Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/f_xKmFrmjIA78qUIL0QMNJGgKEk.roa
File: f_xKmFrmjIA78qUIL0QMNJGgKEk.roa (raw, json)
Hash identifier: C5FX/w2liydb0eZpv86Rq1hmajGY3P2SktyNH3juuk4=
Subject key identifier: 7F:FC:4A:98:5A:E6:8C:80:3B:F2:A5:08:2F:44:0C:34:91:A0:28:49
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019F8E2590B1C184365DC17A203DF28338EE
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/f_xKmFrmjIA78qUIL0QMNJGgKEk.roa
Signing time: Thu 23 Jul 2026 08:44:14 +0000
ROA not before: Thu 23 Jul 2026 08:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
45.248.37.0/24 maxlen: 24
79.108.160.0/24 maxlen: 24
79.108.161.0/24 maxlen: 24
79.108.164.0/24 maxlen: 24
79.108.166.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
93.93.205.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
103.240.146.0/24 maxlen: 24
103.240.147.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.241.67.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
185.139.228.0/24 maxlen: 24
185.144.156.0/22 maxlen: 22
185.159.75.0/24 maxlen: 24
193.168.172.0/24 maxlen: 24
193.168.175.0/24 maxlen: 24
2a06:c5c0:1500::/48 maxlen: 48
2a06:c5c0:1600::/48 maxlen: 48
2a06:c5c0:1700::/48 maxlen: 48
2a06:c5c0:2500::/48 maxlen: 48
2a07:3b80::/48 maxlen: 48
2a07:3b80:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:25:90:b1:c1:84:36:5d:c1:7a:20:3d:f2:83:38:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jul 23 08:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ffc4a985ae68c803bf2a5082f440c3491a02849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:e0:02:7d:d2:38:d7:b2:b2:c9:f9:0b:10:
66:6f:88:78:66:4b:27:a2:5f:34:8e:ae:d6:11:a9:
24:8c:72:14:fd:a3:47:23:c0:d7:a8:f9:aa:89:6b:
1d:98:e6:ec:f3:fd:2f:75:e6:57:53:a8:8e:87:64:
8c:83:44:d0:c7:1f:e0:b1:a4:00:e0:6e:d0:4a:df:
d0:9c:4c:cc:6a:79:20:88:d2:7a:d7:b9:a2:70:1c:
6c:09:c6:f7:7a:3c:cd:76:39:b9:1a:07:a2:42:ca:
f9:4f:18:53:d4:f9:15:20:93:88:23:b9:67:46:14:
b6:c9:20:ae:d7:6c:38:39:37:cd:e0:04:d1:94:e2:
26:84:09:b6:0c:d8:a8:0b:ee:25:bb:be:42:60:0e:
1a:ae:ae:5b:26:11:27:e2:5d:07:0f:73:e0:6d:4b:
d1:6d:04:48:f2:0f:e1:52:e5:70:e4:02:38:67:0b:
56:9d:33:a9:f2:8a:84:16:a3:80:35:d3:26:eb:6b:
1d:aa:ab:b0:ad:a9:49:b4:ed:09:71:5f:31:16:28:
da:5d:27:4d:f1:35:02:b0:40:2e:7c:f7:8c:c2:44:
0b:e3:eb:14:7e:64:50:dd:de:4d:27:f6:98:0f:37:
95:75:26:72:b6:16:f2:71:26:ea:22:04:89:71:93:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:4A:98:5A:E6:8C:80:3B:F2:A5:08:2F:44:0C:34:91:A0:28:49
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/f_xKmFrmjIA78qUIL0QMNJGgKEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
45.248.37.0/24
79.108.160.0/23
79.108.164.0/24
79.108.166.0/24
91.202.170.0/24
91.223.169.0/24
93.93.205.0/24
103.45.245.0-103.45.246.255
103.240.146.0/23
103.241.66.0/23
185.47.172.0/24
185.53.209.0/24
185.139.228.0/24
185.144.156.0/22
185.159.75.0/24
193.168.172.0/24
193.168.175.0/24
IPv6:
2a06:c5c0:1500::/48
2a06:c5c0:1600::/48
2a06:c5c0:1700::/48
2a06:c5c0:2500::/48
2a07:3b80::/48
2a07:3b80:8::/48
Signature Algorithm: sha256WithRSAEncryption
46:f0:3f:38:91:bf:fd:fb:71:09:f4:a4:2b:29:6b:a7:9e:66:
f4:d6:27:d9:53:12:31:5c:ca:10:c2:1b:eb:19:21:6a:28:c0:
af:af:de:3f:c7:33:22:66:5f:6e:48:9d:a9:30:cf:df:5c:1b:
fd:4e:c5:c4:3a:63:c9:9d:13:81:ef:09:46:4f:94:37:67:59:
de:05:65:a1:3b:1f:66:55:4b:8d:90:f3:77:26:d2:ad:47:65:
62:ac:0f:15:c5:e7:18:5e:2c:ee:9b:88:f5:6d:e5:25:63:80:
00:db:de:6b:d5:c9:43:14:aa:aa:e7:e4:b7:e1:dd:90:f6:ee:
78:76:ff:db:7a:5c:84:1f:7f:18:ee:70:50:e5:7c:2f:22:2b:
b0:46:01:88:20:c3:9b:85:f0:7a:c9:79:7c:56:3e:ee:60:8a:
80:d2:09:d3:e9:44:6e:8c:ea:44:72:f2:f2:d1:63:d0:28:b7:
89:3f:1b:f1:67:6d:e3:f3:c5:60:02:97:b9:70:97:46:f8:d3:
c1:a1:98:61:14:e3:6a:88:87:d9:90:da:cd:9f:b9:07:46:91:
8c:a0:ba:20:ae:00:08:02:fc:e8:c2:0d:42:11:ea:c9:b2:0b:
a9:71:b6:3c:f7:0d:e4:1f:bb:93:1e:03:b5:12:e3:7f:41:1a:
40:57:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:09 2026 by rpki-client