Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/HEpXx1GuDm6pFVtpLnHtxNpMO9Y.roa
File: HEpXx1GuDm6pFVtpLnHtxNpMO9Y.roa (raw, json)
Hash identifier: tNzUz8TO8cxTdfFMpjwmZvhvqK90TMGjLBcjKoUnlmA=
Subject key identifier: 1C:4A:57:C7:51:AE:0E:6E:A9:15:5B:69:2E:71:ED:C4:DA:4C:3B:D6
Certificate issuer: /CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Certificate serial: 019F2368F86E9D637EF5DE849C730BDDD4A7
Authority key identifier: DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/HEpXx1GuDm6pFVtpLnHtxNpMO9Y.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 5.180.188.0/22 maxlen: 24
185.185.77.0/24 maxlen: 24
185.185.78.0/24 maxlen: 24
2a0f:a0c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:6e:9d:63:7e:f5:de:84:9c:73:0b:dd:d4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c4a57c751ae0e6ea9155b692e71edc4da4c3bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:6a:7b:91:a0:ee:b7:45:01:fb:03:b5:6d:
01:8f:13:eb:e6:05:c4:e1:41:e0:25:f5:1f:81:8e:
dc:6d:63:c8:34:43:60:7a:23:ce:e1:77:e8:c5:6a:
ec:1e:71:c7:3d:a4:75:cc:e8:74:df:2c:36:61:6a:
db:bf:c0:21:43:52:20:b7:bd:07:b4:64:16:d5:43:
bd:97:ad:b0:2b:42:a5:0a:01:b4:e6:16:43:ca:29:
52:96:59:f2:e5:1d:12:77:ee:dc:95:48:ce:53:9f:
e9:64:26:c2:95:88:a6:e5:24:93:24:27:79:08:ea:
85:d3:64:fe:c5:0b:3e:15:6c:29:55:7d:23:8b:b8:
65:f8:a5:53:d8:6e:40:cd:2a:cd:78:c8:e2:38:15:
47:3a:b2:8c:f3:91:05:0b:fc:f1:21:cf:df:57:ed:
ed:2b:3f:54:c6:fe:be:ca:06:93:a5:60:48:32:33:
74:ab:22:90:09:5e:9f:ab:24:7f:48:2d:9f:be:c9:
ab:57:5e:72:7a:64:a3:b1:0b:bf:8f:d4:07:db:c1:
1f:a9:35:86:9f:6a:5c:e4:1f:72:3e:a7:62:77:36:
01:f4:49:d1:3a:36:fc:bf:b9:e4:31:63:f5:62:5a:
8f:f4:36:40:65:f6:66:53:34:d1:bb:0e:c4:6e:37:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:57:C7:51:AE:0E:6E:A9:15:5B:69:2E:71:ED:C4:DA:4C:3B:D6
X509v3 Authority Key Identifier:
keyid:DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/HEpXx1GuDm6pFVtpLnHtxNpMO9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.77.0-185.185.78.255
IPv6:
2a0f:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:51:49:c4:95:a2:5b:57:a9:d2:d0:be:61:06:30:a8:b2:3e:
b7:66:c8:91:17:be:6a:d7:ed:c1:3a:09:4b:d1:b5:d1:63:62:
54:65:d3:9f:35:a1:46:25:bb:29:bf:50:e7:93:47:ec:2f:c2:
5d:3c:62:b7:72:d0:bc:e9:79:a2:a0:0f:a7:e4:3f:82:58:fd:
39:67:88:d8:fc:2e:3f:eb:cf:8e:69:71:30:06:eb:45:bd:a2:
d8:39:42:2e:41:ae:36:fb:14:42:70:f1:79:64:e6:01:8d:56:
38:fb:88:0b:7d:57:0b:a8:18:3e:a2:eb:7f:95:3d:02:ef:88:
a0:8a:cc:32:a1:0a:fc:ea:c9:0c:cc:43:86:d5:ed:b3:d8:78:
69:7b:cc:15:d2:7c:9f:83:c8:15:78:59:4f:02:86:1b:23:b2:
66:59:68:5f:be:a6:a3:f1:32:ca:5c:52:23:c0:6c:94:c8:c7:
e9:5e:6e:27:b4:6d:b0:75:59:ba:03:be:b7:c4:f8:fe:db:52:
b9:37:15:a8:9e:e9:34:2c:78:be:a7:6b:38:00:f8:35:19:be:
5b:2b:01:3f:d0:98:89:3d:2d:ae:f6:40:12:65:f2:f6:fb:2f:
b5:25:12:a5:4b:de:d9:e4:ac:1a:76:f2:c1:e7:d7:c4:ca:75:
40:34:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:00:21 2026 by rpki-client