Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/CMuSXbvD2aYRJ6zwBOQsPRlnmTc.roa
File: CMuSXbvD2aYRJ6zwBOQsPRlnmTc.roa (raw, json)
Hash identifier: vDRk5caAM6aszxzrEq4dWz7mNrYJ7he2a5tnb63hmZc=
Subject key identifier: 08:CB:92:5D:BB:C3:D9:A6:11:27:AC:F0:04:E4:2C:3D:19:67:99:37
Certificate issuer: /CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Certificate serial: 01A11BE665A365593B54ECFFB9E16A985EBE
Authority key identifier: 8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/CMuSXbvD2aYRJ6zwBOQsPRlnmTc.roa
Signing time: Thu 08 Oct 2026 14:24:06 +0000
ROA not before: Thu 08 Oct 2026 14:24:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211582
IP address blocks: 5.45.144.0/22 maxlen: 22
80.243.224.0/22 maxlen: 22
185.214.188.0/22 maxlen: 22
212.60.24.0/21 maxlen: 21
2a10:b040:1::/48 maxlen: 48
2a10:b040:2::/48 maxlen: 48
2a10:b040:3::/48 maxlen: 48
2a10:b040:4::/48 maxlen: 48
2a10:b040:5::/48 maxlen: 48
2a10:b040:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:e6:65:a3:65:59:3b:54:ec:ff:b9:e1:6a:98:5e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Validity
Not Before: Oct 8 14:24:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08cb925dbbc3d9a61127acf004e42c3d19679937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:db:e5:8b:c3:dd:a7:60:f4:f6:21:50:3b:
f8:94:14:fb:f7:8f:ec:e2:2f:10:19:e7:c1:06:d9:
1f:cd:0f:22:85:c4:73:69:96:1d:b0:b3:b0:7c:7f:
38:e0:32:bf:54:de:79:d9:45:df:37:00:71:09:ef:
e7:fe:cf:c8:9c:a0:81:df:32:a3:13:db:33:08:26:
b4:8b:bd:d8:e1:21:f7:05:d2:ca:0e:10:ad:f7:ef:
cd:9c:fb:87:cd:02:71:1d:77:d1:3a:1f:76:1c:95:
98:aa:5b:d8:58:ef:9b:a5:ac:7d:1f:37:30:79:77:
38:c7:29:c3:53:52:50:91:00:8d:c6:1e:7f:fc:b7:
ed:49:9f:ff:75:2c:a8:ba:d8:df:c6:b5:ee:20:5b:
ac:d3:9c:d1:b7:9a:d2:ff:b5:8f:2f:e9:07:ce:8a:
a6:7f:0f:1a:5f:a6:0b:97:b8:d7:d1:5f:dc:db:2d:
33:e0:4a:7f:e1:62:9c:a0:e0:38:f4:b6:bf:f4:3a:
29:42:e7:c5:09:c3:b4:5e:21:db:36:6f:c0:2e:33:
28:cc:4f:7f:46:95:a1:39:06:bc:0d:7b:c0:79:fd:
17:8e:10:fe:1a:49:6e:cd:a1:2b:c5:3e:c7:ac:77:
44:05:c6:09:7d:da:56:a8:b1:17:61:19:9c:46:eb:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:92:5D:BB:C3:D9:A6:11:27:AC:F0:04:E4:2C:3D:19:67:99:37
X509v3 Authority Key Identifier:
keyid:8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/CMuSXbvD2aYRJ6zwBOQsPRlnmTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.144.0/22
80.243.224.0/22
185.214.188.0/22
212.60.24.0/21
IPv6:
2a10:b040:1::-2a10:b040:5:ffff:ffff:ffff:ffff:ffff
2a10:b040:100::/48
Signature Algorithm: sha256WithRSAEncryption
75:91:84:57:d9:ac:a3:42:71:ba:a3:d4:12:8c:12:94:0d:cb:
47:62:12:a4:8f:ed:f4:1f:37:f5:4f:72:c8:96:04:25:3f:37:
00:18:39:a0:85:ad:a4:b2:e8:fb:4d:95:68:ca:28:68:48:c3:
66:7e:14:fc:17:b8:dd:26:f7:af:75:33:0b:17:5a:83:e7:8c:
9d:65:4d:72:a3:b1:be:49:95:66:ec:42:65:64:00:9b:78:53:
9c:4f:1d:7c:b5:e3:3b:ee:ab:e1:a9:bc:ed:c7:29:34:e5:53:
e8:4f:dd:45:9f:50:d0:e4:17:ac:c8:0d:19:36:81:e7:6d:b2:
51:57:98:8c:79:48:db:87:e9:8f:ac:d1:7f:58:36:60:41:35:
b5:b3:a0:a4:de:a7:b8:d3:ec:05:5b:df:4a:8b:2c:f0:b9:75:
1c:cc:53:0e:0b:4b:26:7c:a8:de:58:35:25:4b:ef:0f:27:2f:
db:57:3f:80:ae:e2:61:aa:ef:98:07:1c:ab:ec:c3:d8:06:68:
19:6d:d8:df:dd:07:f8:f5:86:c8:7c:ee:51:35:de:d8:84:44:
44:9b:78:ba:ad:bb:2b:63:f5:10:22:95:30:4c:78:ed:99:5e:
28:ac:2e:af:8b:fa:ff:23:57:0e:87:70:fd:3c:a3:bf:1a:1d:
b0:54:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:59 2026 by rpki-client