Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Bf3eWTUY6a7We4rzZVpca86we8Y.roa
File: Bf3eWTUY6a7We4rzZVpca86we8Y.roa (raw, json)
Hash identifier: tDNpML9PlxMkRGjIqKPmDeMzOIikvaaq166hfa41C44=
Subject key identifier: 05:FD:DE:59:35:18:E9:AE:D6:7B:8A:F3:65:5A:5C:6B:CE:B0:7B:C6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019E607984C9C5AC0B04A8EEF0DD84CD3BB9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Bf3eWTUY6a7We4rzZVpca86we8Y.roa
Signing time: Mon 25 May 2026 18:50:37 +0000
ROA not before: Mon 25 May 2026 18:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153928
IP address blocks: 5.182.112.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:79:84:c9:c5:ac:0b:04:a8:ee:f0:dd:84:cd:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 25 18:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05fdde593518e9aed67b8af3655a5c6bceb07bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:09:a1:93:6f:78:3e:77:d5:92:bc:c5:d2:
02:6b:0e:ec:29:49:92:61:13:f6:b2:27:10:1e:c6:
b1:ef:1f:7f:cc:36:40:0b:71:e5:21:8c:cb:24:f8:
a0:74:c2:c7:c2:11:00:2f:cd:9c:d8:de:32:87:74:
e5:51:c7:85:65:62:2e:4a:89:a6:97:21:36:80:97:
93:93:00:c1:60:98:c5:e3:1f:71:fc:9a:4c:29:3e:
4c:a8:ad:73:b1:bf:79:24:8c:c4:2a:e8:56:23:47:
20:55:84:12:f6:87:88:f8:fe:db:8e:4f:ec:3a:4d:
f0:7e:0f:29:de:0c:7b:54:1b:86:8f:30:7d:33:84:
f5:f2:bc:42:76:9f:7d:53:10:09:79:25:27:a9:c8:
4b:09:a1:1b:95:d7:fc:56:31:55:02:9e:00:c1:73:
15:b6:47:54:53:74:aa:85:e4:7a:32:e0:e4:a4:ab:
7c:02:40:c6:ad:57:67:de:d9:47:51:15:93:1d:c5:
37:73:11:22:13:71:c2:bc:01:7d:b8:e7:d3:bb:f1:
35:56:7c:c4:ef:09:b7:a8:51:26:67:24:66:60:f2:
89:e4:4e:aa:94:ea:c1:73:f5:87:1d:23:a3:c7:49:
38:4c:c6:23:a9:06:53:2f:a6:6b:65:08:aa:41:a6:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:DE:59:35:18:E9:AE:D6:7B:8A:F3:65:5A:5C:6B:CE:B0:7B:C6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Bf3eWTUY6a7We4rzZVpca86we8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
83.137.153.0/24
Signature Algorithm: sha256WithRSAEncryption
44:70:ef:28:19:db:f8:39:3e:10:63:77:66:92:e3:b2:0d:53:
e8:35:86:6e:42:c8:19:06:27:e1:80:43:2a:dd:fb:6f:e9:6f:
ea:31:6b:c1:b9:47:32:7a:8c:af:77:7f:2a:d5:ce:2b:9c:e1:
43:55:0b:f7:eb:40:89:f5:d0:52:89:59:0c:73:d0:40:25:e7:
33:7a:ad:9d:c2:91:05:16:6a:cc:f3:71:e7:da:d1:69:76:81:
0e:ff:b4:73:91:3d:05:79:f2:e8:fc:8a:20:bf:6e:e4:11:ba:
cf:b5:b6:d1:f3:37:5a:77:b8:8a:f5:ce:1d:15:8d:66:85:19:
ef:1d:e7:ff:73:48:f0:6a:f4:47:a8:3a:ac:04:b6:c2:fd:73:
7a:ba:06:f3:80:f6:c3:63:6d:57:4e:2c:0e:d6:04:52:bf:ed:
63:a1:cf:28:87:ac:c0:99:69:78:71:c2:f1:84:23:ed:36:84:
99:63:22:07:e3:a3:06:2b:da:55:01:e5:64:ab:dd:c3:d6:75:
59:f0:8f:87:bc:90:46:1b:f6:49:83:88:6d:fc:27:ae:f8:19:
40:3a:58:53:4e:97:ae:59:f9:93:7d:43:99:cf:5a:c4:2c:29:
da:8e:af:e5:8c:32:54:0a:01:13:a7:c3:a5:23:fc:d5:7a:4d:
4d:ee:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:19 2026 by rpki-client