Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/vI5YIn1gmoiJ1XhTruhkEMslvdk.roa
File: vI5YIn1gmoiJ1XhTruhkEMslvdk.roa (raw, json)
Hash identifier: MwcmXVuCGhpSZPWmXs+pxNPa7hJBYp1BPE8MntYWY7M=
Subject key identifier: BC:8E:58:22:7D:60:9A:88:89:D5:78:53:AE:E8:64:10:CB:25:BD:D9
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 019FD105A35EC53299B702393D586BAD430F
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/vI5YIn1gmoiJ1XhTruhkEMslvdk.roa
Signing time: Wed 05 Aug 2026 08:23:55 +0000
ROA not before: Wed 05 Aug 2026 08:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48988
IP address blocks: 5.253.228.0/23 maxlen: 24
88.218.68.0/22 maxlen: 24
108.174.78.0/24 maxlen: 24
111.88.140.0/22 maxlen: 24
153.80.192.0/20 maxlen: 24
198.13.184.0/21 maxlen: 24
213.148.0.0/20 maxlen: 24
213.148.24.0/22 maxlen: 24
2a13:8280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:05:a3:5e:c5:32:99:b7:02:39:3d:58:6b:ad:43:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Aug 5 08:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc8e58227d609a8889d57853aee86410cb25bdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:f4:cc:13:58:7b:0d:26:e7:60:6f:e0:80:
35:fe:4f:de:80:f5:8d:05:79:77:fe:c5:ff:f6:e4:
12:fa:76:16:5b:e3:0b:18:98:b9:23:6f:77:21:c3:
09:a9:f7:0b:a4:f8:2e:38:ef:b6:5b:e9:51:4c:e6:
1c:92:7a:cb:51:97:8f:09:85:a8:c0:cd:fe:d4:19:
19:4e:c4:87:9e:23:18:27:1b:f5:3f:43:32:c7:cd:
eb:15:54:cd:32:e3:48:ce:a8:2e:4f:16:b1:dc:40:
f1:26:bd:aa:79:09:54:89:1c:4b:6e:f8:c7:2c:a9:
d2:61:17:59:e7:3a:f8:fb:5c:c2:0e:dd:06:03:6e:
b7:ef:8f:6a:37:4e:58:19:65:15:e5:a0:0e:12:72:
3c:25:ce:51:9f:03:5a:ff:12:0a:19:36:9d:2e:a3:
93:66:82:30:1a:bd:d6:9c:49:cb:b8:4b:62:72:dc:
96:30:a8:1a:ae:15:ed:07:d3:45:e0:fb:fb:f6:47:
e0:da:9d:e2:44:b3:aa:16:da:9e:05:ad:3c:2c:6a:
6b:4c:70:65:5a:06:94:97:53:8f:a0:de:f2:19:34:
83:2e:98:61:5c:3f:d2:07:fb:2d:5b:3f:b8:f5:30:
5c:3f:9f:66:78:03:95:db:13:12:91:04:f2:8d:bc:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8E:58:22:7D:60:9A:88:89:D5:78:53:AE:E8:64:10:CB:25:BD:D9
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/vI5YIn1gmoiJ1XhTruhkEMslvdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.228.0/23
88.218.68.0/22
108.174.78.0/24
111.88.140.0/22
153.80.192.0/20
198.13.184.0/21
213.148.0.0/20
213.148.24.0/22
IPv6:
2a13:8280::/32
Signature Algorithm: sha256WithRSAEncryption
2e:28:86:57:a4:9c:2a:5a:e2:7e:f2:42:2f:ee:0e:63:dc:5e:
c9:cc:72:59:73:ee:63:15:66:37:c9:2f:e1:8d:55:63:fb:7f:
d3:6c:51:09:a6:b4:e3:1d:5e:ac:40:82:b3:33:ef:9d:31:b5:
97:ec:25:26:fa:a1:30:52:60:db:c6:69:42:01:01:fc:23:99:
31:4e:da:03:84:4b:7b:ef:32:35:50:ae:18:46:85:67:00:f0:
a4:20:dc:e6:cd:d5:38:7e:5b:ba:50:68:fb:8f:40:ca:d4:06:
58:da:9b:a8:bf:cd:cc:d0:ad:01:64:af:5c:cd:42:d7:cb:36:
49:ab:2b:d4:cd:4a:cc:26:3e:77:ec:96:3b:25:6e:c7:6e:b8:
46:87:03:04:c5:b5:58:b7:3d:b9:9f:9e:13:44:09:bf:d7:be:
67:63:55:91:b6:20:d8:dc:27:6d:9d:7f:ec:59:d9:32:92:18:
7b:c9:c8:55:56:f7:00:3b:09:d4:9f:c2:dc:55:64:4f:8d:60:
00:83:1d:fc:20:ec:e0:0a:9b:77:0b:94:cf:23:5c:76:1c:e9:
02:fd:67:20:5b:ba:82:21:c7:c6:c7:64:c5:07:3e:b9:9f:24:
a4:93:fe:70:af:3c:c1:16:62:c9:c0:7a:10:08:39:a6:54:d7:
63:41:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:29:02 2026 by rpki-client