Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/rK1KNeU5MVb1MR7KpbyJYwkQmNY.roa
File: rK1KNeU5MVb1MR7KpbyJYwkQmNY.roa (raw, json)
Hash identifier: 8e9KbMZXh+uAmC6YlJYvX9QX087ddXHdkZd6WWbvfzw=
Subject key identifier: AC:AD:4A:35:E5:39:31:56:F5:31:1E:CA:A5:BC:89:63:09:10:98:D6
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019F330AF60D82B8E064BB3EF5335F491246
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/rK1KNeU5MVb1MR7KpbyJYwkQmNY.roa
Signing time: Sun 05 Jul 2026 16:09:44 +0000
ROA not before: Sun 05 Jul 2026 16:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 212.11.0.0/24 maxlen: 24
212.11.6.0/24 maxlen: 24
212.11.9.0/24 maxlen: 24
212.11.10.0/24 maxlen: 24
212.11.13.0/24 maxlen: 24
212.11.48.0/24 maxlen: 24
212.11.49.0/24 maxlen: 24
212.11.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:0a:f6:0d:82:b8:e0:64:bb:3e:f5:33:5f:49:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jul 5 16:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acad4a35e5393156f5311ecaa5bc8963091098d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:0b:69:af:40:e0:9b:28:7e:06:8a:7e:e5:
08:c2:9e:c1:74:b7:4d:e5:8e:de:13:2f:51:f8:56:
0b:e7:2f:80:1a:4e:6b:18:fc:29:bb:85:87:3d:f5:
f8:6e:c6:55:d6:b0:07:8d:8a:9c:ca:e7:15:e4:98:
c8:51:77:41:0c:29:19:f4:52:cf:80:82:0c:06:f4:
4f:4d:a4:a5:30:6f:02:3a:2f:58:dd:ea:c1:86:01:
e3:72:9e:08:48:f0:8b:d0:d6:bc:6e:b5:d5:42:9b:
8c:00:25:e6:60:ec:88:b0:7a:ef:5e:5a:28:b2:81:
37:8b:b5:bc:e8:b6:aa:69:8f:bc:f1:5a:e5:19:31:
4a:ca:bd:85:2a:96:4c:f2:c3:b8:aa:37:37:3a:cb:
81:95:5a:0e:c2:f8:56:20:3b:88:c9:17:54:36:ad:
9c:85:6f:ce:1c:05:cb:8a:b0:f7:e6:0a:03:6d:a4:
4e:73:ab:3f:08:72:dc:e1:d5:0d:71:2d:b8:d2:9b:
1a:01:44:99:71:b9:5e:0b:6c:99:a6:e1:ea:38:42:
d1:29:35:74:1e:08:8d:b6:ee:d9:8c:a0:48:51:dd:
8e:6d:a6:b7:41:e4:36:cd:68:a4:c9:91:87:d5:48:
cb:ac:58:78:5b:ac:16:fe:a4:6d:34:c8:cd:02:26:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:4A:35:E5:39:31:56:F5:31:1E:CA:A5:BC:89:63:09:10:98:D6
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/rK1KNeU5MVb1MR7KpbyJYwkQmNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.0.0/24
212.11.6.0/24
212.11.9.0-212.11.10.255
212.11.13.0/24
212.11.48.0/23
212.11.52.0/24
Signature Algorithm: sha256WithRSAEncryption
37:14:bd:86:b7:bf:45:a7:7f:ab:51:ec:2b:d0:06:8e:08:6a:
e1:c1:50:9d:d0:8a:12:7e:2b:76:86:e6:3b:41:00:a6:a5:d7:
81:38:07:94:c6:a1:c5:71:10:81:79:a2:5b:87:37:c9:9f:78:
76:1e:56:92:26:65:8f:41:c5:d4:fa:ec:8e:c6:49:e6:1a:44:
1d:53:fd:b1:6a:ef:65:9f:06:3a:8c:26:f8:75:49:c8:81:77:
bd:49:e0:6f:24:6f:6c:6d:95:96:52:ba:85:70:c7:d8:22:dd:
92:53:f3:19:e4:14:6c:b6:6d:77:1c:53:50:cb:8b:b1:23:d5:
9e:cf:fb:e5:dc:2f:d1:69:93:1a:4b:bf:09:d5:3e:06:4c:e6:
90:ca:3c:d0:72:97:a7:f3:57:35:a8:08:19:94:a9:48:cf:aa:
23:17:47:69:61:d5:3e:3b:e3:cb:85:75:15:d7:5c:58:ce:25:
fd:ed:38:10:60:8e:11:36:92:f5:73:9c:d1:4a:fb:ad:8b:9c:
ae:5a:e1:b4:10:1b:4c:93:c4:90:37:34:ba:a8:9a:79:d3:ce:
d2:f7:0e:78:a9:97:7b:a2:4c:ac:c8:71:5b:3b:50:45:bd:b0:
a2:ef:00:d1:61:af:04:46:2e:fc:25:a1:ae:3a:ef:0f:c6:57:
66:15:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:30 2026 by rpki-client