Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/v5Gk-SvsMlwLeGXo-bf0g2JN8lw.roa
File: v5Gk-SvsMlwLeGXo-bf0g2JN8lw.roa (raw, json)
Hash identifier: ixTxIDHKTxoajzi+yXrvev4yk36gH7a2isl5U2DpEWc=
Subject key identifier: BF:91:A4:F9:2B:EC:32:5C:0B:78:65:E8:F9:B7:F4:83:62:4D:F2:5C
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 019F23686DA06E62EFABA78E2E31ACBDDA5E
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/v5Gk-SvsMlwLeGXo-bf0g2JN8lw.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211874
IP address blocks: 185.128.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:a0:6e:62:ef:ab:a7:8e:2e:31:ac:bd:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf91a4f92bec325c0b7865e8f9b7f483624df25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:b2:7b:4d:0c:75:3d:b2:4d:d0:c4:a2:b5:
aa:05:02:14:34:c3:47:aa:97:a3:d0:d1:ef:de:69:
c9:85:44:e5:8d:3b:2d:f3:c3:4f:72:ee:84:87:77:
26:0a:19:9b:d8:63:9f:bf:48:45:41:bd:44:82:7e:
9f:07:22:10:d5:83:95:dd:19:7d:64:79:17:e5:a1:
22:9e:58:23:80:0e:0f:2f:6d:dd:7c:39:10:04:42:
8d:a1:b1:45:50:32:04:58:f9:2a:c8:67:fa:31:b9:
7f:f6:43:d0:2b:a5:06:d5:74:ce:5c:0e:3f:d1:1b:
ea:b6:70:ab:c6:59:53:a7:52:7d:da:59:ba:96:a1:
0e:33:13:cf:f3:01:db:52:ad:ae:6b:e4:40:07:49:
8e:b6:12:23:e3:7f:39:66:3b:e3:09:25:12:8f:a5:
03:75:ad:9c:e6:19:3e:8e:ed:27:2c:8d:c8:be:07:
0f:9e:7c:35:c1:82:23:fd:d9:08:8c:07:64:66:bf:
a2:cd:06:ec:b9:2e:7d:d8:70:09:ac:f6:47:46:8a:
72:8f:97:04:d4:a5:10:04:6a:bd:cb:e6:97:b6:22:
33:44:87:77:0c:51:b2:a8:05:c0:67:07:78:48:f1:
af:e6:f1:f1:63:02:d8:34:69:18:8b:83:a0:63:3d:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:A4:F9:2B:EC:32:5C:0B:78:65:E8:F9:B7:F4:83:62:4D:F2:5C
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/v5Gk-SvsMlwLeGXo-bf0g2JN8lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c5:93:c5:4d:39:52:1a:49:f1:da:88:e7:c7:c4:d5:32:09:
6d:32:74:79:d3:61:38:c4:73:5c:08:dd:0b:c0:1b:a6:16:f5:
24:7c:34:77:2d:4e:7b:2a:66:cc:47:da:bb:47:9b:30:de:09:
7e:8d:3e:41:02:52:ca:91:ef:5e:1f:67:cb:d9:db:8e:08:46:
92:48:68:c2:22:e9:3d:93:d1:8a:b8:fa:09:a6:ac:4d:5c:de:
8f:7b:ac:f7:50:64:4f:79:41:1d:a5:23:fe:00:75:dd:ab:30:
38:12:b5:41:39:31:e4:d9:b6:a0:bf:90:c2:fc:e4:30:bd:8e:
3b:79:3a:e4:53:81:38:ce:85:c9:e9:3f:f8:fd:90:34:8d:73:
de:7e:f0:35:63:e2:92:a9:dc:3d:52:b1:6f:4e:63:84:f6:23:
07:b5:fb:04:d0:1d:9d:3b:42:b1:b1:70:e1:10:b8:dc:17:f7:
c4:c2:b9:83:3b:b3:ab:eb:ff:cb:eb:3e:b5:b7:f4:6c:61:31:
55:95:b0:ae:12:96:b6:55:83:d5:94:e0:ea:ca:b2:e8:3d:c8:
c1:23:de:08:07:1e:02:7a:69:26:12:a6:8c:74:48:79:a8:07:
2c:54:f9:6f:aa:1e:0a:ab:3a:f6:62:6e:2d:71:e2:4f:ff:d7:
53:5a:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:47 2026 by rpki-client