Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/_5saXKPRPVoWXv7DKwXGXPJ24HA.roa
File: _5saXKPRPVoWXv7DKwXGXPJ24HA.roa (raw, json)
Hash identifier: RXuSno2wOQ3NDjJ1eRXmfdL1UvwH5KCzdhLVEULfM7E=
Subject key identifier: FF:9B:1A:5C:A3:D1:3D:5A:16:5E:FE:C3:2B:05:C6:5C:F2:76:E0:70
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019ECF3A6E90809183B38B5D717F8BD72CA9
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/_5saXKPRPVoWXv7DKwXGXPJ24HA.roa
Signing time: Tue 16 Jun 2026 06:59:33 +0000
ROA not before: Tue 16 Jun 2026 06:59:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.104.0/21 maxlen: 22
37.98.112.0/21 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.64.0/19 maxlen: 22
178.131.96.0/20 maxlen: 24
178.131.112.0/21 maxlen: 22
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:3a:6e:90:80:91:83:b3:8b:5d:71:7f:8b:d7:2c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jun 16 06:59:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff9b1a5ca3d13d5a165efec32b05c65cf276e070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:1e:69:5f:76:30:33:78:87:26:67:27:78:
2b:62:b6:cf:d7:f3:99:cd:04:7f:4b:06:87:f8:03:
1d:02:be:11:88:1a:a8:cf:87:c6:65:0c:6e:9a:01:
c6:ec:af:84:6e:6d:5e:3a:ca:cb:59:f7:85:98:bf:
b0:52:10:15:09:cf:a0:e3:0e:2c:2b:c8:b6:4a:4d:
b1:a0:c4:7c:7a:4b:8c:ee:b0:1b:b9:7e:7b:31:2a:
5a:0f:54:e5:e9:2f:79:f1:ce:03:9b:a8:b8:d4:3e:
84:3c:f9:32:e6:d2:b7:91:e4:47:67:55:39:20:0c:
7a:9e:86:97:f9:54:40:3f:19:7c:d8:26:91:2f:4f:
38:d9:c7:e8:08:3b:e9:b0:02:38:f5:3a:5d:93:af:
65:e0:ea:1d:ef:0e:e9:5f:08:6b:34:45:6a:f0:f1:
ca:60:66:1a:53:db:4d:a7:a4:fc:71:3f:06:97:ff:
37:16:13:1a:64:22:bd:f9:d0:24:d2:1a:55:d2:b3:
cb:58:9e:2c:fa:e2:11:04:3a:be:20:93:76:6b:81:
bc:21:a4:70:09:60:75:a8:27:75:f3:de:58:b6:38:
2a:c9:d2:a6:93:54:79:6e:16:d5:c0:93:74:9c:2d:
b9:6f:a0:f0:67:5e:03:09:29:9b:a5:2e:63:c8:bb:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:1A:5C:A3:D1:3D:5A:16:5E:FE:C3:2B:05:C6:5C:F2:76:E0:70
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/_5saXKPRPVoWXv7DKwXGXPJ24HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.104.0-37.98.119.255
178.131.0.0-178.131.119.255
178.131.128.0/18
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:d2:ad:fb:76:c5:22:20:16:14:dd:e8:e4:28:12:15:24:92:
0e:52:db:cf:20:b8:74:14:83:b5:ab:80:2a:fc:5b:93:f4:42:
d0:6b:e8:9e:f9:f9:14:72:b7:77:29:7b:2b:6d:ab:6d:c8:dc:
55:8f:ec:aa:57:7a:6a:cf:22:06:8e:c0:f2:ef:16:d4:45:87:
a8:73:bb:11:93:2f:8a:fd:d7:ee:cf:4f:fd:b7:35:44:08:1e:
b5:b2:0d:11:05:e9:58:0f:de:52:f8:a7:10:7a:1e:8f:0e:d3:
5a:b9:49:4a:8d:ae:06:2d:bc:7a:29:40:98:15:2e:9d:ae:89:
5d:42:1e:84:b4:ab:e1:fb:73:02:c8:6a:e8:88:97:e9:1b:ab:
7f:01:a1:53:33:9f:c0:4d:33:0f:a4:9f:9c:7c:90:5b:7f:78:
b4:38:9d:78:66:65:f9:6d:70:58:0e:cf:29:f9:64:98:51:a4:
b8:41:70:70:bc:d1:97:cd:16:af:79:6d:3f:11:68:66:a2:95:
27:73:26:a2:bf:c4:56:cb:a5:ce:c5:c5:24:b3:72:17:e0:2c:
8b:7d:98:53:30:9b:b8:af:9a:f3:2c:18:6d:70:52:bd:33:ac:
65:4f:ab:dd:ec:08:af:cf:a4:45:c6:31:de:a4:07:c7:89:1d:
3f:f4:fc:9e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZ7POm6QgJGDs4tdcX+L1yypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjYwNjE2MDY1OTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjliMWE1Y2EzZDEzZDVhMTY1ZWZlYzMyYjA1YzY1Y2YyNzZlMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW8eaV92MDN4hyZnJ3grYrbP1/OZ
zQR/SwaH+AMdAr4RiBqoz4fGZQxumgHG7K+Ebm1eOsrLWfeFmL+wUhAVCc+g4w4s
K8i2Sk2xoMR8ekuM7rAbuX57MSpaD1Tl6S958c4Dm6i41D6EPPky5tK3keRHZ1U5
IAx6noaX+VRAPxl82CaRL0842cfoCDvpsAI49Tpdk69l4Ood7w7pXwhrNEVq8PHK
YGYaU9tNp6T8cT8Gl/83FhMaZCK9+dAk0hpV0rPLWJ4s+uIRBDq+IJN2a4G8IaRw
CWB1qCd1895YtjgqydKmk1R5bhbVwJN0nC25b6DwZ14DCSmbpS5jyLvhswIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFP+bGlyj0T1aFl7+wysFxlzyduBwMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvXzVzYVhLUFJQVm9XWHY3REt3WEdYUEoyNEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzMAwDBAMlYmgD
BAMlYnAwCwMDALKDAwQDsoNwAwQGsoOAAwQEvNMAAwQDvNTwAwQCvNXAMA0GCSqG
SIb3DQEBCwUAA4IBAQBf0q37dsUiIBYU3ejkKBIVJJIOUtvPILh0FIO1q4Aq/FuT
9ELQa+ie+fkUcrd3KXsrbattyNxVj+yqV3pqzyIGjsDy7xbURYeoc7sRky+K/dfu
z0/9tzVECB61sg0RBelYD95S+KcQeh6PDtNauUlKja4GLbx6KUCYFS6droldQh6E
tKvh+3MCyGroiJfpG6t/AaFTM5/ATTMPpJ+cfJBbf3i0OJ14ZmX5bXBYDs8p+WSY
UaS4QXBwvNGXzRaveW0/EWhmopUncyaiv8RWy6XOxcUks3IX4CyLfZhTMJu4r5rz
LBhtcFK9M6xlT6vd7Aivz6RFxjHepAfHiR0/9Pye
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:31:28 2026 by rpki-client