Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa
File: 5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa (raw, json)
Hash identifier: +1bCb5V2QswAKGR65R9SngG1RC/2PS62IO4DT3u7w0w=
Subject key identifier: E4:A7:2D:73:1B:18:4F:FE:82:04:9D:9C:76:86:0F:3A:14:00:19:CE
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 019F314A5831343DFDFF4F1E7A649D2E04FD
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa
Signing time: Sun 05 Jul 2026 07:59:43 +0000
ROA not before: Sun 05 Jul 2026 07:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 194.50.30.0/23 maxlen: 24
194.50.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:4a:58:31:34:3d:fd:ff:4f:1e:7a:64:9d:2e:04:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Jul 5 07:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4a72d731b184ffe82049d9c76860f3a140019ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:04:06:93:95:62:76:9f:57:13:2d:cf:13:
15:e6:82:cc:77:2c:20:0d:36:97:58:b9:76:43:58:
5b:9a:f4:8f:a2:96:5b:68:90:cc:a2:08:15:75:e5:
a2:3d:3e:3b:2a:80:3b:36:b2:8b:27:42:a4:8d:65:
6a:83:f5:4a:9f:5a:25:50:08:32:9b:62:7d:0a:54:
59:03:86:be:dd:bb:ba:5c:2e:f9:1a:77:bd:ff:78:
fe:a0:9c:81:4e:85:bf:99:5c:93:05:56:ea:6d:89:
9a:1f:9b:c0:8e:10:3e:38:58:49:77:a5:41:a5:51:
06:3c:6f:24:eb:93:88:eb:ae:61:73:8a:3d:cf:fc:
cb:46:fa:75:35:53:55:c0:6d:92:3e:88:ec:3f:5d:
b1:a9:e2:5e:26:ac:e3:9f:2d:d0:ab:70:8f:eb:11:
f3:69:c9:8c:a0:28:5f:4d:47:10:81:cf:9d:16:fa:
15:72:64:0e:d3:12:0a:86:66:e7:3d:e4:5f:48:05:
c6:fb:6a:cb:5e:e9:8e:7b:0e:e8:65:38:72:c8:6c:
23:8e:bc:3a:d5:51:53:50:e2:5f:11:55:49:36:06:
1a:47:22:51:c8:a1:8e:d5:9d:14:12:63:d8:be:43:
02:0f:d0:8e:0c:59:39:4c:1a:0c:d1:54:4f:9d:77:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A7:2D:73:1B:18:4F:FE:82:04:9D:9C:76:86:0F:3A:14:00:19:CE
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.30.0-194.50.32.255
Signature Algorithm: sha256WithRSAEncryption
55:bf:97:fd:af:ad:ee:77:0d:88:33:45:8c:db:b8:b3:ae:e9:
b1:cf:98:b7:b3:dd:ac:92:5e:52:fe:63:8c:a7:25:ff:a9:d8:
6b:40:38:30:d0:e4:d8:c5:50:83:b1:0b:76:ed:c2:ef:0a:a5:
a9:b8:69:a4:84:ac:fb:4b:16:98:fe:b0:3e:e1:c0:88:62:10:
8c:f7:f3:5d:7a:9e:f7:01:b1:2d:f5:2b:35:da:f9:3c:5b:14:
88:ae:bb:67:5f:1c:79:5f:3d:eb:df:4c:72:73:9f:e7:dd:2c:
32:68:99:c2:be:8c:50:ff:d8:17:01:72:1c:43:49:25:32:b6:
a8:e2:54:12:b3:49:01:ab:21:3d:98:eb:ac:31:fb:95:45:7a:
0c:c4:c7:9c:73:b9:a9:1b:4c:ba:7b:97:86:c1:82:ad:69:00:
01:2a:e5:66:c0:4f:3d:b4:ff:6c:9f:a4:e6:b0:7f:4d:16:1f:
40:78:f6:0d:84:bd:84:e2:bc:df:f4:b9:46:23:bc:76:d9:b1:
52:38:ef:54:09:ed:ec:e4:ed:14:5a:06:d9:0b:5b:aa:3a:92:
3b:b8:72:19:af:28:13:c6:32:fa:ba:4f:92:9f:57:3a:90:18:
66:00:15:f1:f2:54:0d:fa:24:a2:bb:45:c9:e6:ee:b6:67:1c:
c9:f3:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client