Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/5UiQgSKV-0r5R-g0qGD-DGRklEo.roa
File: 5UiQgSKV-0r5R-g0qGD-DGRklEo.roa (raw, json)
Hash identifier: 8l38pHXayturuSA+ystfuhpDtM4gylkEmHjyutVuWjI=
Subject key identifier: E5:48:90:81:22:95:FB:4A:F9:47:E8:34:A8:60:FE:0C:64:64:94:4A
Certificate issuer: /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial: 01A1449D3124FD138172EFD804FF1C4FEC60
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/5UiQgSKV-0r5R-g0qGD-DGRklEo.roa
Signing time: Fri 16 Oct 2026 12:08:34 +0000
ROA not before: Fri 16 Oct 2026 12:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213597
IP address blocks: 185.60.181.0/24 maxlen: 24
2a14:af00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:9d:31:24:fd:13:81:72:ef:d8:04:ff:1c:4f:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
Validity
Not Before: Oct 16 12:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e54890812295fb4af947e834a860fe0c6464944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:81:b4:81:61:2c:ac:7d:da:77:f7:9f:25:
08:ff:13:d4:45:cd:47:57:f4:e9:30:de:5b:a3:8c:
c5:bb:bf:57:58:a3:eb:27:45:c0:b7:06:9f:74:e7:
dd:75:94:e1:c4:e3:ec:e1:22:44:d7:5c:8f:4a:6a:
b5:a7:70:a0:ad:42:bd:c0:47:12:9a:f4:fb:af:0d:
df:e7:ec:08:18:1a:55:91:8e:0b:ac:b9:65:7f:9c:
3e:22:83:3c:1c:48:7f:46:47:f9:dd:a4:2e:ed:1d:
fc:95:dc:a7:4c:e5:6d:c1:28:34:f1:8c:e2:c5:b9:
54:03:d3:a6:1d:c1:6e:53:8c:c6:54:5e:36:90:4f:
2f:63:69:2c:08:35:5b:72:08:6d:85:8e:a5:90:de:
1f:57:ac:82:19:e3:85:5b:f6:c2:fc:39:d2:a6:57:
50:96:5a:d0:e4:f6:f0:8b:eb:3a:29:c8:6a:bf:0c:
a7:8b:c1:28:4e:5a:dd:3d:b9:5c:19:56:61:7c:76:
49:9b:3f:d7:6a:50:37:74:6c:18:22:32:7a:16:8e:
56:73:b7:fb:6d:02:63:0c:85:2e:d5:8b:65:51:60:
74:8c:32:12:5d:4d:93:ba:61:59:e6:d2:33:bf:fd:
08:22:7e:7e:be:76:3d:74:7d:eb:f6:7b:c8:8e:da:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:90:81:22:95:FB:4A:F9:47:E8:34:A8:60:FE:0C:64:64:94:4A
X509v3 Authority Key Identifier:
keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/5UiQgSKV-0r5R-g0qGD-DGRklEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.181.0/24
IPv6:
2a14:af00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:eb:bd:7b:64:6d:ee:1e:2e:4e:5d:cb:6d:f6:ce:25:2d:f2:
5a:f1:2a:6a:98:46:15:33:be:ae:9d:4b:23:77:30:33:a0:97:
f6:43:ce:8e:5a:aa:80:a8:4c:b8:bb:a1:f7:8c:a9:5f:f7:94:
b0:db:a5:7b:6a:bf:35:16:83:2c:0e:46:9a:e9:76:1c:80:56:
3d:2c:87:0d:01:71:7a:51:6b:95:27:6d:9a:5f:e1:05:fb:81:
66:ec:62:97:42:eb:18:f2:d9:34:1b:62:f3:5e:4e:84:83:e7:
83:41:31:f8:b9:18:2e:19:f9:9a:fc:3d:b9:e4:aa:03:dd:fe:
aa:b9:96:ed:eb:7c:10:52:e2:3a:20:47:be:a8:c5:42:ba:a3:
f8:c1:74:b4:55:21:d9:fe:70:c0:6c:d5:43:e7:b9:ea:24:7a:
f7:f7:cb:a0:fe:11:55:91:84:6d:6d:64:55:b1:7b:6b:1e:cf:
34:6d:e0:23:64:3f:ed:60:ef:0e:aa:fb:67:e2:ad:b6:a3:08:
3e:13:03:f4:b4:e7:e6:91:42:ed:12:2e:c4:86:1e:eb:4f:38:
23:3a:e4:05:70:c0:b5:68:e6:30:dc:e2:f8:4e:44:ed:7e:13:
ed:5e:5c:35:43:04:79:df:d6:02:18:8c:62:3a:6c:2c:8d:d6:
eb:4b:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:02:55 2026 by rpki-client