Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/PA5PD0MmCB4qLZvXEmvN53XUL-0.roa
File: PA5PD0MmCB4qLZvXEmvN53XUL-0.roa (raw, json)
Hash identifier: LV3vT4gkKEqWgFvta2uzWjy12RbNWUHZLTnggzPVxi0=
Subject key identifier: 3C:0E:4F:0F:43:26:08:1E:2A:2D:9B:D7:12:6B:CD:E7:75:D4:2F:ED
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019CE794BA479575D2F9C9E871FBD9E2C5C2
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/PA5PD0MmCB4qLZvXEmvN53XUL-0.roa
Signing time: Fri 13 Mar 2026 14:23:29 +0000
ROA not before: Fri 13 Mar 2026 14:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 212.180.3.0/24 maxlen: 24
212.180.12.0/22 maxlen: 22
212.180.22.0/24 maxlen: 24
212.180.44.0/24 maxlen: 24
212.180.46.0/23 maxlen: 23
212.180.84.0/24 maxlen: 24
212.180.94.0/24 maxlen: 24
212.180.96.0/22 maxlen: 22
212.180.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:94:ba:47:95:75:d2:f9:c9:e8:71:fb:d9:e2:c5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Mar 13 14:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c0e4f0f4326081e2a2d9bd7126bcde775d42fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:34:1f:2b:aa:99:31:8d:62:e9:09:7c:64:
2e:82:94:e1:e7:22:55:28:bf:c2:dc:72:0d:73:29:
85:37:d3:5e:2d:ae:e4:bd:f3:dc:0a:93:d8:bd:5b:
b4:3c:37:34:30:ee:9a:7e:de:a7:60:32:1b:42:c8:
91:df:ef:c9:bd:3e:99:cc:2f:0d:4c:18:f9:b5:82:
30:84:54:71:22:2e:1f:a1:d8:21:d7:21:40:10:39:
8f:3f:88:de:c2:86:04:bb:79:43:ab:42:48:1a:96:
f3:bf:7e:a5:0b:63:01:b5:d7:25:d1:c4:b3:1c:ab:
a3:7c:88:ea:96:ee:88:a9:d4:d8:a4:d9:93:9e:68:
4e:16:07:63:06:24:f3:86:96:e1:0b:c0:e3:9e:8a:
66:6f:99:9a:ce:ee:f7:38:16:23:7e:78:f5:73:13:
df:d5:a2:35:1d:d5:21:ca:17:ef:f9:df:0e:a6:68:
7d:40:87:9f:60:17:4b:f6:77:e9:ee:9c:10:cd:90:
5c:4d:37:60:e9:51:cc:8c:15:86:93:b9:a9:a0:85:
c3:90:68:7e:80:3f:7f:10:ec:d8:70:9a:b5:05:c8:
2c:30:e6:68:d2:c8:0a:75:94:18:4f:9b:1c:42:c9:
6c:a3:ea:6c:0c:e2:8e:30:31:5f:b6:57:88:95:a0:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:4F:0F:43:26:08:1E:2A:2D:9B:D7:12:6B:CD:E7:75:D4:2F:ED
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/PA5PD0MmCB4qLZvXEmvN53XUL-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.3.0/24
212.180.12.0/22
212.180.22.0/24
212.180.44.0/24
212.180.46.0/23
212.180.84.0/24
212.180.94.0/24
212.180.96.0/22
212.180.101.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c2:1a:31:5b:de:cd:19:53:18:63:22:09:26:97:d3:96:60:
86:45:a3:90:02:26:34:5c:d6:c0:f3:b7:58:cc:c3:10:dc:14:
44:89:bc:ca:9c:91:90:f9:da:d9:39:97:52:79:e1:19:11:fa:
74:30:e5:44:68:cb:f2:bb:f9:15:60:be:cb:59:9c:07:59:3c:
a5:d1:78:19:ef:31:25:07:7f:e6:fd:99:e0:a5:3c:64:57:60:
91:e2:07:cf:fb:a1:1a:4c:df:6f:ed:ea:b7:73:87:75:e8:a4:
37:69:df:9e:b1:ae:b2:66:7b:7e:37:1d:b5:b9:3e:df:6c:11:
cf:bc:0d:21:d9:b4:82:f3:15:b6:5a:8d:89:f6:e8:4a:5e:f2:
ed:3e:aa:d3:41:74:9d:27:c7:b3:47:8f:81:88:3a:3d:16:57:
c7:ec:ad:a8:99:f1:f0:f0:8e:37:d5:25:c2:49:34:44:c8:7d:
3e:c1:85:52:34:f2:e3:1f:b2:fd:f4:ae:12:e5:15:5e:46:2e:
56:ef:bd:45:2d:0c:e5:b8:fd:b1:59:9e:88:38:ec:19:4c:2c:
db:a7:2c:78:81:b6:69:e5:f2:86:b3:9d:05:e5:94:a5:af:59:
44:b7:fd:40:b3:a5:e0:c4:7c:53:47:d0:1a:60:f3:4b:d1:16:
4c:50:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 12:17:59 2026 by rpki-client