Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/5ToKLF8AZKviRK8eveHz3y2eCJg.roa
File: 5ToKLF8AZKviRK8eveHz3y2eCJg.roa (raw, json)
Hash identifier: 7dZ4D04yJMNxgBoOD4N7srtpsPwEeXW0J8iTVYWeQ8s=
Subject key identifier: E5:3A:0A:2C:5F:00:64:AB:E2:44:AF:1E:BD:E1:F3:DF:2D:9E:08:98
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 019F23692AFE8A0A8EFA56836F4D6876D877
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/5ToKLF8AZKviRK8eveHz3y2eCJg.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.51.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2a:fe:8a:0a:8e:fa:56:83:6f:4d:68:76:d8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e53a0a2c5f0064abe244af1ebde1f3df2d9e0898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:e7:be:88:5a:bb:eb:b1:1b:ac:f3:f3:81:
6f:85:b7:f8:43:5e:e8:e3:93:cf:8f:80:67:5c:47:
c6:fb:77:17:22:fc:a5:41:53:51:e7:51:2b:a5:31:
1d:74:13:53:ab:55:57:99:96:44:a3:ab:b6:c4:cd:
cc:d0:4e:a3:52:a0:0b:95:c1:e7:b2:0d:a6:e8:b3:
42:48:fd:92:c6:55:1d:00:1c:78:d1:a0:f8:52:65:
81:8d:8c:ec:df:e5:d1:9b:30:62:ca:8b:c2:7f:8b:
16:9a:83:df:0c:69:6f:3a:d9:d2:ec:87:7d:37:a0:
36:54:59:14:d2:7c:36:d2:33:1e:29:0d:41:db:b5:
b5:04:1c:e7:64:f2:04:9d:dd:15:75:46:c4:20:ea:
06:76:06:c5:ad:46:e0:06:bc:d7:4b:08:3f:40:a7:
44:b3:24:92:c8:19:36:0c:96:9f:1f:6a:17:b2:99:
77:81:d2:7d:4f:13:55:07:d1:c4:31:04:80:49:8f:
54:fd:c1:83:99:cc:c7:bc:17:2c:42:c4:18:95:5d:
e3:16:e5:78:e2:bd:40:36:82:02:3d:37:ed:1b:03:
f6:39:8c:c4:d7:98:11:cf:f0:a4:43:d5:62:e6:6c:
78:28:b8:a9:b8:ad:cf:c5:8b:db:46:37:36:4a:2e:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3A:0A:2C:5F:00:64:AB:E2:44:AF:1E:BD:E1:F3:DF:2D:9E:08:98
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/5ToKLF8AZKviRK8eveHz3y2eCJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:76:34:73:bc:d1:03:8c:4b:8a:ad:f4:85:63:ea:67:72:e3:
99:a8:f5:9f:1f:7c:1e:a6:d1:bc:db:00:8a:6c:7b:4f:c5:16:
96:cb:ff:f2:e0:5a:e5:43:04:75:61:86:20:24:0a:e0:07:8d:
39:4a:82:35:43:67:2c:ce:46:cb:c0:8b:77:7c:e6:a9:18:c3:
d0:32:ea:f0:a6:95:ae:36:9e:a4:a5:99:01:f4:ce:d9:a5:ee:
0b:77:04:03:dd:aa:e7:5a:7e:76:fc:62:8c:b6:35:f7:cb:8d:
75:f2:ad:9e:f0:86:29:9a:0f:03:00:af:2d:e6:4e:ce:08:32:
13:a5:f5:9d:c3:46:ac:6c:ff:87:51:da:a5:9b:9d:37:21:d6:
25:2d:8d:1a:94:e6:7f:cc:d3:ff:a8:06:2a:ab:dc:86:61:49:
ad:07:c6:7a:32:f1:9c:20:61:4c:ee:61:db:f4:7d:b5:73:4c:
fb:22:ef:b8:a1:17:c3:44:b4:cb:ff:55:ce:c4:31:1b:42:e0:
af:85:00:1b:99:c7:e1:8e:7d:7c:47:a7:41:e4:89:6d:15:9e:
8a:5b:06:2a:ed:dd:62:be:21:46:ff:88:af:32:34:b5:7a:9c:
eb:a8:cd:5b:87:5c:de:c1:d3:ea:dd:6f:c7:a0:98:69:01:cc:
6d:1f:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:38 2026 by rpki-client