Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/CtJ8OGkCaahCczfwEJKIo0Vg19E.roa
File: CtJ8OGkCaahCczfwEJKIo0Vg19E.roa (raw, json)
Hash identifier: G04Zndcd1iRvLKPAv2hVCE6UogK1m2W2eJhOAaju7+8=
Subject key identifier: 0A:D2:7C:38:69:02:69:A8:42:73:37:F0:10:92:88:A3:45:60:D7:D1
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019ED4DB861161C4C2EB3FCF6B1D78D61BDF
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/CtJ8OGkCaahCczfwEJKIo0Vg19E.roa
Signing time: Wed 17 Jun 2026 09:13:36 +0000
ROA not before: Wed 17 Jun 2026 09:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41436
IP address blocks: 5.180.180.0/24 maxlen: 24
5.180.181.0/24 maxlen: 24
5.180.182.0/24 maxlen: 24
5.180.183.0/24 maxlen: 24
45.91.168.0/24 maxlen: 24
45.91.169.0/24 maxlen: 24
63.250.56.0/24 maxlen: 24
63.250.57.0/24 maxlen: 24
79.108.163.0/24 maxlen: 24
83.229.82.0/24 maxlen: 24
83.229.83.0/24 maxlen: 24
103.13.210.0/24 maxlen: 24
103.45.247.0/24 maxlen: 24
185.181.8.0/24 maxlen: 24
185.220.204.0/24 maxlen: 24
185.220.205.0/24 maxlen: 24
185.227.110.0/24 maxlen: 24
185.247.117.0/24 maxlen: 24
193.168.173.0/24 maxlen: 24
194.37.81.0/24 maxlen: 24
194.146.38.0/24 maxlen: 24
194.146.39.0/24 maxlen: 24
195.238.121.0/24 maxlen: 24
2a06:c5c0:200::/48 maxlen: 48
2a07:3b80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:db:86:11:61:c4:c2:eb:3f:cf:6b:1d:78:d6:1b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jun 17 09:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ad27c38690269a8427337f0109288a34560d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:e2:e2:0a:7f:39:31:d1:a8:69:ae:03:75:
e7:fe:64:22:af:d6:87:72:94:22:82:a6:9d:bf:fa:
6b:44:eb:68:d7:03:fe:f0:2e:ed:11:5d:53:e9:27:
c8:e1:1c:e3:32:9f:04:96:11:cb:9f:8f:9a:11:ed:
84:3c:fb:8a:62:e7:ea:90:de:97:04:77:0e:d2:b4:
dc:92:61:e8:da:26:1a:dd:23:5d:2a:1f:cb:dd:4d:
6e:42:0f:15:6e:c2:3d:6d:4b:49:95:9b:fd:9e:35:
81:29:04:25:2d:0a:72:59:8a:54:3b:77:ad:02:dd:
e2:14:d9:0b:c7:f4:24:02:76:b9:1c:3f:e6:91:a7:
48:d3:c0:64:b5:0f:25:3a:a0:0d:8b:39:b1:3b:8e:
7d:33:bf:e5:ac:e0:af:3d:c1:a3:d0:e2:e3:c1:e0:
bd:7b:bd:f2:6b:51:80:ae:97:b6:56:1e:c0:c5:89:
e9:1a:ed:86:33:1d:b0:03:85:60:3e:cf:96:4f:9e:
6c:0f:24:1f:f2:96:66:e4:c1:a3:01:82:33:0c:7d:
17:a3:9a:e8:a9:3c:84:8c:51:26:2e:0e:75:a8:0d:
a6:36:56:f4:c9:a9:e3:41:b8:18:40:f3:68:ee:b8:
56:0c:d4:47:a9:3d:9b:bf:7a:cb:15:be:24:cb:68:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D2:7C:38:69:02:69:A8:42:73:37:F0:10:92:88:A3:45:60:D7:D1
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/CtJ8OGkCaahCczfwEJKIo0Vg19E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.180.0/22
45.91.168.0/23
63.250.56.0/23
79.108.163.0/24
83.229.82.0/23
103.13.210.0/24
103.45.247.0/24
185.181.8.0/24
185.220.204.0/23
185.227.110.0/24
185.247.117.0/24
193.168.173.0/24
194.37.81.0/24
194.146.38.0/23
195.238.121.0/24
IPv6:
2a06:c5c0:200::/48
2a07:3b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
45:b2:c7:69:3e:a8:60:7c:49:0e:4b:83:d0:b9:07:7f:c9:24:
c0:5e:40:69:5f:c7:a8:ad:25:7c:9e:77:26:1b:79:fa:6b:3e:
13:f1:bd:ef:5d:66:e3:08:03:b8:fb:50:b8:d3:70:f6:a8:ae:
09:f3:3d:6c:7f:84:22:c9:5f:7b:54:5b:77:d9:2f:13:61:e5:
ed:43:d7:9e:2c:05:0b:42:d9:b1:18:ce:c7:51:5f:34:d6:29:
7c:c3:bc:3e:1c:88:e2:06:19:b8:27:5c:1d:5c:d0:83:34:fa:
b9:2f:d7:c5:bd:5c:f7:2d:6a:df:ea:f3:97:e2:a2:c2:9d:0c:
47:7c:d0:0e:0e:37:46:b8:ac:48:48:83:0a:11:da:48:b6:ad:
fa:f4:a7:eb:9f:92:ff:24:8f:e9:2b:12:55:0d:57:e0:bf:66:
30:e3:2a:5a:fc:8a:d4:42:19:c1:40:f7:ce:0c:2c:ac:75:5a:
f1:10:d6:f3:7a:11:7a:2a:ec:79:41:a0:27:02:80:cf:90:7f:
82:b6:05:60:5f:4e:9e:73:65:35:c6:8f:b2:e4:f3:ee:bc:08:
a5:e1:c1:e0:9b:a0:b4:67:30:be:b1:fc:df:d4:19:d5:ef:50:
47:34:bd:1d:e5:97:31:79:bd:de:e5:2b:73:ca:f7:cc:66:90:
e8:cc:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:24 2026 by rpki-client