Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/0KmL6ugVu_s2lCFhD_ucS5LEQac.roa
File: 0KmL6ugVu_s2lCFhD_ucS5LEQac.roa (raw, json)
Hash identifier: ebjMnj+HmBBRlcrIvqq7kyulxu1LH6vzgpeSwsSWuBc=
Subject key identifier: D0:A9:8B:EA:E8:15:BB:FB:36:94:21:61:0F:FB:9C:4B:92:C4:41:A7
Certificate issuer: /CN=2cd9983169f960a0ec411df174059bdcfbec8132
Certificate serial: 01A0567B8BBE64D6D2FFDD9AA9AF16413B2E
Authority key identifier: 2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/0KmL6ugVu_s2lCFhD_ucS5LEQac.roa
Signing time: Mon 31 Aug 2026 06:22:12 +0000
ROA not before: Mon 31 Aug 2026 06:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43160
IP address blocks: 5.158.80.0/21 maxlen: 21
5.158.80.0/24 maxlen: 24
5.158.81.0/24 maxlen: 24
5.158.82.0/24 maxlen: 24
5.158.83.0/24 maxlen: 24
5.158.84.0/24 maxlen: 24
5.158.85.0/24 maxlen: 24
5.158.86.0/24 maxlen: 24
37.235.32.0/21 maxlen: 21
37.235.32.0/24 maxlen: 24
37.235.33.0/24 maxlen: 24
37.235.34.0/24 maxlen: 24
37.235.35.0/24 maxlen: 24
37.235.36.0/24 maxlen: 24
37.235.37.0/24 maxlen: 24
37.235.38.0/24 maxlen: 24
37.235.39.0/24 maxlen: 24
149.62.176.0/21 maxlen: 21
149.62.176.0/24 maxlen: 24
149.62.177.0/24 maxlen: 24
149.62.178.0/24 maxlen: 24
149.62.179.0/24 maxlen: 24
149.62.180.0/24 maxlen: 24
149.62.181.0/24 maxlen: 24
149.62.182.0/24 maxlen: 24
149.62.183.0/24 maxlen: 24
2a01:b5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:7b:8b:be:64:d6:d2:ff:dd:9a:a9:af:16:41:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9983169f960a0ec411df174059bdcfbec8132
Validity
Not Before: Aug 31 06:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0a98beae815bbfb369421610ffb9c4b92c441a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:4b:aa:57:9f:2b:49:e8:c8:99:7f:cc:1c:
15:2a:6c:46:39:38:42:82:06:44:eb:79:2a:73:eb:
ee:92:16:09:4b:e0:83:66:6a:d8:32:3b:9c:35:0e:
8a:39:3b:42:34:4a:f1:63:12:27:f4:dd:83:4a:03:
9a:c3:f6:5d:13:5d:1c:55:a7:37:41:8c:08:65:d8:
d1:e3:2f:85:41:3b:8c:a4:c5:d9:84:e3:c3:5e:ab:
3b:1c:f1:3b:8b:86:3f:c5:c5:45:d1:b0:a6:2f:76:
80:90:8e:36:8c:77:82:97:e0:0b:e6:66:87:f9:ac:
37:e8:59:74:37:d2:15:08:b0:34:79:1a:f0:87:e1:
de:24:2b:fb:2b:ee:1c:50:c5:c2:46:5e:33:e8:76:
35:4c:d4:e5:02:a0:f4:3f:3c:8a:63:21:81:a2:c0:
93:6b:c0:2f:26:26:54:fd:f5:e5:07:72:01:45:6a:
17:c1:5d:04:fb:c4:cb:59:22:c6:ab:e1:d8:e8:ab:
94:2a:17:94:51:78:0d:21:76:9b:29:5c:32:69:85:
e4:09:dd:f7:0b:af:8d:8a:ff:2d:31:8a:5b:21:74:
eb:ab:67:cf:63:cd:6e:36:75:f6:88:d1:39:0e:be:
2c:46:8a:b4:03:3d:81:72:d3:b9:09:ae:c4:fe:1d:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A9:8B:EA:E8:15:BB:FB:36:94:21:61:0F:FB:9C:4B:92:C4:41:A7
X509v3 Authority Key Identifier:
keyid:2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/0KmL6ugVu_s2lCFhD_ucS5LEQac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/21
37.235.32.0/21
149.62.176.0/21
IPv6:
2a01:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:a2:d0:04:14:d6:00:9c:e5:82:09:b3:dd:5a:9e:f2:d6:35:
70:ad:37:87:dd:fa:e2:76:71:b0:66:ad:e9:82:8b:a1:6d:1a:
59:d2:93:5a:1b:bd:cf:99:4f:5f:b5:23:87:d0:67:74:37:21:
e0:bb:03:78:b1:59:0e:c6:12:c3:98:29:0b:94:f2:b2:f1:83:
8d:f5:8f:b9:71:d8:ef:ba:e1:06:62:ec:6d:2d:27:8a:e6:f4:
b8:bb:6e:77:b4:41:0d:16:c1:82:2c:c2:9a:ad:23:31:b6:9c:
8a:8f:bf:e2:06:23:9e:2a:44:ef:0e:90:59:a5:f8:fa:17:73:
aa:28:e1:62:5f:0e:62:6d:f0:32:1c:ad:9d:c3:e4:c0:36:89:
a2:03:6c:0c:ba:65:38:84:75:c7:58:d6:27:2f:f9:9e:e0:d6:
13:a3:45:81:08:7b:02:f3:dd:32:35:45:fc:9b:65:52:45:11:
e3:8b:7b:9d:92:d6:4e:cf:a1:2a:3b:02:bf:2a:e5:32:1b:ad:
bd:28:7f:96:24:c4:4f:9e:2e:50:7f:f2:22:9e:4e:8b:59:6e:
13:92:7a:64:63:38:92:31:f9:cc:5d:7e:cf:ad:08:32:4c:73:
e5:19:f0:30:d1:ed:e9:aa:7b:e5:4f:b8:22:39:33:18:d4:a4:
0c:11:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:52:29 2026 by rpki-client