Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/3rkjwwginUfLartcn5VoY9PgC_E.roa
File: 3rkjwwginUfLartcn5VoY9PgC_E.roa (raw, json)
Hash identifier: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=
Subject key identifier: DE:B9:23:C3:08:22:9D:47:CB:6A:BB:5C:9F:95:68:63:D3:E0:0B:F1
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019CE32B9C57966579E50BB50A1E58757B2E
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/3rkjwwginUfLartcn5VoY9PgC_E.roa
Signing time: Thu 12 Mar 2026 17:50:11 +0000
ROA not before: Thu 12 Mar 2026 17:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211775
IP address blocks: 5.150.8.0/21 maxlen: 21
5.150.63.0/24 maxlen: 24
194.59.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:2b:9c:57:96:65:79:e5:0b:b5:0a:1e:58:75:7b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Mar 12 17:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deb923c308229d47cb6abb5c9f956863d3e00bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:f5:34:c2:73:38:cc:7e:2e:a4:fb:c9:a0:
af:40:25:eb:68:7a:bd:f0:ca:4d:54:f1:40:4d:25:
25:35:09:aa:a0:48:a7:68:ac:cb:87:4e:a5:5d:a3:
1e:27:a6:84:17:95:24:6f:02:3e:22:85:ea:cc:fc:
af:92:a6:76:27:86:4d:d7:74:e0:da:72:a0:11:4a:
15:64:29:63:27:54:a0:f8:d4:4f:40:81:ae:89:64:
f9:c3:92:7f:a8:29:17:c0:f8:8f:92:67:ca:3c:2f:
8e:2b:5a:e1:58:b2:ff:eb:3d:f5:75:e6:1b:a4:fd:
57:3a:2f:57:d6:30:9d:1c:5c:08:7d:da:21:6d:f8:
8f:68:5b:bf:26:e8:75:e5:af:02:a4:f2:a3:dc:e0:
dc:3e:6a:4b:d8:79:9c:d2:af:56:d3:16:d5:09:d7:
c2:a3:b7:51:f1:f9:fe:17:61:95:18:65:64:94:1d:
33:6b:ea:0b:ac:4b:7d:ac:7b:a0:1f:94:02:cb:f2:
6f:22:5c:c8:25:91:fc:d5:ff:f0:b9:66:62:2d:df:
13:6d:3b:fe:b5:31:31:2b:37:87:77:7a:ea:0d:50:
46:b3:de:d4:da:3a:69:f4:78:99:a6:28:5f:d3:1d:
ee:5e:65:cc:aa:a0:46:e9:d6:89:4f:40:d1:d3:c1:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:23:C3:08:22:9D:47:CB:6A:BB:5C:9F:95:68:63:D3:E0:0B:F1
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/3rkjwwginUfLartcn5VoY9PgC_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.8.0/21
5.150.63.0/24
194.59.0.0/23
Signature Algorithm: sha256WithRSAEncryption
90:4f:94:e9:90:13:d2:fd:6c:a6:4b:b6:96:68:ef:78:6e:86:
6d:a1:86:bd:6f:40:cf:6c:18:f0:50:c8:5e:2e:bf:33:3a:49:
09:9e:5d:66:31:1a:f7:0f:c6:b8:fc:8d:0e:8a:1f:ef:65:29:
63:de:56:87:2d:2f:39:57:d9:0a:b8:41:51:53:39:2a:1a:57:
fe:a2:11:28:38:23:9d:46:78:60:a9:8e:5b:fe:f9:11:26:7a:
35:4a:59:90:2d:4f:5f:40:09:68:97:91:b0:7a:29:62:6d:ef:
0d:dd:13:e9:cc:0e:78:9a:7d:b9:ab:f1:c2:3f:dd:7e:d4:b4:
86:55:9c:51:b3:89:8b:50:51:e8:77:5a:93:59:15:9a:d1:22:
88:02:24:b6:39:f3:c1:a2:40:72:d0:ad:b6:56:c5:6c:86:fe:
ca:df:51:45:ac:86:1d:e2:4e:6c:8a:c3:25:37:3a:73:ca:97:
da:29:3b:cd:61:a7:7c:31:3c:ae:5f:78:36:f1:11:cc:da:80:
35:61:b9:8f:e6:1a:14:1e:57:cb:66:5f:90:8b:5b:dd:97:41:
d1:e1:14:9f:cb:d3:f1:a6:48:9c:33:6b:c5:8e:b2:5a:63:3a:
5e:a3:6a:05:60:84:eb:71:e6:af:df:c7:b2:2a:03:d0:ec:6f:
89:f6:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:37 2026 by rpki-client