Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/axnm0HQRmG8rizfv82dyns0e2_8.roa
File: axnm0HQRmG8rizfv82dyns0e2_8.roa (raw, json)
Hash identifier: aV50CPhaYK3yIWcd+/HLRX9TlneZUNpfM8fhreah7uM=
Subject key identifier: 6B:19:E6:D0:74:11:98:6F:2B:8B:37:EF:F3:67:72:9E:CD:1E:DB:FF
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019F8E2591186643BEF66BF10F213A6466F7
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/axnm0HQRmG8rizfv82dyns0e2_8.roa
Signing time: Thu 23 Jul 2026 08:44:14 +0000
ROA not before: Thu 23 Jul 2026 08:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44709
IP address blocks: 5.100.248.0/24 maxlen: 24
5.100.249.0/24 maxlen: 24
5.100.250.0/24 maxlen: 24
5.100.251.0/24 maxlen: 24
5.100.252.0/24 maxlen: 24
5.100.253.0/24 maxlen: 24
5.100.254.0/24 maxlen: 24
5.100.255.0/24 maxlen: 24
31.133.100.0/24 maxlen: 24
31.133.102.0/24 maxlen: 24
31.133.103.0/24 maxlen: 24
45.83.40.0/24 maxlen: 24
45.83.42.0/24 maxlen: 24
45.83.43.0/24 maxlen: 24
45.93.92.0/24 maxlen: 24
45.93.93.0/24 maxlen: 24
45.93.94.0/24 maxlen: 24
45.93.95.0/24 maxlen: 24
63.250.61.0/24 maxlen: 24
63.250.62.0/24 maxlen: 24
63.250.63.0/24 maxlen: 24
79.108.165.0/24 maxlen: 24
81.28.7.0/24 maxlen: 24
83.229.70.0/24 maxlen: 24
83.229.71.0/24 maxlen: 24
83.229.72.0/24 maxlen: 24
83.229.73.0/24 maxlen: 24
83.229.74.0/24 maxlen: 24
91.202.168.0/24 maxlen: 24
91.202.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.202.171.0/24 maxlen: 24
91.223.106.0/24 maxlen: 24
91.226.72.0/24 maxlen: 24
91.226.76.0/24 maxlen: 24
91.228.126.0/23 maxlen: 23
103.45.244.0/24 maxlen: 24
109.207.76.0/24 maxlen: 24
109.207.79.0/24 maxlen: 24
185.28.152.0/24 maxlen: 24
185.28.153.0/24 maxlen: 24
185.28.154.0/24 maxlen: 24
185.28.155.0/24 maxlen: 24
185.47.173.0/24 maxlen: 24
185.47.175.0/24 maxlen: 24
185.56.72.0/22 maxlen: 22
185.139.231.0/24 maxlen: 24
185.159.72.0/24 maxlen: 24
185.159.73.0/24 maxlen: 24
185.159.74.0/24 maxlen: 24
185.162.124.0/24 maxlen: 24
185.162.125.0/24 maxlen: 24
185.162.126.0/24 maxlen: 24
185.220.207.0/24 maxlen: 24
185.241.4.0/24 maxlen: 24
185.241.5.0/24 maxlen: 24
185.241.6.0/24 maxlen: 24
185.241.7.0/24 maxlen: 24
185.253.72.0/24 maxlen: 24
185.253.73.0/24 maxlen: 24
185.253.75.0/24 maxlen: 24
188.191.147.0/24 maxlen: 24
194.36.89.0/24 maxlen: 24
194.36.90.0/24 maxlen: 24
194.36.91.0/24 maxlen: 24
195.28.180.0/24 maxlen: 24
195.28.181.0/24 maxlen: 24
195.238.120.0/24 maxlen: 24
212.80.204.0/24 maxlen: 24
212.80.205.0/24 maxlen: 24
212.80.206.0/24 maxlen: 24
212.80.207.0/24 maxlen: 24
2a06:c5c0::/48 maxlen: 48
2a06:c5c0:700::/48 maxlen: 48
2a06:c5c0:900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:25:91:18:66:43:be:f6:6b:f1:0f:21:3a:64:66:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jul 23 08:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b19e6d07411986f2b8b37eff367729ecd1edbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2c:e8:2d:b9:52:bd:ae:7e:25:1a:a8:f0:24:
d0:cb:ef:88:d0:d3:24:81:37:03:7f:a9:67:07:5e:
7e:b8:1e:41:00:4a:b0:24:f9:e1:bb:02:d4:f4:84:
df:96:8c:86:2c:6e:e6:2b:02:7d:d6:1e:77:12:62:
ae:db:de:ca:87:5a:72:74:38:a6:56:53:20:85:03:
23:9a:bc:cd:82:4c:da:40:aa:86:e7:df:35:be:1e:
ff:1a:f3:3e:6e:21:72:e3:da:f6:d1:22:5f:9b:40:
69:8f:ae:74:0b:b3:5f:8a:03:79:03:27:cf:fc:86:
06:ed:e3:57:73:a4:de:cc:dc:c8:6d:be:29:32:b2:
86:8b:48:67:01:f2:22:10:27:44:db:29:36:52:76:
f8:a3:c5:25:aa:a4:c0:25:aa:54:de:6f:84:18:f7:
85:eb:de:5f:00:41:b8:47:5f:5a:e7:c5:54:1e:69:
fa:00:9e:3d:35:b4:eb:81:2d:bc:9b:ea:34:9b:1e:
12:e6:fc:4a:0d:87:2b:de:91:fe:a4:6f:7f:3c:fe:
33:02:b0:ec:f7:fd:97:3d:c9:79:5f:b1:5c:13:8c:
b2:ff:b2:0b:c5:3d:25:00:08:7d:88:f7:4c:ab:db:
d1:69:5a:91:f3:73:3c:55:aa:ca:2f:ff:da:17:49:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:E6:D0:74:11:98:6F:2B:8B:37:EF:F3:67:72:9E:CD:1E:DB:FF
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/axnm0HQRmG8rizfv82dyns0e2_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.248.0/21
31.133.100.0/24
31.133.102.0/23
45.83.40.0/24
45.83.42.0/23
45.93.92.0/22
63.250.61.0-63.250.63.255
79.108.165.0/24
81.28.7.0/24
83.229.70.0-83.229.74.255
91.202.168.0/22
91.223.106.0/24
91.226.72.0/24
91.226.76.0/24
91.228.126.0/23
103.45.244.0/24
109.207.76.0/24
109.207.79.0/24
185.28.152.0/22
185.47.173.0/24
185.47.175.0/24
185.56.72.0/22
185.139.231.0/24
185.159.72.0-185.159.74.255
185.162.124.0-185.162.126.255
185.220.207.0/24
185.241.4.0/22
185.253.72.0/23
185.253.75.0/24
188.191.147.0/24
194.36.89.0-194.36.91.255
195.28.180.0/23
195.238.120.0/24
212.80.204.0/22
IPv6:
2a06:c5c0::/48
2a06:c5c0:700::/48
2a06:c5c0:900::/48
Signature Algorithm: sha256WithRSAEncryption
e1:3a:ca:39:d6:17:f1:4f:a0:4f:9b:ae:38:a6:91:a5:70:00:
75:21:84:2d:62:1e:a3:50:36:ac:d2:8c:95:64:52:54:f2:96:
da:49:e9:20:7f:c6:b9:20:71:33:cc:1f:c2:91:44:f3:0c:31:
1e:f4:87:20:3a:4e:a2:ba:44:b7:d5:2f:fd:04:3a:bf:70:c8:
7a:8f:4f:6a:b4:4f:fa:86:c5:8d:5a:ee:a3:78:ae:6a:05:82:
7a:3e:ef:8c:bc:cb:78:b8:7b:b3:88:8e:22:4f:9c:b7:0a:40:
9c:5e:a3:a0:fe:db:f1:e9:a3:68:c4:60:d2:ae:9b:b6:b8:e3:
2f:d0:b3:b9:25:9d:e9:c2:2a:73:9e:12:a8:1f:a1:56:35:05:
a9:02:71:ad:6d:67:38:69:8a:15:74:94:8a:cf:a2:96:5f:cc:
57:7a:69:b1:9d:c3:df:2c:20:e2:07:27:2f:75:85:2f:ff:2c:
a6:13:9c:77:eb:ed:ac:6d:e9:ee:14:5b:15:0a:25:f1:8d:38:
5c:19:67:66:aa:42:03:81:ba:f6:38:b1:46:a0:28:78:b5:91:
7b:2f:3f:5d:8e:0d:d9:0f:95:e3:20:77:6e:9e:7f:ea:f5:fc:
a7:37:55:d9:a6:9a:28:08:d2:41:0c:7c:a5:bf:d6:a8:a5:34:
42:3e:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:39 2026 by rpki-client