Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa
File: FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa (raw, json)
Hash identifier: SqvMQwiK+3k9rUMpX3V6L4hGcrAmDvVmALug/oB9sFU=
Subject key identifier: 15:21:DB:E3:3A:A9:22:1D:C0:93:1C:39:12:84:CD:A6:E2:D7:8D:62
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019F65F29E0B304E7F3C01D0F5A314EB9AB8
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa
Signing time: Wed 15 Jul 2026 13:23:46 +0000
ROA not before: Wed 15 Jul 2026 13:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58262
IP address blocks: 5.61.24.0/24 maxlen: 24
5.61.25.0/24 maxlen: 24
5.61.26.0/24 maxlen: 24
5.61.28.0/24 maxlen: 24
5.61.29.0/24 maxlen: 24
5.61.30.0/24 maxlen: 24
5.61.31.0/24 maxlen: 24
45.89.222.0/24 maxlen: 24
92.119.57.0/24 maxlen: 24
92.119.58.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.112.0/24 maxlen: 24
185.73.114.0/24 maxlen: 24
2a05:2d80::/48 maxlen: 48
2a05:2d80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:f2:9e:0b:30:4e:7f:3c:01:d0:f5:a3:14:eb:9a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jul 15 13:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1521dbe33aa9221dc0931c391284cda6e2d78d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:ab:1e:d6:fb:25:13:81:e5:b0:bf:fa:1e:
2a:71:dc:cc:1c:53:f7:1b:da:84:17:35:97:f1:d4:
d5:1d:8d:5d:ca:37:d6:0c:cd:f3:e0:82:0e:13:40:
8a:cc:a5:44:65:16:1e:99:3e:24:13:3f:e0:81:c6:
3e:15:25:fd:0b:eb:0a:2d:1f:5f:7d:b5:34:09:1d:
90:59:0a:f8:d7:2e:6c:3c:a0:5d:04:da:12:c8:27:
2c:0a:b0:41:72:5a:ea:81:b4:43:dd:94:2d:c3:b0:
cb:70:53:c7:60:aa:91:81:ff:d8:0b:e9:64:a1:9d:
dc:28:36:71:8b:bd:67:37:69:b1:4d:51:19:c7:37:
35:fa:ca:35:0f:d3:cd:29:aa:ba:ca:46:52:20:2d:
73:34:86:28:55:67:89:90:27:74:ec:40:72:f8:7f:
83:e8:33:a9:42:e0:f2:26:51:b0:44:c4:a4:6b:eb:
d3:f0:80:7e:d8:7a:d7:f4:23:73:ad:84:c3:06:c7:
1e:de:17:d2:01:1a:17:fb:69:cf:dc:e5:29:0b:74:
cf:d6:41:f6:1a:0b:51:0f:d5:fc:2b:03:7e:d5:13:
a7:26:5c:67:43:00:1f:16:19:3e:39:9a:a9:92:ab:
73:40:7d:69:3a:e0:06:39:52:ec:35:9c:dc:4b:59:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:DB:E3:3A:A9:22:1D:C0:93:1C:39:12:84:CD:A6:E2:D7:8D:62
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.24.0-5.61.26.255
5.61.28.0/22
45.89.222.0/24
92.119.57.0-92.119.59.255
185.73.112.0/24
185.73.114.0/24
IPv6:
2a05:2d80::/47
Signature Algorithm: sha256WithRSAEncryption
67:b1:05:68:c8:93:74:ae:43:38:bf:e5:35:ee:e4:78:ba:5b:
ca:f3:5b:a9:f5:79:bd:13:45:13:25:66:ed:26:4c:a8:4a:34:
dc:9b:86:13:66:4e:dc:4f:cf:39:d3:65:ea:87:7e:79:3d:b3:
a7:df:39:5c:d6:fa:70:01:9a:45:ba:78:23:f9:52:3d:ad:66:
4c:19:ae:19:40:b1:ec:b1:f0:74:c0:af:60:66:2e:35:f7:1b:
7c:70:f2:5f:7a:fa:80:35:ba:63:cf:3a:7e:ce:bb:b8:3f:0d:
48:7c:cc:92:ec:25:75:f0:6e:50:61:b9:da:c9:bb:01:24:ae:
4e:69:14:a1:6d:1b:2d:e7:e6:bb:f1:5b:90:6f:9e:ac:0a:12:
49:33:7b:14:3e:60:8c:6a:ac:c6:ca:06:7c:b7:7a:c0:1a:23:
4f:08:b6:70:c4:e6:f8:81:ec:5f:10:af:13:25:39:81:58:b9:
73:fd:47:77:de:7d:c0:d2:9e:de:81:e9:aa:c4:fb:dc:69:2d:
c8:10:cc:eb:e9:67:84:ee:1a:a7:4a:e4:3b:64:5f:cc:f3:a8:
c4:07:68:2b:9c:23:fa:d0:d7:7f:8f:73:57:6f:ec:a5:b0:11:
6d:fc:4b:df:57:93:8b:54:80:4b:04:d0:89:99:18:19:8a:af:
6a:73:e4:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZ9l8p4LME5/PAHQ9aMU65q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm
ZmM4ZDUwHhcNMjYwNzE1MTMyMzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTIxZGJlMzNhYTkyMjFkYzA5MzFjMzkxMjg0Y2RhNmUyZDc4ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+arHtb7JROB5bC/+h4qcdzMHFP3
G9qEFzWX8dTVHY1dyjfWDM3z4IIOE0CKzKVEZRYemT4kEz/ggcY+FSX9C+sKLR9f
fbU0CR2QWQr41y5sPKBdBNoSyCcsCrBBclrqgbRD3ZQtw7DLcFPHYKqRgf/YC+lk
oZ3cKDZxi71nN2mxTVEZxzc1+so1D9PNKaq6ykZSIC1zNIYoVWeJkCd07EBy+H+D
6DOpQuDyJlGwRMSka+vT8IB+2HrX9CNzrYTDBsce3hfSARoX+2nP3OUpC3TP1kH2
GgtRD9X8KwN+1ROnJlxnQwAfFhk+OZqpkqtzQH1pOuAGOVLsNZzcS1nYSwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFBUh2+M6qSIdwJMcORKEzabi141iMB8GA1UdIwQY
MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt
NWU5NzQzNzc2MDBjLzEvRlNIYjR6cXBJaDNBa3h3NUVvVE5wdUxYaldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj
LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA6BAIAATA0MAwDBAMFPRgD
BAAFPRoDBAIFPRwDBAAtWd4wDAMEAFx3OQMEAlx3OAMEALlJcAMEALlJcjAPBAIA
AjAJAwcBKgUtgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBnsQVoyJN0rkM4v+U17uR4
ulvK81up9Xm9E0UTJWbtJkyoSjTcm4YTZk7cT88502Xqh355PbOn3zlc1vpwAZpF
ungj+VI9rWZMGa4ZQLHssfB0wK9gZi419xt8cPJfevqANbpjzzp+zru4Pw1IfMyS
7CV18G5QYbnaybsBJK5OaRShbRst5+a78VuQb56sChJJM3sUPmCMaqzGygZ8t3rA
GiNPCLZwxOb4gexfEK8TJTmBWLlz/Ud33n3A0p7egemqxPvcaS3IEMzr6WeE7hqn
SuQ7ZF/M86jEB2grnCP60Nd/j3NXb+ylsBFt/EvfV5OLVIBLBNCJmRgZiq9qc+TG
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:52 2026 by rpki-client