Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12Red_sfSfnbkNey_7PQjKzNaHc.roa
File: 12Red_sfSfnbkNey_7PQjKzNaHc.roa (raw, json)
Hash identifier: 8HQOX9y6dvqCN/5eave6u/+ONZsq11uy0+LG1olcQTU=
Subject key identifier: D7:64:5E:77:FB:1F:49:F9:DB:90:D7:B2:FF:B3:D0:8C:AC:CD:68:77
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A1B2C04A3A758864722203DF838A66F1DA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12Red_sfSfnbkNey_7PQjKzNaHc.roa
Signing time: Fri 06 Nov 2026 21:25:08 +0000
ROA not before: Fri 06 Nov 2026 21:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 5.172.181.0/24 maxlen: 24
37.77.146.0/24 maxlen: 24
193.142.242.0/24 maxlen: 24
193.142.249.0/24 maxlen: 24
193.192.1.0/24 maxlen: 24
193.192.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:c0:4a:3a:75:88:64:72:22:03:df:83:8a:66:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 6 21:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7645e77fb1f49f9db90d7b2ffb3d08caccd6877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:61:1d:93:c5:0d:c2:bb:d2:ca:4c:c5:3a:
c6:b1:29:bb:3b:f4:5f:a8:94:b4:7f:ea:ab:7e:83:
e2:ba:ee:99:2a:0e:86:99:d0:9a:66:a6:91:34:6c:
5b:33:18:c4:82:ba:52:04:e3:2b:42:d1:95:64:74:
26:85:3b:ce:57:54:da:4f:f5:02:53:bd:39:3a:bd:
c7:6c:46:e9:5d:cf:59:67:cb:dd:2c:56:03:22:e0:
15:5b:8c:83:29:ff:1c:57:6c:0b:71:5c:b9:0f:ad:
e0:d7:12:23:d9:97:e6:94:da:1f:5e:93:02:a0:12:
d1:a8:f4:15:c1:ad:88:99:17:fb:f3:0d:26:6f:e4:
c1:2a:30:77:95:70:74:cd:5c:0c:c3:bf:f1:97:5b:
c8:36:e7:07:31:95:59:0d:83:6d:4e:66:45:04:61:
b0:2a:a4:54:ff:0b:b3:a4:b1:48:5a:1e:7c:cc:50:
92:9d:c8:ed:c5:44:4e:86:7c:a3:b2:e2:8d:2e:78:
c7:b5:11:b5:a7:e4:64:e9:dd:4e:09:30:38:b5:1d:
b3:9b:a7:98:aa:26:16:bf:e8:22:51:e4:05:08:80:
93:1b:d1:01:8c:88:7e:28:97:e0:94:89:72:de:cf:
b1:bd:f4:42:b3:58:7e:63:a7:48:7b:79:6d:b0:ea:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:5E:77:FB:1F:49:F9:DB:90:D7:B2:FF:B3:D0:8C:AC:CD:68:77
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12Red_sfSfnbkNey_7PQjKzNaHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.181.0/24
37.77.146.0/24
193.142.242.0/24
193.142.249.0/24
193.192.1.0/24
193.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a3:f6:d4:4c:94:96:a9:96:fe:13:67:da:66:7f:99:8e:bb:
94:95:27:8d:a5:e0:b7:e0:a6:4a:2a:a7:4d:de:a2:95:2f:45:
2e:1a:3a:89:58:58:50:4d:ba:12:15:e4:ad:dd:b9:90:fa:1f:
00:33:19:8f:72:22:54:ea:62:40:54:bc:73:46:24:c3:92:86:
ad:96:b1:c2:84:52:2b:9f:71:53:d3:e4:83:3d:23:4e:03:56:
e5:be:ea:46:be:58:2c:58:37:0c:df:5f:c0:fb:c0:84:37:c7:
bc:39:b4:ca:32:99:5f:f0:7a:76:4c:87:72:18:9b:ec:67:1e:
6f:4f:d8:be:2d:e4:2d:2f:96:f8:0f:f2:80:35:22:c2:a5:ad:
c2:65:a7:a9:ac:94:5c:cd:24:6f:36:67:d7:31:1e:04:0b:83:
63:fe:55:92:00:03:cc:25:f1:4a:c0:91:e8:a0:d0:f5:68:85:
f2:34:c7:b4:63:ff:23:65:43:a6:7f:9f:49:f2:c7:07:56:e7:
1d:bc:98:cc:63:d4:bd:79:4c:6b:99:1d:4c:2b:67:27:48:ca:
af:79:0b:0d:31:61:eb:ae:50:95:47:54:3f:bf:83:88:b9:bf:
13:35:d0:16:86:db:b6:67:4b:88:75:47:da:ad:87:a1:2d:18:
b0:89:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:22:01 2026 by rpki-client