Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/0DlrnLlHf_9G3dgJLGuQzv_vdFA.roa
File: 0DlrnLlHf_9G3dgJLGuQzv_vdFA.roa (raw, json)
Hash identifier: UEM4IEoK4BS8ZBn9SkOnYCApPCeXZFDb9eREOgpCs44=
Subject key identifier: D0:39:6B:9C:B9:47:7F:FF:46:DD:D8:09:2C:6B:90:CE:FF:EF:74:50
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019FF0D09E2E813C3A0047541F15A79A745C
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/0DlrnLlHf_9G3dgJLGuQzv_vdFA.roa
Signing time: Tue 11 Aug 2026 12:33:51 +0000
ROA not before: Tue 11 Aug 2026 12:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 5.160.77.0/24 maxlen: 24
5.160.131.0/24 maxlen: 24
5.160.226.0/24 maxlen: 24
5.160.252.0/24 maxlen: 24
77.104.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:d0:9e:2e:81:3c:3a:00:47:54:1f:15:a7:9a:74:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Aug 11 12:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0396b9cb9477fff46ddd8092c6b90ceffef7450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:e6:64:2b:94:be:cf:dc:44:7b:78:fc:53:
7f:0e:e0:ec:5c:b2:14:88:aa:3a:15:fb:ee:58:2e:
d8:da:bf:6b:83:a2:0b:84:c3:40:10:83:07:bb:d3:
7c:95:65:bf:91:8f:d2:95:d9:4d:56:81:85:b5:0b:
fc:1a:15:ac:5e:1c:81:40:9c:8f:39:45:04:d4:a9:
c7:b9:7c:10:37:bc:b9:db:bb:b9:66:47:73:d8:c2:
83:99:d5:e4:03:76:b0:ab:d0:0c:a6:5a:f3:27:3d:
74:d2:fd:f4:ca:c7:20:54:fd:b2:f3:bf:b8:4b:0c:
fc:f7:6d:a3:71:0b:36:e9:51:36:00:ba:2f:c0:fd:
2c:eb:eb:b3:cc:9d:32:07:92:04:44:28:38:f3:36:
0e:c5:66:11:d7:7e:98:ee:fe:ba:a4:9e:76:4d:4d:
e2:e6:9f:aa:c7:f9:bc:f5:ae:d4:94:86:a0:a8:f5:
0c:e8:7a:d9:1a:56:67:56:b5:fb:3a:bd:b3:a9:94:
d8:19:ba:b3:f0:ae:a5:65:23:b4:29:e2:2c:9e:32:
a7:c3:47:e2:8c:c8:ee:6b:b0:b5:bb:7a:45:93:7a:
ef:03:41:f0:1b:de:d6:2b:ad:8e:a3:7f:e4:1e:9e:
4d:fc:0f:c5:3c:96:98:4a:e9:2e:68:b2:74:d2:05:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:6B:9C:B9:47:7F:FF:46:DD:D8:09:2C:6B:90:CE:FF:EF:74:50
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/0DlrnLlHf_9G3dgJLGuQzv_vdFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.131.0/24
5.160.226.0/24
5.160.252.0/24
77.104.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7a:c6:5d:ed:7c:26:ac:1c:f5:a9:ad:14:5d:c9:4f:4b:78:
1c:35:e0:2f:e3:ab:f7:77:a9:2d:32:76:4a:cf:58:52:f7:d8:
a0:e8:47:aa:c8:73:19:5b:74:06:33:00:8c:98:d0:49:77:69:
92:2c:87:4b:c5:9f:e1:a7:1d:01:ec:dc:be:cf:65:01:9f:9c:
b0:b4:86:7b:85:10:57:f9:78:c7:a4:35:ee:8e:da:df:a0:0c:
59:df:ec:87:5a:7b:42:67:49:ee:ce:7d:b3:c7:d9:14:1a:94:
cc:31:f7:61:50:bd:fc:03:b9:63:e1:e0:23:f2:f6:ba:7a:17:
25:bf:42:46:32:a4:1d:00:12:03:25:e5:71:c8:f4:53:f8:89:
1a:c8:37:68:f4:a1:17:62:b8:42:83:2d:ff:3f:d9:f4:d6:3a:
94:35:e2:29:03:dc:a9:24:d2:de:da:c8:bb:54:c4:8a:a4:30:
f6:0e:e5:79:10:fb:21:50:07:3f:d9:8e:8b:1e:e6:af:f3:37:
a3:eb:45:22:1c:6b:85:e8:52:d5:f1:2a:03:05:cb:5a:87:ac:
f7:98:52:a8:bd:3c:f2:5a:e4:a6:40:d0:8c:22:0e:be:e6:bd:
82:99:54:88:55:ed:1e:c0:59:16:5e:0a:a6:df:8e:62:ae:6b:
e8:83:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:29 2026 by rpki-client