Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/e875dYVV9Bmz9Srrv1z0Zi01SRM.roa
File: e875dYVV9Bmz9Srrv1z0Zi01SRM.roa (raw, json)
Hash identifier: Tgyy+YuTgZdVrK9h67RlLijooBMoBvNFpIqenkKio8A=
Subject key identifier: 7B:CE:F9:75:85:55:F4:19:B3:F5:2A:EB:BF:5C:F4:66:2D:35:49:13
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 01A0524E3693B920398E6019AF3B5A6065DE
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/e875dYVV9Bmz9Srrv1z0Zi01SRM.roa
Signing time: Sun 30 Aug 2026 10:54:12 +0000
ROA not before: Sun 30 Aug 2026 10:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 187.5.0.0/23 maxlen: 24
187.5.2.0/23 maxlen: 24
187.5.4.0/23 maxlen: 24
200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:4e:36:93:b9:20:39:8e:60:19:af:3b:5a:60:65:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 30 10:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bcef9758555f419b3f52aebbf5cf4662d354913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:d6:76:6e:78:d6:5d:6e:e1:9f:16:16:cb:
71:61:3e:9b:e2:a0:d6:df:62:a4:91:b3:75:fa:62:
46:89:9d:ca:d1:72:9d:6c:ca:b5:30:4d:20:db:13:
2c:a1:64:57:c9:c0:f0:19:34:49:fd:3e:e5:54:b7:
c8:4e:59:c9:22:36:0f:7a:75:30:76:0f:7a:ce:51:
17:1a:d0:24:a9:c6:c2:71:4d:6b:06:7a:36:cd:9b:
a6:31:27:f3:07:4d:88:97:d0:21:04:ab:ca:92:67:
b9:ca:9a:48:80:77:69:41:db:10:8e:d9:db:8f:c5:
d1:0b:2c:f6:98:9c:f8:d7:32:ee:c0:1a:f0:09:55:
f9:43:8c:ce:16:d5:b0:64:aa:62:8c:ba:b5:14:54:
c6:a8:b7:13:ee:5f:8a:65:4e:f6:3d:0c:f9:b5:16:
0e:06:00:23:d3:3c:40:91:03:4d:b7:63:88:81:9e:
26:d8:ce:1e:dd:1c:9a:0b:36:59:49:6f:8b:ef:4e:
50:86:6e:91:87:dd:4e:fc:8c:f7:8c:d9:ba:4f:d2:
ac:c8:3b:46:ee:a3:2e:db:e7:76:b4:20:90:b2:7d:
7d:11:e2:4d:8e:9b:53:00:39:33:11:1a:32:5f:27:
63:2f:f0:d7:89:dd:68:03:7c:04:82:9a:91:a2:ec:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:F9:75:85:55:F4:19:B3:F5:2A:EB:BF:5C:F4:66:2D:35:49:13
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/e875dYVV9Bmz9Srrv1z0Zi01SRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0-187.5.5.255
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:a5:6e:d6:4c:94:c2:74:ae:e2:71:fb:e7:5d:b2:1c:60:97:
07:5f:02:7c:d3:fa:f2:fd:f5:ca:f2:19:7c:d4:cf:75:7c:50:
3d:35:f0:bd:64:03:e3:ed:68:f8:15:3e:01:a5:3b:c1:77:8f:
7f:d8:03:e4:dc:3e:24:ed:a7:ea:49:97:43:d9:3c:4c:d4:62:
c1:fc:16:5d:3b:d2:0c:ed:19:6a:28:8b:5a:f0:0a:65:88:5e:
b9:1d:85:82:ed:a6:66:c5:c1:c4:de:1e:81:9c:02:f3:d8:cb:
c9:58:0a:da:3f:94:9b:db:2d:e8:8d:98:c9:d1:0c:13:36:cf:
20:7a:09:ae:65:05:9d:da:65:8f:f1:79:dd:46:32:50:b4:b6:
a1:e3:6a:b7:37:4f:68:8e:06:3e:d3:5e:2d:2c:ec:0d:26:58:
38:69:78:de:9a:78:4e:b6:d5:e0:25:f1:9b:6d:f5:59:83:19:
e9:68:2c:0a:35:77:15:84:f4:06:53:8c:fa:7f:c4:67:4b:b5:
77:33:55:c9:72:70:50:9a:82:0e:94:a0:1c:75:9b:35:61:bf:
1a:3e:86:9b:d5:dc:e0:2a:26:c6:f4:54:cd:a4:53:d6:6a:bf:
80:82:09:86:0f:4c:27:00:8c:da:1f:2d:69:e6:71:8a:52:ab:
87:b4:28:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:40 2026 by rpki-client