Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa
File: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (raw, json)
Hash identifier: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=
Subject key identifier: A6:DD:51:1C:AD:A7:88:29:6F:64:64:F0:1C:36:7E:66:C7:6F:6C:49
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019DDF56D8B726D5BF100210B0E8D4C4D0FE
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa
Signing time: Thu 30 Apr 2026 17:01:43 +0000
ROA not before: Thu 30 Apr 2026 17:01:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213835
IP address blocks: 45.153.182.0/23 maxlen: 24
91.220.176.0/24 maxlen: 24
91.220.184.0/24 maxlen: 24
94.154.134.0/23 maxlen: 24
185.4.237.0/24 maxlen: 24
185.4.238.0/23 maxlen: 24
185.62.252.0/22 maxlen: 24
185.83.72.0/22 maxlen: 24
185.106.36.0/24 maxlen: 24
185.106.38.0/24 maxlen: 24
185.106.39.0/24 maxlen: 24
185.117.35.0/24 maxlen: 24
193.104.210.0/24 maxlen: 24
2a14:9200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:56:d8:b7:26:d5:bf:10:02:10:b0:e8:d4:c4:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Apr 30 17:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6dd511cada788296f6464f01c367e66c76f6c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e3:97:bb:38:7c:5e:06:08:5f:f0:af:5b:b2:
a6:2e:3d:36:53:9e:a4:f6:09:8b:08:c0:1a:15:40:
33:aa:1c:7f:8a:fd:43:71:03:ef:ef:16:62:e3:e5:
58:b2:2b:72:ab:91:f6:6c:a5:68:34:ea:85:5b:bf:
36:a6:35:39:d6:91:a2:7c:ff:d4:28:31:e4:5a:73:
08:cc:ec:a7:5b:22:f1:72:0b:14:f8:42:a9:bc:0f:
75:ea:2e:1a:0a:d2:4e:02:57:d1:a9:b2:bc:90:e8:
bb:7e:18:42:b1:39:05:d6:50:f5:12:8e:02:fe:4e:
68:e4:6f:a4:11:67:94:1d:06:5e:44:ee:57:20:7a:
6d:84:6f:1f:27:38:97:cd:62:ad:00:65:52:d9:04:
2a:ba:be:a3:10:d1:5e:ba:d5:45:64:35:ed:1e:6d:
e0:25:8c:0c:33:91:14:07:17:c1:d3:bf:09:24:68:
23:15:b0:a1:2b:81:db:04:19:3b:e3:4d:f8:b6:fb:
57:d1:25:b0:78:dd:f9:ed:7e:d1:a6:5b:c9:75:61:
da:81:a6:00:13:da:92:80:cb:01:be:6c:0a:12:fc:
03:27:86:f7:6c:10:61:c8:01:0f:f5:4b:b2:45:83:
d0:70:49:f9:f9:fa:c7:e2:fc:bd:98:ad:0b:a9:ec:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:51:1C:AD:A7:88:29:6F:64:64:F0:1C:36:7E:66:C7:6F:6C:49
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.182.0/23
91.220.176.0/24
91.220.184.0/24
94.154.134.0/23
185.4.237.0-185.4.239.255
185.62.252.0/22
185.83.72.0/22
185.106.36.0/24
185.106.38.0/23
185.117.35.0/24
193.104.210.0/24
IPv6:
2a14:9200::/29
Signature Algorithm: sha256WithRSAEncryption
07:63:f8:0a:ed:c8:65:28:74:c2:13:aa:6e:f1:16:31:bc:8a:
ec:e6:2e:d2:4c:24:b1:5a:20:e4:21:10:88:04:78:ca:53:f3:
77:1f:65:a1:84:c4:31:ef:42:99:91:d2:ec:32:a5:10:64:7c:
ec:2c:e7:ab:f5:1e:13:95:49:a0:cb:dd:b8:35:6d:fa:4d:b7:
a9:9a:2c:b1:8d:db:f0:eb:27:77:0d:29:e8:bc:aa:bd:0d:ef:
c3:ab:2c:9f:4b:c1:ac:9b:2b:e7:3c:07:d4:4e:b6:c5:97:a1:
e3:f1:5f:4b:8a:a5:c9:81:ed:db:2c:f2:b5:f0:52:5c:f8:d7:
00:98:15:20:e2:e2:67:ef:66:a7:fa:bf:e1:61:4f:a1:3b:8f:
11:20:cc:10:41:97:a5:a4:c1:68:c4:9f:b7:6d:1f:d4:2a:9c:
4c:11:90:22:bd:4c:1c:b2:cb:bc:51:ab:99:e8:32:ab:8d:51:
01:2b:d3:ff:17:eb:b5:dc:3f:92:b6:df:b7:4a:c1:c0:b8:32:
7e:0f:c4:42:84:68:ee:b4:71:66:44:77:cc:ee:b5:7c:53:1b:
fd:30:a0:97:7d:85:f4:27:61:bb:0f:3d:5a:69:26:0f:c2:16:
99:a8:15:32:c9:ff:97:f1:53:51:13:1d:0d:ab:c0:99:63:f3:
5b:5a:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:31 2026 by rpki-client