Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7iMvo-UaklQzuXmY43OxiaprnIc.roa
File: 7iMvo-UaklQzuXmY43OxiaprnIc.roa (raw, json)
Hash identifier: DiFOdtF+yGfPS1z/ahaHDJDSFOkzfykTvUYxzSYupxM=
Subject key identifier: EE:23:2F:A3:E5:1A:92:54:33:B9:79:98:E3:73:B1:89:AA:6B:9C:87
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A0F2F46DB58C5E9B73CBA5CF31186DEC21
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7iMvo-UaklQzuXmY43OxiaprnIc.roa
Signing time: Wed 30 Sep 2026 15:35:00 +0000
ROA not before: Wed 30 Sep 2026 15:35:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 5.182.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:f4:6d:b5:8c:5e:9b:73:cb:a5:cf:31:18:6d:ec:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 30 15:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee232fa3e51a925433b97998e373b189aa6b9c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:c6:aa:9a:c5:3e:d8:82:c5:29:5e:96:57:
63:5e:56:52:4d:e9:0a:4b:34:e4:32:ee:b6:3f:8b:
fc:0c:fb:4f:95:1a:bc:76:19:a3:57:36:0d:e5:4e:
d1:ae:2f:53:3d:6a:9c:06:22:83:ff:bc:5d:2d:3c:
7c:42:a6:eb:37:1f:ac:aa:f5:5a:b5:8d:64:30:5c:
12:8b:75:8e:84:e1:1d:c1:47:c5:1d:00:91:d7:20:
4b:14:68:7f:92:ad:07:20:88:1f:b4:4e:07:28:a5:
08:9b:3b:af:0f:f1:ac:08:a2:e0:56:f4:0c:20:f5:
87:f3:e3:aa:ef:b6:3f:c2:08:3b:11:b9:ac:98:60:
8d:bc:bb:fc:99:f1:2f:28:b8:a0:70:8a:a9:14:de:
46:e9:33:fe:37:e2:50:aa:d5:ed:3a:6c:3e:70:61:
b5:f8:79:86:b2:21:43:63:c3:54:9b:9d:0f:70:0b:
04:bd:fc:92:95:4f:5b:9c:ca:f8:40:ad:1f:40:75:
92:fc:26:7d:15:ae:3a:f2:27:05:02:9c:ef:f2:fd:
e1:e7:7d:c2:5f:13:a7:95:e0:b8:1e:ed:62:65:6e:
4c:1f:af:76:53:9a:83:f8:eb:2d:2e:bb:9c:8e:0b:
f0:c5:28:ea:13:de:14:b5:8d:93:f2:c6:5b:8d:63:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:2F:A3:E5:1A:92:54:33:B9:79:98:E3:73:B1:89:AA:6B:9C:87
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7iMvo-UaklQzuXmY43OxiaprnIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a9:07:23:d2:6c:3c:3c:91:1b:76:8a:74:3e:43:8f:98:0f:
d0:56:fb:60:5e:c5:86:c8:70:aa:af:60:1a:12:51:3e:85:1e:
1a:9b:1d:d2:ee:02:14:af:86:68:bf:e6:a2:f6:7b:78:38:dc:
1c:3d:8a:0c:1f:54:b8:39:8c:06:f7:37:c7:7b:6d:b5:0e:5b:
4c:c5:c3:df:c4:95:0f:60:81:12:d6:1e:d1:42:1e:2e:12:be:
37:38:05:92:cb:03:fc:79:4a:78:fe:56:0e:9c:1e:69:c3:f7:
35:34:70:ef:60:3e:fa:1a:c1:4a:cb:ba:e4:55:71:6f:8a:e0:
93:1e:2d:54:6a:96:65:48:6a:5d:1e:4a:ef:7a:db:ef:c6:be:
04:ad:21:5e:79:20:7d:a0:5b:d1:60:25:e2:34:88:0e:ab:3d:
e9:e5:c1:8f:2a:94:90:b4:af:98:2f:ae:20:9a:74:d4:a8:7b:
e5:46:c2:53:6a:55:a3:ab:57:e3:4c:1e:8a:30:81:b9:79:f4:
bc:7a:ca:ec:82:39:0e:8e:5a:87:5d:e8:76:86:e6:12:27:e2:
8d:8c:ac:84:53:1b:d0:77:52:df:26:d7:4c:9f:e7:23:f8:f5:
7d:ca:8b:1f:9c:db:ea:8d:ba:52:2c:78:a8:37:10:71:c7:0b:
b1:8a:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:40:09 2026 by rpki-client