:6a:70:82:81:06:e0:8f:3c:86:5c:
e2:2f:2a:49:c2:6a:4c:04:ca:6a:65:10:40:4d:1c:71:1c:ea:
f7:7a:a8:df:76:a4:02:66:d3:9e:cb:75:e3:fb:f0:51:7e:d6:
59:11:bc:e7:5d:50:76:b6:1a:51:5e:91:65:7e:ab:e6:16:8b:
59:82:e1:65:be:ac:ac:10:77:e2:fc:fb:bf:29:e3:1d:0e:3e:
9a:2e:3a:d4:05:9c:0b:e6:dd:85:8e:73:82:ee:41:d2:1d:f9:
8a:fd:3f:0b:2d:fc:ce:e3:85:23:97:33:98:38:46:30:c8:fa:
fd:cb:fe:2d:ce:35:6b:26:ea:fb:c5:12:50:aa:60:36:7f:2c:
60:7d:11:3e:11:8b:16:d6:4c:c5:aa:97:c6:97:5a:ef:c9:6c:
d1:05:92:e0:fd:d6:d2:ae:7f:c9:4e:00:cc:f0:ec:0b:e3:6c:
a1:9e:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:39 2026 by rpki-client