Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/5gRMtqI57AgUFx0bmKKvNKtlpmQ.roa
File: 5gRMtqI57AgUFx0bmKKvNKtlpmQ.roa (raw, json)
Hash identifier: nWda5ucuuixosYxBuhMOBCgPLt0+jFaQKtwPZ3ntpys=
Subject key identifier: E6:04:4C:B6:A2:39:EC:08:14:17:1D:1B:98:A2:AF:34:AB:65:A6:64
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A025EF7F246C43168A6C56EA2628E7C4DD
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/5gRMtqI57AgUFx0bmKKvNKtlpmQ.roa
Signing time: Fri 21 Aug 2026 20:07:27 +0000
ROA not before: Fri 21 Aug 2026 20:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.140.160.0/24 maxlen: 32
185.140.162.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:ef:7f:24:6c:43:16:8a:6c:56:ea:26:28:e7:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Aug 21 20:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6044cb6a239ec0814171d1b98a2af34ab65a664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:02:2a:b2:27:f8:9c:70:ad:05:ab:3d:f9:
bb:38:92:b6:42:62:1b:22:7e:46:61:dd:13:01:91:
99:10:ab:7e:e4:32:56:e5:fe:bc:4d:59:d9:05:da:
0c:33:70:bf:5a:68:ed:c5:4a:ec:90:45:84:24:e8:
88:3a:ff:f8:de:fc:2a:59:ba:0f:40:a2:25:3f:f5:
57:9e:a4:33:72:3a:69:d8:1b:62:de:9b:81:ec:09:
ee:18:c9:04:6c:0c:fd:66:3e:a9:e2:be:c1:fb:b7:
3d:39:51:8d:7b:d8:42:c1:c0:c1:b6:8e:35:f4:f0:
2b:2b:14:b1:81:ab:1a:4a:85:70:b5:07:ba:05:e3:
41:e7:68:55:75:56:f2:83:0f:b4:a2:ac:f6:df:5b:
00:87:10:55:f4:20:2c:ed:db:19:58:ed:35:4b:82:
39:91:11:63:7b:df:9b:ae:89:22:f0:7a:67:3b:e3:
26:08:57:8b:2f:b7:d2:bb:5d:8d:64:7a:fd:45:b3:
6c:de:1b:04:5d:a8:14:91:49:fa:68:1f:76:d0:bf:
3a:36:3e:42:77:5c:08:df:fb:fb:9e:a3:19:86:2c:
9a:b7:87:73:8d:7e:88:20:8e:c1:4c:33:f2:fa:c4:
28:1f:be:fa:da:b7:ab:e6:20:ff:61:a6:a8:70:07:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:04:4C:B6:A2:39:EC:08:14:17:1D:1B:98:A2:AF:34:AB:65:A6:64
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/5gRMtqI57AgUFx0bmKKvNKtlpmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.160.0/24
185.140.162.0/24
Signature Algorithm: sha256WithRSAEncryption
02:56:ef:4d:ec:0a:e8:bc:02:6b:3b:97:2b:eb:d3:69:2a:59:
c3:9d:bc:31:be:f1:ed:c3:2d:ac:12:08:89:4f:08:21:67:18:
40:4f:8e:5a:32:0a:18:cb:78:1b:36:7d:14:71:12:78:e3:9c:
38:34:54:c1:db:5f:8f:91:25:aa:39:4e:de:92:70:c5:48:b7:
08:c8:62:7a:a0:73:3c:57:45:d9:52:fa:b4:5d:c8:81:b9:58:
37:5f:b1:f1:28:1a:58:9e:0a:22:39:ee:29:1f:71:00:af:38:
85:34:6a:54:bf:46:97:13:30:49:e7:9a:e9:51:de:ef:c1:38:
f1:70:14:63:e5:54:c3:bd:7e:74:4e:2b:3c:6d:8c:16:8a:02:
bd:0f:0e:cc:0d:bf:c4:3b:c4:b6:a9:50:a2:dc:63:7b:76:ce:
07:14:1a:2a:17:9f:13:0c:1c:0a:d7:6f:ae:cf:24:4f:a9:1f:
3c:4f:e2:b0:e5:39:13:13:74:76:36:81:3b:ec:9a:56:48:7d:
3a:d4:e3:97:1a:d3:90:0a:24:2b:4b:79:29:16:e7:d7:b1:f1:
67:10:75:56:95:25:8c:ff:a7:e7:7c:43:41:32:e6:af:ca:cc:
0b:e9:15:92:33:8c:62:af:93:46:c0:2f:e9:31:a4:96:ce:43:
3f:3a:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:44 2026 by rpki-client