Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/5C8k3ddiqLbGsXqe45o7Id7HOO0.roa
File: 5C8k3ddiqLbGsXqe45o7Id7HOO0.roa (raw, json)
Hash identifier: pZs4d4kJNeixdF+Iw81m1vsrRYVb82Jb2MwKueXsQCs=
Subject key identifier: E4:2F:24:DD:D7:62:A8:B6:C6:B1:7A:9E:E3:9A:3B:21:DE:C7:38:ED
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019FAEDEA441D473642BE27617137F41C575
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/5C8k3ddiqLbGsXqe45o7Id7HOO0.roa
Signing time: Wed 29 Jul 2026 17:14:14 +0000
ROA not before: Wed 29 Jul 2026 17:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.7.240.0/22 maxlen: 22
185.81.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:de:a4:41:d4:73:64:2b:e2:76:17:13:7f:41:c5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jul 29 17:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e42f24ddd762a8b6c6b17a9ee39a3b21dec738ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:58:ff:63:7d:37:a8:f1:5a:ca:d4:f9:a2:
44:97:86:6e:f5:c1:5e:49:20:69:31:0a:70:62:f2:
45:e0:fc:df:19:27:1b:a0:9b:62:b3:e5:c3:e5:2f:
05:c3:fe:79:04:70:2c:52:22:0b:f5:71:df:d0:11:
ce:15:b6:14:37:6d:17:00:be:73:1a:42:86:88:bb:
86:20:da:e7:47:23:dd:fa:4c:bc:4c:a8:1f:11:b9:
22:6f:09:7a:fe:f2:d6:51:19:ec:fb:e7:7c:ec:f7:
0d:3e:5f:57:3c:16:c4:e7:41:88:8f:f8:35:12:2c:
e6:fc:b8:06:ff:c1:fc:39:e1:21:26:4e:18:62:a6:
b5:b4:7f:a2:37:3a:5c:7b:f6:06:a1:8d:3d:e4:89:
ad:c4:12:49:02:61:32:36:cc:d5:aa:ab:1b:00:c9:
28:86:f1:52:83:09:b2:46:e9:c5:68:d8:13:64:0d:
03:39:0a:c3:a7:40:84:ac:ac:1f:f5:25:f8:eb:5c:
1f:27:f8:ad:ab:da:99:43:60:5a:51:c6:0f:46:3d:
f6:e1:e5:64:3b:d1:32:c2:0c:d2:9d:a8:5a:fa:0f:
c3:ec:6e:9b:e3:0a:67:10:4e:12:ad:ac:ce:26:93:
a6:79:65:c9:76:59:b6:28:7c:62:db:f0:14:43:3a:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:24:DD:D7:62:A8:B6:C6:B1:7A:9E:E3:9A:3B:21:DE:C7:38:ED
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/5C8k3ddiqLbGsXqe45o7Id7HOO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.240.0/22
185.81.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:5d:02:06:a9:b9:39:6d:4e:94:62:8a:11:2c:97:b1:1e:4f:
12:00:ef:0d:e1:95:42:9c:56:11:d6:9a:93:6a:1f:45:a7:7f:
d8:da:08:88:74:d6:33:9e:8a:24:f9:02:a5:1f:7e:31:03:c8:
25:df:bd:4f:12:e8:bf:21:74:78:81:c1:7d:2f:23:02:9e:76:
e2:23:b1:1b:60:f5:fc:8d:ff:b3:a6:cc:8d:85:4f:0f:ad:6f:
3d:8e:b9:11:da:9b:5c:48:3b:fe:ab:b3:32:28:0d:cf:00:1f:
02:ad:02:a0:56:0a:00:4e:3c:97:87:2f:18:1b:80:7a:90:03:
d6:04:a5:e7:10:cc:65:c8:82:39:a2:67:e5:8e:9f:98:c1:f2:
a7:95:3c:cd:0f:c7:e2:2d:07:f3:db:1d:ad:f3:19:f8:39:f7:
07:c7:ee:06:ce:ff:75:d5:29:2b:13:eb:49:89:a2:bf:bb:1d:
c0:b8:6a:4e:47:71:1e:dc:ad:53:dd:a4:eb:12:47:95:72:d1:
bc:07:77:22:00:b8:b8:a4:44:f6:4e:17:c0:a2:18:36:1e:8e:
aa:68:e3:98:f8:8d:b6:08:1d:24:40:97:f8:a5:a0:61:1f:3f:
90:fd:07:ea:16:29:17:24:de:9e:a1:b4:83:5f:b5:7e:e8:d7:
57:f8:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 20:00:02 2026 by rpki-client