Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/r6u9dpLSj0CY155j3O_twzf6XaM.roa
File: r6u9dpLSj0CY155j3O_twzf6XaM.roa (raw, json)
Hash identifier: 5n0yIUoXlWVJAu7RaNAjMF0M5FSiyxRzAHjcXV59g30=
Subject key identifier: AF:AB:BD:76:92:D2:8F:40:98:D7:9E:63:DC:EF:ED:C3:37:FA:5D:A3
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019D01DDDAA63607A2A3F88AEA0AAC8ACA85
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/r6u9dpLSj0CY155j3O_twzf6XaM.roa
Signing time: Wed 18 Mar 2026 16:53:29 +0000
ROA not before: Wed 18 Mar 2026 16:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
45.248.37.0/24 maxlen: 24
79.108.160.0/24 maxlen: 24
79.108.161.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
93.93.205.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
103.240.146.0/24 maxlen: 24
103.240.147.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.241.67.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
185.139.228.0/24 maxlen: 24
185.144.156.0/22 maxlen: 22
185.159.75.0/24 maxlen: 24
193.168.172.0/24 maxlen: 24
193.168.175.0/24 maxlen: 24
2a06:c5c0:1500::/48 maxlen: 48
2a06:c5c0:1600::/48 maxlen: 48
2a06:c5c0:1700::/48 maxlen: 48
2a07:3b80::/48 maxlen: 48
2a07:3b80:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:dd:da:a6:36:07:a2:a3:f8:8a:ea:0a:ac:8a:ca:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Mar 18 16:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afabbd7692d28f4098d79e63dcefedc337fa5da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:e3:00:b1:4d:ef:c1:b6:d5:14:43:db:63:
f2:c1:03:bc:a9:8a:38:34:b7:75:93:39:91:d8:ae:
40:95:48:e8:01:40:13:df:75:b9:ca:93:19:a2:96:
45:f8:47:10:e9:59:3a:e8:73:ac:81:cc:1b:d3:89:
b1:43:b8:d4:95:a2:de:8c:98:ba:72:5f:7f:01:11:
81:ba:a7:90:d2:93:77:e0:8c:6d:f1:6e:c6:b6:1e:
f4:27:61:45:fd:23:8c:4e:c9:7c:e9:c0:a2:67:28:
1a:1b:7b:c0:d9:30:75:6c:3e:2f:c2:55:bf:2a:68:
9e:c0:46:e5:54:f4:d2:23:97:4f:16:ee:5c:75:87:
d1:c6:65:a9:b8:11:a8:96:44:2c:ea:c7:31:a5:74:
ba:1a:a3:f3:e5:b7:a4:9d:92:50:45:09:ae:cd:59:
c9:e6:d0:df:02:32:60:a6:1f:00:07:3b:b6:44:f4:
16:93:11:e1:f7:66:00:6d:e7:d8:ff:c4:a1:a0:48:
72:20:72:db:f9:08:da:99:b2:b2:65:e0:47:08:1b:
d1:25:cd:fd:87:38:f9:be:6d:74:ad:99:64:dd:f1:
21:ff:ea:98:cb:3e:7a:72:b2:1b:d7:0b:d2:2e:18:
0b:28:d2:96:1e:cb:4d:d3:67:3d:dd:0b:16:0c:8a:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:BD:76:92:D2:8F:40:98:D7:9E:63:DC:EF:ED:C3:37:FA:5D:A3
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/r6u9dpLSj0CY155j3O_twzf6XaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
45.248.37.0/24
79.108.160.0/23
91.202.170.0/24
91.223.169.0/24
93.93.205.0/24
103.45.245.0-103.45.246.255
103.240.146.0/23
103.241.66.0/23
185.47.172.0/24
185.53.209.0/24
185.139.228.0/24
185.144.156.0/22
185.159.75.0/24
193.168.172.0/24
193.168.175.0/24
IPv6:
2a06:c5c0:1500::/48
2a06:c5c0:1600::/48
2a06:c5c0:1700::/48
2a07:3b80::/48
2a07:3b80:8::/48
Signature Algorithm: sha256WithRSAEncryption
b7:ee:27:af:10:29:96:c8:40:65:85:10:48:96:34:03:45:f6:
02:7e:14:38:31:26:02:4d:73:02:7c:7d:3c:1e:d1:3e:70:74:
53:88:18:df:ad:bf:fe:0e:64:45:1e:04:ae:35:20:8b:ec:80:
24:9b:19:7b:67:f2:3b:c3:34:33:dd:7d:3c:f7:51:96:52:39:
44:c4:98:b8:1d:c2:29:a8:1f:31:17:fd:82:f3:a5:0c:a5:ca:
05:be:29:81:69:7c:33:e5:2f:96:e2:04:d5:2e:5b:90:d1:4e:
c8:93:3c:c6:93:65:6c:81:87:bb:0e:26:5b:de:6c:1c:75:2c:
e0:52:2a:c6:5a:f7:93:10:8a:d4:81:bd:43:bc:3f:bf:ef:4c:
ac:61:58:76:bd:7b:fd:e2:d0:4f:5c:66:73:13:8e:20:63:f9:
d5:73:d5:72:06:9e:04:59:51:46:04:f9:a9:65:30:83:15:17:
cc:15:71:48:cc:c9:f9:4c:3a:2b:9a:0d:63:35:f5:51:65:16:
1c:6d:59:13:22:e4:77:c3:8f:b3:f7:a1:34:dd:4d:c8:e2:b0:
b2:f1:43:9c:eb:d3:af:a8:1c:e4:86:5f:67:80:5c:ee:85:06:
6f:e0:a3:b6:bb:85:69:20:58:a4:b2:ab:52:59:ac:c4:72:70:
1d:31:66:80
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZ0B3dqmNgeio/iK6gqsisqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjYwMzE4MTY1MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmFiYmQ3NjkyZDI4ZjQwOThkNzllNjNkY2VmZWRjMzM3ZmE1ZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD3jALFN78G21RRD22PywQO8qYo4
NLd1kzmR2K5AlUjoAUAT33W5ypMZopZF+EcQ6Vk66HOsgcwb04mxQ7jUlaLejJi6
cl9/ARGBuqeQ0pN34Ixt8W7Gth70J2FF/SOMTsl86cCiZygaG3vA2TB1bD4vwlW/
KmiewEblVPTSI5dPFu5cdYfRxmWpuBGolkQs6scxpXS6GqPz5beknZJQRQmuzVnJ
5tDfAjJgph8ABzu2RPQWkxHh92YAbefY/8ShoEhyIHLb+QjambKyZeBHCBvRJc39
hzj5vm10rZlk3fEh/+qYyz56crIb1wvSLhgLKNKWHstN02c93QsWDIqcaQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFK+rvXaS0o9AmNeeY9zv7cM3+l2jMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvcjZ1OWRwTFNqMENZMTU1ajNPX3R3emY2WGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG4BggrBgEFBQcBBwEB/wSBqDCBpTBuBAIAATBoAwQALVur
AwQALfglAwQBT2ygAwQAW8qqAwQAW9+pAwQAXV3NMAwDBABnLfUDBABnLfYDBAFn
8JIDBAFn8UIDBAC5L6wDBAC5NdEDBAC5i+QDBAK5kJwDBAC5n0sDBADBqKwDBADB
qK8wMwQCAAIwLQMHACoGxcAVAAMHACoGxcAWAAMHACoGxcAXAAMHACoHO4AAAAMH
ACoHO4AACDANBgkqhkiG9w0BAQsFAAOCAQEAt+4nrxAplshAZYUQSJY0A0X2An4U
ODEmAk1zAnx9PB7RPnB0U4gY362//g5kRR4ErjUgi+yAJJsZe2fyO8M0M919PPdR
llI5RMSYuB3CKagfMRf9gvOlDKXKBb4pgWl8M+UvluIE1S5bkNFOyJM8xpNlbIGH
uw4mW95sHHUs4FIqxlr3kxCK1IG9Q7w/v+9MrGFYdr17/eLQT1xmcxOOIGP51XPV
cgaeBFlRRgT5qWUwgxUXzBVxSMzJ+Uw6K5oNYzX1UWUWHG1ZEyLkd8OPs/ehNN1N
yOKwsvFDnOvTr6gc5IZfZ4Bc7oUGb+CjtruFaSBYpLKrUlmsxHJwHTFmgA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:36 2026 by rpki-client