Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/m5gb-w9518gstz9yjRIAUkSRK_c.roa
File: m5gb-w9518gstz9yjRIAUkSRK_c.roa (raw, json)
Hash identifier: IVTdJ1T0IcnTvVeugDeWJR+5AmWQzeWUIlOuu0Rzbp8=
Subject key identifier: 9B:98:1B:FB:0F:79:D7:C8:2C:B7:3F:72:8D:12:00:52:44:91:2B:F7
Certificate issuer: /CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Certificate serial: 019F236861C1BB936CE10CB043F7596404FF
Authority key identifier: 44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/m5gb-w9518gstz9yjRIAUkSRK_c.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200509
IP address blocks: 185.66.56.0/22 maxlen: 22
185.66.56.0/24 maxlen: 24
185.66.57.0/24 maxlen: 24
185.66.58.0/24 maxlen: 24
185.66.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:61:c1:bb:93:6c:e1:0c:b0:43:f7:59:64:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b981bfb0f79d7c82cb73f728d12005244912bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:0e:a4:bb:e2:8c:52:a6:20:f8:64:ef:e2:
ff:81:b9:c6:cf:4a:62:71:ca:0e:70:52:1c:e2:ba:
c7:dd:1a:27:ae:03:ed:a4:1c:79:55:5e:9e:2d:5d:
3b:13:7c:9d:63:bb:a2:cb:40:6f:46:7c:cc:19:30:
b0:6b:b8:25:a9:cd:b1:5d:77:ee:05:f1:fb:5e:f2:
8d:a7:46:06:d0:97:b1:11:fc:10:4f:af:14:d4:1c:
64:91:99:1d:a2:cb:a1:3c:72:91:e3:e7:42:d9:bb:
b3:f3:8e:35:34:55:4f:0e:0a:53:44:74:07:53:1b:
bf:4a:ab:ba:11:cf:c6:c1:7a:a2:db:42:d9:f8:b5:
1e:5e:72:e5:f1:d4:96:8d:58:6a:ec:e7:40:06:e0:
25:fd:74:83:ad:c4:43:c7:42:29:59:b1:26:b9:f2:
8c:74:e1:bd:f2:53:15:13:c2:31:3a:da:c6:a8:8d:
c7:02:a1:5d:1b:5f:c1:17:a1:d7:7d:90:21:43:3d:
f3:7b:81:76:0f:8f:25:a5:f0:6f:dc:c7:45:b8:0a:
ea:a1:fd:94:ae:41:cd:d1:d4:e0:ff:c7:52:e3:6c:
45:dd:53:3f:95:24:4a:74:47:51:55:95:bd:79:f4:
82:ab:90:48:a2:69:77:5c:e0:10:a5:35:a0:d5:53:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:1B:FB:0F:79:D7:C8:2C:B7:3F:72:8D:12:00:52:44:91:2B:F7
X509v3 Authority Key Identifier:
keyid:44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/m5gb-w9518gstz9yjRIAUkSRK_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
01:5c:26:59:24:72:a9:61:97:41:13:21:4c:ba:8c:d6:fd:32:
77:f6:ad:cd:ce:d4:f1:fd:81:ff:32:2a:22:7c:c9:cc:44:e1:
5e:19:17:c9:3e:38:3d:dd:32:f2:ac:e6:c0:c1:9f:bc:5b:48:
34:15:18:2f:b5:32:8e:8a:33:d8:85:ba:ef:af:e2:9a:2c:e6:
5f:62:55:5e:86:64:17:7a:bd:2e:bb:65:93:c7:d3:71:18:6d:
ac:e7:4d:24:16:ad:e6:33:b2:13:35:1d:ff:fd:42:4d:1f:6f:
ed:f9:f7:61:c4:a9:7e:7c:81:21:b0:9c:7a:72:e0:7d:2c:69:
1e:78:f6:b4:8d:04:a3:2e:45:f9:10:62:e2:72:00:f7:d3:3d:
27:6e:e2:70:81:ee:ed:05:39:fd:0c:ee:89:7c:5b:0d:6a:78:
fd:4b:52:87:30:a8:aa:90:df:de:66:ed:7c:55:d9:0e:56:7c:
7e:6f:3b:f5:c0:08:63:43:42:f2:f5:75:6c:15:55:e2:05:fd:
ed:4f:37:3b:11:73:9b:b6:35:7b:50:ea:48:b7:46:7f:24:15:
1b:63:0b:f0:62:60:e7:02:b0:72:a5:8f:88:b9:df:41:3a:99:
c1:c9:35:cb:16:6f:4d:ad:cd:4d:64:69:9d:92:32:55:55:27:
fb:56:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:23 2026 by rpki-client