Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/1-SAW0fLx0JJNGRuzhDMKZtqEteY.roa
File: 1-SAW0fLx0JJNGRuzhDMKZtqEteY.roa (raw, json)
Hash identifier: jO8Ef+RCD/UhQQ7ikxfxqKFy27taL2XIIQQ0zvMVVKo=
Subject key identifier: F9:20:16:D1:F2:F1:D0:92:4D:19:1B:B3:84:33:0A:66:DA:84:B5:E6
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 01A12F90753B4372687288898638CD6314DA
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/1-SAW0fLx0JJNGRuzhDMKZtqEteY.roa
Signing time: Mon 12 Oct 2026 10:02:38 +0000
ROA not before: Mon 12 Oct 2026 10:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57292
IP address blocks: 185.130.76.0/24 maxlen: 24
185.130.77.0/24 maxlen: 24
185.130.78.0/24 maxlen: 24
185.130.79.0/24 maxlen: 24
2a06:d940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:90:75:3b:43:72:68:72:88:89:86:38:cd:63:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Oct 12 10:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f92016d1f2f1d0924d191bb384330a66da84b5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:56:dc:16:0e:51:4e:fc:43:c8:53:ab:5e:
94:fa:0f:eb:74:9e:31:bb:7a:a0:8e:2b:33:6c:e9:
14:33:a9:6e:4a:66:95:3c:74:d0:08:83:db:54:7c:
11:56:5b:47:fa:e6:18:70:09:1d:43:e5:b4:26:1e:
70:b6:09:94:6f:2d:23:c8:e2:b9:b4:46:71:29:10:
1b:fb:f9:e8:4f:31:ef:86:68:49:0a:5f:9c:ad:fa:
16:ed:f3:97:c5:0f:5b:f8:16:44:a4:18:50:f2:b4:
84:cd:e9:f1:d0:78:1b:22:5d:86:2e:05:5d:80:ef:
6a:d6:6d:cc:a8:b5:1b:72:12:fb:d8:df:fb:d5:bc:
a6:f1:1f:cb:07:fd:27:e3:06:78:27:f6:31:f3:66:
d0:ba:49:12:7c:ae:d9:5c:d7:36:12:df:24:37:7f:
5e:25:06:e3:26:0d:0e:1c:67:86:3b:dc:23:46:68:
03:ff:8e:53:e0:79:01:cd:45:25:1c:cd:09:1f:f4:
ea:4b:bb:9a:44:23:33:f4:41:14:c4:1f:cb:6a:f0:
69:dd:01:20:d6:df:0c:00:83:f6:16:ce:e7:58:f9:
1c:03:ec:19:90:d2:fb:80:d7:cb:e6:c6:3e:df:c2:
2e:9c:77:31:21:a9:16:ab:56:cb:8c:85:28:7e:8c:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:16:D1:F2:F1:D0:92:4D:19:1B:B3:84:33:0A:66:DA:84:B5:E6
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/1-SAW0fLx0JJNGRuzhDMKZtqEteY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.76.0/22
IPv6:
2a06:d940::/29
Signature Algorithm: sha256WithRSAEncryption
ba:61:94:97:02:08:95:ef:8e:08:5f:b3:11:d0:2d:ba:85:80:
ff:6e:1d:30:bd:98:6b:eb:04:24:73:88:37:4a:c8:44:ed:3d:
69:21:f2:19:45:ad:10:f0:15:f3:c0:c9:79:94:d3:21:d3:90:
36:7d:05:29:5f:a7:25:8a:a3:e6:1b:3d:a9:f6:27:bf:9f:12:
25:68:9c:fa:95:de:e4:c6:c4:c7:84:e9:4e:1f:8a:ac:42:67:
22:b8:a0:f6:bf:4f:f6:2d:27:f4:c8:6a:94:99:de:ba:e8:2f:
67:86:6f:b4:b9:a9:c4:4c:40:9a:de:8d:d4:04:6c:dd:1f:15:
fc:d9:20:52:ed:1b:af:07:ec:d4:62:d2:de:a2:75:83:05:7c:
3a:86:8e:f6:91:0c:f1:9e:97:59:36:e8:3f:57:b1:01:48:42:
8d:17:99:34:3d:ed:67:7a:da:d5:e6:ee:11:df:96:6a:8d:2d:
e3:39:31:eb:a9:a9:1c:58:bd:ea:47:f3:42:d3:53:9b:b6:9c:
e8:07:99:35:c0:77:69:a6:83:7c:0b:46:dd:8e:4a:8e:dc:0e:
21:e0:07:ec:64:ca:1d:39:52:45:5b:8d:cf:de:70:57:7a:33:
6a:5e:da:0d:0c:fc:4f:e5:be:ca:cc:c6:1e:1a:3b:35:51:42:
ed:53:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:08:14 2026 by rpki-client