Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EvpVlhD2nHPFikyJIa3_Bl3fMDM.roa
File: EvpVlhD2nHPFikyJIa3_Bl3fMDM.roa (raw, json)
Hash identifier: pF+OeIjHLxcESkrEYz5KjeqfqNsHDQkaxq6pRASd6U8=
Subject key identifier: 12:FA:55:96:10:F6:9C:73:C5:8A:4C:89:21:AD:FF:06:5D:DF:30:33
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D00ACFC108DBC479DB21A5342AAA473CA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EvpVlhD2nHPFikyJIa3_Bl3fMDM.roa
Signing time: Wed 18 Mar 2026 11:20:29 +0000
ROA not before: Wed 18 Mar 2026 11:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 5.180.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ac:fc:10:8d:bc:47:9d:b2:1a:53:42:aa:a4:73:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 18 11:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12fa559610f69c73c58a4c8921adff065ddf3033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:88:bc:d1:34:98:d9:fe:8a:20:10:b1:ee:
7b:30:98:72:72:df:64:4d:f2:e5:7f:b8:e5:80:36:
83:3d:be:f6:b1:3e:a5:8e:42:f8:e6:27:d1:28:60:
b9:94:20:e2:32:6e:2c:40:89:c7:e3:a7:f8:d9:5f:
d7:41:80:42:b2:5d:96:ab:33:0e:bd:98:40:08:73:
86:ac:e6:9b:4f:65:54:6d:19:a5:92:17:1e:e8:46:
e4:7f:47:b9:46:81:df:b0:4d:c3:47:a9:95:c8:d5:
30:a3:41:2f:b8:6a:47:83:65:70:f2:7c:50:a8:8b:
18:25:25:36:d0:f4:01:6d:60:83:8e:57:70:2e:59:
90:c8:1f:30:d4:c4:a8:78:c5:d1:4c:68:cf:de:1a:
f8:b2:5c:a9:94:45:ad:f5:0d:74:dc:ee:59:e6:78:
e6:23:54:b9:51:72:08:b8:12:ea:37:1d:8b:60:55:
4c:29:ba:fd:fd:15:47:4e:46:db:67:df:dc:b1:7a:
6a:25:11:73:ea:d0:5c:13:46:80:9b:b4:c7:e5:91:
3a:b0:57:83:ab:e3:4f:99:cf:58:f9:14:23:2b:ba:
8b:9a:77:f3:d6:d6:0c:c0:e6:3f:b3:df:2c:3f:41:
c6:ed:3e:28:5f:38:d6:58:24:83:b3:3c:d2:fc:da:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FA:55:96:10:F6:9C:73:C5:8A:4C:89:21:AD:FF:06:5D:DF:30:33
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EvpVlhD2nHPFikyJIa3_Bl3fMDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2e:f5:ad:30:6c:53:02:db:2e:fd:52:8f:eb:e5:a0:2d:81:
cd:93:f2:d4:ed:c5:66:c9:aa:c5:4f:a1:96:a6:a1:bf:05:92:
c5:e1:b8:8c:d7:2f:8b:e6:f4:3d:0a:f1:57:25:bd:d0:ec:d0:
29:14:ca:ae:6e:92:2c:08:c6:ee:e2:84:a0:6c:65:93:4e:9d:
cf:a0:1c:c2:f9:6a:34:f7:a1:6d:0a:e5:4a:c8:cb:7d:aa:4b:
d4:11:11:da:18:f1:e2:9f:93:7b:8c:52:e8:19:db:d0:e4:8f:
ba:81:d7:be:f5:b9:0e:5f:b0:90:4c:ca:17:5a:a7:a5:44:ff:
95:2a:a8:98:c6:7c:80:54:2c:0b:45:74:ae:55:37:c9:9c:45:
c5:fb:4a:66:fe:43:4e:c2:bd:87:f4:45:81:8d:07:ea:60:7a:
ee:2c:d4:40:42:9f:ef:cc:94:48:04:e4:d7:45:41:3d:78:a4:
a6:3d:8c:dc:de:11:9c:4a:f1:63:26:b0:e3:c3:2d:ba:d8:5e:
bf:84:b7:36:5b:18:db:52:49:d6:93:c3:a7:59:76:19:9e:0a:
c1:b4:d2:f8:32:6c:e5:67:9a:bf:4c:8f:74:94:e7:86:9b:0f:
69:fb:ff:9d:e6:84:6a:08:cf:89:4f:95:fb:40:34:f5:09:a9:
64:90:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:30:45 2026 by rpki-client