Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/P5Ui-kpK1vPEVB2STEDpzBGxxlw.roa
File: P5Ui-kpK1vPEVB2STEDpzBGxxlw.roa (raw, json)
Hash identifier: Vs4q2Ik9ZC5mr3F9AYR74hlHqbCCUasP+9HpkK/Vnao=
Subject key identifier: 3F:95:22:FA:4A:4A:D6:F3:C4:54:1D:92:4C:40:E9:CC:11:B1:C6:5C
Certificate issuer: /CN=c5ad1076280571925640b2aeda39cc0974c06ce2
Certificate serial: 019B7A5AB940568FEB6A6E0FF1EB6A50DCC7
Authority key identifier: C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/P5Ui-kpK1vPEVB2STEDpzBGxxlw.roa
Signing time: Thu 01 Jan 2026 16:18:44 +0000
ROA not before: Thu 01 Jan 2026 16:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203325
IP address blocks: 185.130.32.0/23 maxlen: 23
185.130.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:b9:40:56:8f:eb:6a:6e:0f:f1:eb:6a:50:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ad1076280571925640b2aeda39cc0974c06ce2
Validity
Not Before: Jan 1 16:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f9522fa4a4ad6f3c4541d924c40e9cc11b1c65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:60:4f:28:2a:e6:53:f5:c5:e4:b2:56:46:
95:af:f0:3f:45:04:20:b5:af:92:57:43:06:9f:91:
ef:b3:99:ed:1a:59:20:b8:d2:82:05:eb:5f:58:37:
65:fb:5d:12:fb:a1:84:0a:3a:bd:3e:ce:e0:c4:17:
dc:5c:52:62:44:2c:85:4f:b1:10:3d:5c:77:6d:58:
e8:2c:52:a1:e1:09:a0:b1:0a:58:4e:e7:a8:4d:90:
a7:f6:2a:94:d3:84:73:00:5f:ef:55:a9:ea:d0:2a:
8a:5a:44:d0:d5:34:a3:77:2e:fb:7d:c9:05:8d:69:
4c:08:f7:1c:d4:3d:53:28:8d:b8:96:93:18:47:b4:
f1:80:0d:27:e4:4a:25:3f:ca:2e:9c:8e:1c:af:af:
40:98:bf:8d:22:78:80:e7:b9:3d:47:a8:83:68:5a:
95:72:80:da:54:a4:8d:56:c3:97:79:22:8c:5a:31:
83:0e:81:53:3d:50:19:38:72:7f:a9:3a:ef:1d:a5:
33:04:c5:9f:4e:91:e9:9f:a0:f2:be:46:0b:c4:e7:
f1:3b:fd:97:c1:91:3f:58:d1:1b:3b:02:03:eb:55:
22:21:a9:29:87:1a:91:27:d6:81:cc:85:78:d8:d1:
9f:d1:8d:7b:2d:df:f3:0c:96:52:04:5e:fb:da:24:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:22:FA:4A:4A:D6:F3:C4:54:1D:92:4C:40:E9:CC:11:B1:C6:5C
X509v3 Authority Key Identifier:
keyid:C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/P5Ui-kpK1vPEVB2STEDpzBGxxlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.32.0/22
Signature Algorithm: sha256WithRSAEncryption
55:41:62:02:95:ef:d6:96:b6:22:a5:63:30:47:3f:0c:97:5c:
b2:cf:57:4b:79:81:63:0e:2b:30:09:20:6b:84:44:6a:86:22:
67:49:cf:4e:0d:5a:f2:06:41:0f:e8:bf:b9:70:e3:ea:48:e7:
9c:3a:19:a9:f0:02:c4:3a:96:bc:6f:d0:56:55:2f:4c:a0:98:
ed:0c:f7:3a:c0:65:99:59:37:39:d4:b9:e1:d0:99:e0:06:24:
8c:22:0a:0a:69:7f:a2:c9:a3:8b:8c:f0:2d:9b:1c:76:24:92:
50:ed:c2:fd:70:6d:7c:18:40:7a:59:b8:53:4c:ae:8d:3e:87:
58:82:1e:a8:0d:50:07:57:9a:83:f6:76:a7:7e:0b:52:a8:bf:
76:cf:97:d1:6a:9b:6d:06:99:c1:fd:b9:ff:c7:d2:37:48:ff:
08:6f:44:29:37:aa:9b:09:41:d7:d4:70:de:68:b9:ad:40:77:
98:f1:67:9d:4c:65:d8:55:27:af:10:4d:00:fe:10:90:0d:6b:
84:d6:92:9d:45:f4:ae:13:a6:4e:05:69:84:ff:71:a9:86:bb:
c0:aa:fc:53:c7:22:7e:00:83:5a:93:2a:c2:3a:2d:56:8d:7a:
47:e7:68:bb:16:65:9a:25:5a:a0:fb:c9:37:6d:57:4d:82:95:
46:28:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:14:20 2026 by rpki-client