Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/5X8wgdH5y24itbLU8yRzu5aEvw0.roa
File: 5X8wgdH5y24itbLU8yRzu5aEvw0.roa (raw, json)
Hash identifier: Y2Cskp+xn3/2TRNZa+iJKkWrN4s4Hf7dbVxygkD/yR8=
Subject key identifier: E5:7F:30:81:D1:F9:CB:6E:22:B5:B2:D4:F3:24:73:BB:96:84:BF:0D
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A0C83C8F5D1CEA54AEA00BDF78AF342A54
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/5X8wgdH5y24itbLU8yRzu5aEvw0.roa
Signing time: Tue 22 Sep 2026 08:30:07 +0000
ROA not before: Tue 22 Sep 2026 08:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 185.70.240.0/24 maxlen: 24
185.70.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:3c:8f:5d:1c:ea:54:ae:a0:0b:df:78:af:34:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Sep 22 08:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e57f3081d1f9cb6e22b5b2d4f32473bb9684bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:a2:d9:58:b0:ca:d1:3c:ba:5a:7b:db:4d:
f7:c5:e3:37:9b:9d:40:44:b5:a0:b3:a8:34:c3:d0:
10:21:c6:b9:8e:63:96:4b:00:09:dc:5c:05:f1:16:
6d:be:16:26:8f:5e:c5:6a:9e:0f:a8:fa:33:58:6b:
bd:e5:89:81:02:db:0c:5d:94:fc:fb:8e:ec:97:be:
86:48:f1:55:ce:80:13:b8:54:82:d7:b7:6b:c2:57:
40:79:10:9d:d7:55:94:22:09:c7:f9:69:5b:18:af:
19:b4:a9:75:87:e9:7f:6a:80:e9:ce:12:87:30:18:
03:56:cf:84:96:92:5c:76:b2:c2:07:96:87:e7:83:
83:3f:4d:8a:72:92:66:45:06:d9:95:61:29:57:29:
bb:f2:dc:5d:c4:12:b4:36:83:66:b5:1e:0f:cc:d3:
6a:f4:44:48:13:e2:b5:ef:4b:d9:08:b5:62:5e:99:
bf:f0:2e:bc:a6:85:23:a5:d3:47:dc:f2:05:86:9c:
f2:b8:c3:6b:2a:77:3e:4b:c6:9f:dd:2c:0e:2a:54:
dc:ec:9b:90:ec:43:97:63:40:9e:4d:3c:03:8f:33:
6a:3c:e8:6c:01:01:65:8f:49:fc:84:1f:a7:10:39:
a2:35:76:cd:92:41:59:e2:f2:42:85:27:ad:e5:94:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7F:30:81:D1:F9:CB:6E:22:B5:B2:D4:F3:24:73:BB:96:84:BF:0D
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/5X8wgdH5y24itbLU8yRzu5aEvw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.240.0/23
Signature Algorithm: sha256WithRSAEncryption
16:2d:e4:f2:fb:71:54:d6:46:81:d4:0a:e8:9f:88:4a:32:60:
43:ac:c6:46:01:8f:1e:ce:c5:c2:4a:ee:66:c8:17:0f:34:00:
a2:2a:7e:ee:a5:6d:6b:c5:71:a3:f3:66:38:d5:8f:23:1a:cf:
85:2c:31:99:d2:8c:0e:4e:a7:04:e4:cd:e0:70:db:eb:09:24:
27:e4:71:90:dd:9c:d0:02:8d:48:da:3f:54:d4:99:3c:23:55:
7a:da:b3:d3:74:15:fd:84:10:a6:4c:33:95:11:27:af:92:2d:
00:64:74:b9:5f:8b:fb:30:eb:91:c9:9d:e2:74:66:4a:4b:f8:
46:a6:37:94:54:98:6b:2d:ed:b2:c3:c6:08:20:7d:2f:10:c6:
5c:60:a0:32:d5:34:c1:f9:96:82:e1:8f:ff:e4:10:54:15:04:
ad:52:69:93:e2:01:b6:a5:15:ce:f1:7b:cb:97:ec:3a:27:a1:
ab:d3:6a:4e:3a:b1:8c:4f:23:44:00:e6:d4:a0:0c:21:73:f0:
26:6b:dc:82:b2:c7:76:ed:aa:28:8d:d1:e2:b1:13:c0:f3:ab:
3e:cd:44:9d:a9:d1:7b:ee:2b:53:a5:b5:b9:d6:b7:84:b6:08:
30:63:13:e7:5c:91:d6:ce:ff:10:34:f4:45:3c:a0:12:e9:64:
f7:dd:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:25 2026 by rpki-client