Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/5VBhehblaiOfuUShpivHuAhNqvU.roa
File: 5VBhehblaiOfuUShpivHuAhNqvU.roa (raw, json)
Hash identifier: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=
Subject key identifier: E5:50:61:7A:16:E5:6A:23:9F:B9:44:A1:A6:2B:C7:B8:08:4D:AA:F5
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019CDD6A3070E33F2EA635356CE8B08A8ED7
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/5VBhehblaiOfuUShpivHuAhNqvU.roa
Signing time: Wed 11 Mar 2026 15:00:49 +0000
ROA not before: Wed 11 Mar 2026 15:00:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.118.100.0/24 maxlen: 24
185.118.101.0/24 maxlen: 24
185.118.102.0/24 maxlen: 24
185.118.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:6a:30:70:e3:3f:2e:a6:35:35:6c:e8:b0:8a:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Mar 11 15:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e550617a16e56a239fb944a1a62bc7b8084daaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:6a:b9:af:ea:5d:ea:fd:f2:0d:6c:97:b9:
11:7e:39:c6:c0:be:60:88:21:92:f3:3f:c8:05:8e:
aa:b0:8a:aa:e8:55:d9:6b:d8:a4:76:64:34:31:69:
75:8c:e4:f9:8c:b7:5f:56:cf:33:b4:22:60:9c:f8:
32:96:78:18:ad:ab:28:20:8f:78:ca:68:a5:78:a3:
75:fd:09:42:54:26:c8:04:4c:aa:b3:5f:1c:86:ec:
f7:f0:80:fb:6c:77:fc:8e:2f:6c:4a:9c:ca:af:2e:
f9:f0:74:52:25:fd:51:91:ea:c6:9e:e7:11:1f:dd:
39:8e:2e:5b:6d:d3:8a:b1:7b:e0:15:f8:7e:ac:96:
1e:ca:72:7a:ee:45:48:28:ef:32:a8:dc:d3:c6:8a:
e5:6a:b6:99:66:78:15:ea:42:f2:7f:f9:2e:ea:e7:
52:16:96:10:d8:b3:06:eb:21:ae:06:24:dc:a0:15:
e2:b0:a4:4b:96:37:99:7b:c4:97:70:91:42:74:4c:
2c:48:cf:3d:09:02:b5:f5:8b:31:e0:2c:3f:b0:47:
02:84:85:03:43:67:c1:3c:11:97:97:9b:c8:08:0b:
a9:27:5d:ed:76:b7:87:10:fb:06:ac:97:69:32:2e:
79:bd:2b:09:91:69:78:26:b6:ac:4c:42:2c:3b:bd:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:61:7A:16:E5:6A:23:9F:B9:44:A1:A6:2B:C7:B8:08:4D:AA:F5
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/5VBhehblaiOfuUShpivHuAhNqvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.100.0/22
Signature Algorithm: sha256WithRSAEncryption
40:16:6b:d7:b6:7a:21:52:9c:f3:8d:4f:59:0b:20:03:e9:eb:
a4:bd:7a:3c:30:3c:2a:bc:80:ed:28:97:30:9e:85:75:11:f6:
09:b0:cf:3c:48:5d:5f:4d:4a:47:e1:91:e5:83:ff:6a:bf:27:
dd:c4:7d:a6:4d:22:8c:61:76:59:62:13:da:b1:3c:ef:4d:43:
40:80:a3:7f:e8:63:1f:6c:89:64:d9:e9:05:73:51:77:f8:4c:
1d:a0:67:ff:59:f6:44:5a:4c:ff:c5:23:2e:88:73:aa:1f:df:
b3:e8:4b:53:2d:03:61:b3:44:ce:87:7e:35:16:68:33:4a:53:
1d:0f:3b:dd:5d:a9:68:34:56:d4:22:91:bf:52:73:d3:df:00:
c0:a8:d2:f4:0e:a1:f3:d0:73:1d:f4:62:b8:85:e9:f4:41:22:
93:a0:48:4c:b1:ca:0f:8a:44:04:c9:be:8c:ff:66:a7:b6:6a:
d5:76:76:38:cc:7b:3f:27:2b:a5:4f:59:ef:92:62:01:27:d8:
82:20:3f:6b:f4:aa:8e:70:17:ad:43:e8:f1:79:d4:f6:2e:98:
47:2c:5d:20:17:5d:cf:08:94:5d:9e:fa:8b:42:80:86:83:92:
5e:8d:c9:a9:7c:ee:13:cb:c6:4c:3a:6d:6a:3e:c9:55:20:72:
dc:36:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:16 2026 by rpki-client