Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W6H0f_8cTMZwRNQ1cewRyj67nJ0.roa
File: W6H0f_8cTMZwRNQ1cewRyj67nJ0.roa (raw, json)
Hash identifier: jbItAPuseU6rWd/wrnK0gPn3iwa7z1cFmud+uo/l3S0=
Subject key identifier: 5B:A1:F4:7F:FF:1C:4C:C6:70:44:D4:35:71:EC:11:CA:3E:BB:9C:9D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A1683A9D2949CBDE616AB902CC713417C4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W6H0f_8cTMZwRNQ1cewRyj67nJ0.roa
Signing time: Fri 23 Oct 2026 10:07:14 +0000
ROA not before: Fri 23 Oct 2026 10:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218320
IP address blocks: 186.243.153.0/24 maxlen: 24
186.243.156.0/24 maxlen: 24
186.243.159.0/24 maxlen: 24
186.243.163.0/24 maxlen: 24
212.107.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:3a:9d:29:49:cb:de:61:6a:b9:02:cc:71:34:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 23 10:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ba1f47fff1c4cc67044d43571ec11ca3ebb9c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:33:47:87:22:77:9a:c7:33:13:72:1d:43:
69:af:b4:ca:1d:61:16:28:58:f4:68:c0:66:5c:ca:
14:4d:36:8f:58:4a:f3:58:48:79:5e:59:39:d3:f1:
42:7f:f2:79:12:3c:51:42:5a:c1:31:36:61:5c:cd:
ef:ed:a9:47:b9:e7:fe:75:66:c7:2d:54:fe:f6:4b:
6b:6b:02:b6:44:bb:d6:a2:2b:8f:1f:2c:ec:fc:54:
76:ec:e8:71:bb:82:6d:65:a4:7f:1d:1e:8d:51:a2:
de:9b:d8:32:14:a5:eb:d1:07:f3:72:16:a1:45:b8:
8d:24:59:3d:df:66:fc:97:9e:03:c0:f2:82:d6:2a:
f4:41:46:bf:95:56:0f:ec:d8:39:e9:fb:7a:28:aa:
9d:2f:96:d9:d8:d4:4f:80:92:00:60:b4:32:2e:93:
ac:54:43:46:ec:f0:8d:6c:63:3f:ab:7e:db:f0:e6:
7a:ab:d0:87:e1:61:9c:9e:47:ab:ac:b4:e7:df:35:
e1:88:f8:ad:e8:ec:15:54:eb:d7:70:f0:a9:da:e3:
19:00:e0:94:a3:07:19:93:0a:5d:b5:0b:33:4a:f5:
ed:18:bb:c5:af:a0:dc:be:15:cd:ef:33:7c:b1:b7:
b7:6d:cf:31:4b:82:fc:bf:1c:1b:b7:56:80:c0:04:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:F4:7F:FF:1C:4C:C6:70:44:D4:35:71:EC:11:CA:3E:BB:9C:9D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W6H0f_8cTMZwRNQ1cewRyj67nJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.243.153.0/24
186.243.156.0/24
186.243.159.0/24
186.243.163.0/24
212.107.27.0/24
Signature Algorithm: sha256WithRSAEncryption
94:28:fc:ae:4e:48:f8:d6:13:e5:87:56:5f:f4:35:09:0f:83:
44:27:4a:6b:f2:a1:7e:ce:c5:9a:a5:75:99:eb:42:a6:3d:28:
16:28:83:a1:3c:84:de:91:8f:60:01:00:cc:e8:db:a3:b9:44:
1a:21:3b:70:61:05:48:64:75:be:bf:d1:bb:c4:f1:13:3c:ad:
7d:83:f0:5a:ec:71:92:2a:db:64:df:16:4a:72:72:a2:72:4e:
36:33:bd:41:76:fb:d0:d4:b4:25:17:43:de:48:ac:98:66:df:
5f:e0:c1:4e:d9:99:57:66:7c:2e:c7:c4:37:84:4e:bb:c6:ce:
10:91:80:67:48:41:76:f8:a0:d7:d5:b5:4f:cc:ab:d9:30:c0:
7c:7a:c0:0f:c3:02:28:7f:b0:af:11:39:37:05:47:b3:6a:50:
ae:ea:80:9a:2f:c2:6f:a9:d9:41:84:69:ab:ae:98:f4:4f:db:
c4:a0:7c:cd:ca:a7:eb:26:53:a5:36:f6:d7:94:02:27:5f:60:
88:29:d8:2b:eb:11:9a:2b:1a:f8:a1:e3:64:15:2d:27:e2:76:
26:ef:3e:45:82:6a:f0:9b:8b:26:75:f2:50:cb:28:88:8e:6d:
db:eb:bd:be:49:96:db:05:5d:1a:4f:9e:bd:62:e6:46:d3:50:
bf:e8:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:31:17 2026 by rpki-client