Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/5MrbF5bNGEPF9upXfBtS4A4wDl4.roa
File: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (raw, json)
Hash identifier: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=
Subject key identifier: E4:CA:DB:17:96:CD:18:43:C5:F6:EA:57:7C:1B:52:E0:0E:30:0E:5E
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019F18EB0713392F13F784AF2547CF808CA8
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/5MrbF5bNGEPF9upXfBtS4A4wDl4.roa
Signing time: Tue 30 Jun 2026 14:24:43 +0000
ROA not before: Tue 30 Jun 2026 14:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206841
IP address blocks: 185.174.184.0/24 maxlen: 24
185.174.185.0/24 maxlen: 24
185.174.186.0/24 maxlen: 24
185.174.187.0/24 maxlen: 24
2a0b:b300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:eb:07:13:39:2f:13:f7:84:af:25:47:cf:80:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jun 30 14:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4cadb1796cd1843c5f6ea577c1b52e00e300e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:f4:3d:d8:a8:3e:ce:6c:6f:0e:15:6d:90:
51:dd:2c:07:fb:6e:28:47:88:b9:e4:8f:18:8c:e8:
c4:11:0d:cf:5e:5b:92:ec:2e:c7:93:0d:b4:c0:ce:
2e:f0:e0:17:e9:c0:8e:a5:55:a8:ec:a9:8a:d6:86:
cf:d0:76:90:d6:21:85:dd:1a:be:9c:a7:66:99:b7:
77:58:c1:0e:a4:51:84:16:4b:28:19:72:35:74:6e:
1a:ed:a6:25:8e:5b:80:e1:88:42:f2:30:0d:e4:cc:
e1:30:89:aa:ad:de:3e:a6:42:38:96:45:18:0e:7a:
24:23:83:0c:50:26:92:b7:c0:99:ff:43:51:48:0a:
10:f9:57:46:cc:97:a7:32:be:df:e8:3d:dc:61:b2:
3e:fd:8b:5a:ea:39:7d:48:a2:ea:63:a2:aa:53:12:
80:d0:17:18:ac:19:52:6f:02:6d:8f:fc:b1:ff:e2:
9e:7a:00:02:95:4a:15:8a:0f:ef:7c:3b:1b:f8:e5:
21:da:f7:0b:ea:96:57:5e:da:7b:bf:11:59:49:aa:
b7:14:f9:55:1b:01:98:4a:60:12:8d:a7:ba:7b:74:
ed:cd:42:00:5c:34:73:47:56:8c:d9:68:45:34:97:
5c:7d:f2:8f:46:91:dc:3c:93:6e:71:a3:ec:af:35:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:DB:17:96:CD:18:43:C5:F6:EA:57:7C:1B:52:E0:0E:30:0E:5E
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/5MrbF5bNGEPF9upXfBtS4A4wDl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.184.0/22
IPv6:
2a0b:b300::/29
Signature Algorithm: sha256WithRSAEncryption
02:e8:d6:ed:6b:27:60:81:b1:f1:f6:cf:7a:a0:15:aa:47:4f:
7b:f5:8e:4f:1e:4d:c8:26:3f:14:df:3a:31:b7:aa:03:24:38:
f0:80:10:2e:5e:04:d7:80:a5:47:88:8d:06:21:f2:b8:dd:e1:
2f:91:1d:d7:6d:8f:3d:05:28:3a:4b:5a:2c:57:4c:3b:1a:39:
97:16:5c:28:8f:a8:51:5c:64:aa:8c:94:87:d6:02:14:0c:b3:
eb:b0:27:76:c6:57:e0:e8:0a:09:83:f2:e2:70:bf:05:b4:d7:
7c:0e:b5:63:c2:ea:e4:42:25:ac:bb:18:51:78:d5:00:8b:04:
ef:b4:0b:74:4a:55:44:fb:54:ed:e8:17:fc:7f:0e:f5:26:8f:
75:90:f0:e5:6f:d8:40:9e:14:9b:f8:57:03:7a:5e:e7:8e:1a:
2d:17:3f:55:fd:4f:fe:75:0a:22:9c:ea:15:71:a3:48:3b:41:
51:1d:9a:0f:cd:77:37:71:9a:58:7a:40:58:fc:69:fb:7d:74:
7e:01:30:9f:e4:c8:d1:40:e4:eb:91:27:6e:ef:3b:a5:9d:f0:
2d:75:c0:75:de:04:ba:df:df:05:46:22:2e:6c:a7:3f:f0:89:
9f:74:72:9b:b8:6d:76:03:1a:1c:09:d6:bf:e3:4d:f4:b9:cc:
8a:7b:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:16 2026 by rpki-client