Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/_o3RG8HCxg3kYi7SWKCECN8Dc-s.roa
File: _o3RG8HCxg3kYi7SWKCECN8Dc-s.roa (raw, json)
Hash identifier: l4HEiSIeS1Uze7gfCNfYBbS9icVIyNRT57lfLSvDPr4=
Subject key identifier: FE:8D:D1:1B:C1:C2:C6:0D:E4:62:2E:D2:58:A0:84:08:DF:03:73:EB
Certificate issuer: /CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Certificate serial: 019F2368F99EE2D4F8818E19FB2963993C30
Authority key identifier: DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/_o3RG8HCxg3kYi7SWKCECN8Dc-s.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206483
IP address blocks: 5.180.188.0/22 maxlen: 24
185.185.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f9:9e:e2:d4:f8:81:8e:19:fb:29:63:99:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe8dd11bc1c2c60de4622ed258a08408df0373eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:3f:52:f5:3d:ce:b5:f7:98:33:93:35:d0:
1a:53:2c:75:6d:06:81:62:7c:0b:38:34:66:9a:5e:
0c:a5:79:10:d9:06:ac:5a:c2:f4:72:6f:46:52:d8:
64:ea:ef:b2:e7:c7:47:55:57:c7:83:b4:75:c9:47:
9a:c9:43:12:2b:e1:e3:75:65:a2:37:ae:35:56:6b:
69:ac:56:61:19:0f:46:2c:73:5d:77:4c:32:29:b5:
fc:d5:7a:2b:13:7b:38:82:0b:7d:56:aa:dd:9e:ff:
12:a9:2c:18:95:5d:4f:b3:e9:29:9e:1c:f7:32:22:
db:a6:2b:93:85:7a:88:25:6b:f8:e5:56:e6:7f:35:
ad:a1:1c:0f:be:fb:f6:70:f3:dc:98:10:ad:90:ae:
e8:6b:00:75:ed:7e:c2:29:a2:3d:61:e0:9b:48:ba:
24:5f:74:1f:13:b0:21:fb:00:48:9c:45:a6:5e:e2:
4a:b2:b9:fa:f0:9e:27:6b:5f:3b:79:5d:34:6e:39:
5b:fb:cd:bf:eb:43:2f:ec:cd:b2:eb:f2:31:1a:04:
f1:1e:5f:34:3a:c3:a9:47:f1:9b:b8:11:b1:99:a8:
9f:0a:e4:74:23:2f:34:37:a5:7d:a7:79:c4:13:c6:
7b:ef:46:87:9b:0a:3d:32:30:91:fb:49:87:c8:c3:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:D1:1B:C1:C2:C6:0D:E4:62:2E:D2:58:A0:84:08:DF:03:73:EB
X509v3 Authority Key Identifier:
keyid:DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/_o3RG8HCxg3kYi7SWKCECN8Dc-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e8:03:03:fd:53:75:a1:9d:48:93:9c:5a:0b:29:16:70:0d:
89:74:cf:6a:82:5f:67:ff:4f:6f:61:e6:30:0c:81:23:06:c6:
8f:e3:e6:fe:b8:59:af:8b:98:82:49:32:48:7d:ee:5d:42:83:
f9:d6:cb:66:32:83:fd:fe:a0:6d:f9:3c:87:99:4e:61:70:6f:
04:f0:10:53:73:bc:8d:07:84:45:d9:70:d5:bf:ae:2e:e6:c0:
a5:34:fe:ee:3b:ae:d3:ba:61:15:50:b9:e5:16:b6:2a:dc:43:
d5:17:18:60:54:cc:27:25:94:ab:7c:a4:7c:53:30:a2:80:ad:
de:d7:30:81:99:62:c0:8c:5f:01:12:bd:68:fa:48:58:35:a3:
98:f8:b1:f3:d0:b2:1f:c6:17:34:23:06:c4:97:9a:25:81:03:
c9:bd:37:15:52:36:01:27:22:ae:70:61:bf:e8:d2:f9:e0:57:
1c:7b:86:6a:93:c4:7e:4d:76:53:50:e6:66:45:b9:32:b5:3f:
d7:f4:a2:d8:b1:bb:e9:da:33:b1:d1:46:f9:bb:27:29:57:dd:
09:62:f7:4f:d9:e8:98:98:8c:c4:74:c4:00:fe:d5:41:2f:b5:
d0:20:94:23:ff:3f:fc:e6:18:3e:86:c6:3f:78:34:ba:e2:e8:
dd:0b:43:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaPme4tT4gY4Z+yljmTwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYmJkNmUyMzQ2M2MyY2ZlNzkyYzM2ZTA4OTBmMDM5MThl
ZjQ3NzYwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZThkZDExYmMxYzJjNjBkZTQ2MjJlZDI1OGEwODQwOGRmMDM3M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCA/UvU9zrX3mDOTNdAaUyx1bQaB
YnwLODRmml4MpXkQ2QasWsL0cm9GUthk6u+y58dHVVfHg7R1yUeayUMSK+HjdWWi
N641VmtprFZhGQ9GLHNdd0wyKbX81XorE3s4ggt9Vqrdnv8SqSwYlV1Ps+kpnhz3
MiLbpiuThXqIJWv45VbmfzWtoRwPvvv2cPPcmBCtkK7oawB17X7CKaI9YeCbSLok
X3QfE7Ah+wBInEWmXuJKsrn68J4na187eV00bjlb+82/60Mv7M2y6/IxGgTxHl80
OsOpR/GbuBGxmaifCuR0Iy80N6V9p3nEE8Z770aHmwo9MjCR+0mHyMOiiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP6N0RvBwsYN5GIu0lighAjfA3PrMB8GA1UdIwQY
MBaAFN+71uI0Y8LP55LDbgiQ8DkY70d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzd2VzRqUmp3c19ua3NOdUNKRHdPUmp2UjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDct
NjJlMjYwMzEzZTRjLzEvX28zUkc4SEN4ZzNrWWk3U1dLQ0VDTjhEYy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDctNjJlMjYwMzEzZTRj
LzEvMzd2VzRqUmp3c19ua3NOdUNKRHdPUmp2UjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbS8AwQA
ublMMA0GCSqGSIb3DQEBCwUAA4IBAQCf6AMD/VN1oZ1Ik5xaCykWcA2JdM9qgl9n
/09vYeYwDIEjBsaP4+b+uFmvi5iCSTJIfe5dQoP51stmMoP9/qBt+TyHmU5hcG8E
8BBTc7yNB4RF2XDVv64u5sClNP7uO67TumEVULnlFrYq3EPVFxhgVMwnJZSrfKR8
UzCigK3e1zCBmWLAjF8BEr1o+khYNaOY+LHz0LIfxhc0IwbEl5olgQPJvTcVUjYB
JyKucGG/6NL54Fcce4Zqk8R+TXZTUOZmRbkytT/X9KLYsbvp2jOx0Ub5uycpV90J
YvdP2eiYmIzEdMQA/tVBL7XQIJQj/z/85hg+hsY/eDS64ujdC0Og
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:28 2026 by rpki-client