Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5aXtBFrEaFxc7NvgU5mY7H-wj0k.roa
File: 5aXtBFrEaFxc7NvgU5mY7H-wj0k.roa (raw, json)
Hash identifier: gUBkEzyP8iaytHOreWTExUHiIR5ZQICj5DGtFxRPQDE=
Subject key identifier: E5:A5:ED:04:5A:C4:68:5C:5C:EC:DB:E0:53:99:98:EC:7F:B0:8F:49
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019F02A502480D889E1913C4C1241BB1955A
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5aXtBFrEaFxc7NvgU5mY7H-wj0k.roa
Signing time: Fri 26 Jun 2026 06:36:36 +0000
ROA not before: Fri 26 Jun 2026 06:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212384
IP address blocks: 185.11.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:a5:02:48:0d:88:9e:19:13:c4:c1:24:1b:b1:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jun 26 06:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5a5ed045ac4685c5cecdbe0539998ec7fb08f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:7c:fa:33:34:c9:89:23:6b:36:96:39:2f:
59:29:97:04:d2:a4:77:62:c3:ec:92:16:7f:01:b2:
d4:5b:b4:3d:4b:2b:71:16:cd:d9:bd:38:07:28:1d:
2c:56:e0:19:51:f7:4d:97:cc:40:13:0c:6b:69:7d:
1f:74:01:48:a7:4b:68:e3:cf:d8:22:59:0c:9e:db:
1d:da:51:df:16:a8:16:df:3a:ef:e1:c1:d5:a8:8b:
a5:09:c9:03:93:f8:d3:60:47:57:96:e4:61:5a:1c:
78:8b:2b:55:e6:cf:e8:bd:de:a1:26:7f:5c:fa:19:
38:0e:9c:91:0d:b6:7e:cd:5e:c2:4f:97:d7:01:8c:
06:54:a5:fb:be:54:c5:e2:65:fe:7c:29:32:03:16:
08:ac:24:1b:87:7e:fc:43:b0:3a:8a:b9:a1:3d:4e:
ec:9b:b4:fe:7e:87:6b:d1:4f:59:e8:26:1d:43:b4:
e0:60:99:a8:c9:91:7d:ba:de:6a:f1:28:78:34:93:
f7:0d:35:49:9e:45:14:35:94:be:14:de:25:69:a5:
68:4f:bd:c6:5a:0d:02:11:65:fb:55:46:28:8c:36:
74:2c:84:86:2b:6c:04:10:c7:15:72:50:de:1d:2e:
06:45:81:92:8b:41:10:be:aa:d5:c1:dd:16:ad:6e:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A5:ED:04:5A:C4:68:5C:5C:EC:DB:E0:53:99:98:EC:7F:B0:8F:49
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5aXtBFrEaFxc7NvgU5mY7H-wj0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.140.0/23
Signature Algorithm: sha256WithRSAEncryption
13:2c:9e:6a:8e:a1:a2:4a:a1:2f:40:da:c8:e0:01:77:24:9b:
7e:56:3e:94:80:95:dc:20:a2:be:6d:4d:1f:a6:69:82:d3:74:
b7:f4:60:6b:c2:37:65:5e:84:f3:42:ca:5b:2b:bb:08:3b:02:
1f:ce:88:92:0c:76:22:b9:3f:19:e1:03:8c:6b:15:4e:a5:f3:
46:c9:a8:f6:8e:de:a0:55:72:c6:c8:40:6b:62:43:fc:48:e7:
00:01:f9:d3:1a:15:a6:b5:01:86:d5:af:2d:78:c0:bd:48:6f:
9b:8a:28:c9:5c:84:ed:70:a8:31:a1:47:0f:ec:e7:cc:cf:f7:
94:5b:94:4e:71:18:2d:04:1b:e3:8a:62:17:6a:ff:52:ab:6e:
b3:38:8c:f0:2f:37:c0:c4:bb:f8:2f:56:36:05:f6:27:fc:f6:
ba:3b:4a:ff:73:c8:ee:8f:79:d6:0e:75:4f:43:e0:b1:9a:0d:
a6:e2:e8:1b:e8:12:50:02:48:2b:43:26:1c:be:50:3b:d1:c3:
2d:6b:f0:87:e1:dc:d5:cc:68:93:83:46:5b:3e:e8:c1:2b:a9:
3d:f1:d1:fe:72:98:d1:6e:68:1f:20:bd:58:af:86:03:ab:41:
a9:d4:a0:dd:df:94:c3:67:40:6e:83:09:b8:00:60:ca:1d:5d:
1a:15:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 08:52:11 2026 by rpki-client