Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa
File: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (raw, json)
Hash identifier: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=
Subject key identifier: 92:ED:16:4F:10:EF:3E:FD:81:45:25:A6:85:55:F1:24:1C:E2:D0:43
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019DBEFDA32B42923419FFB775FF1DF2BFFB
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa
Signing time: Fri 24 Apr 2026 10:16:26 +0000
ROA not before: Fri 24 Apr 2026 10:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:fd:a3:2b:42:92:34:19:ff:b7:75:ff:1d:f2:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Apr 24 10:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92ed164f10ef3efd814525a68555f1241ce2d043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:b6:78:05:88:15:b5:53:4b:0b:34:9c:49:
25:d7:a7:fc:5c:b9:5b:44:66:44:72:1a:6f:48:ed:
da:c6:0a:5c:d6:b4:5b:8f:90:f2:92:f1:4e:68:2a:
a1:8e:6c:e0:a9:1e:6a:78:f8:44:2e:83:84:ea:0f:
a5:5a:a6:05:73:e6:4c:c4:f3:ad:fc:de:92:a9:c0:
75:56:56:08:91:0f:59:a3:42:79:ea:87:3d:3a:af:
ac:60:ae:a8:ff:dd:e2:b8:11:0c:31:73:27:a6:83:
cb:40:1a:79:42:66:5a:e1:42:b5:3d:70:22:54:9a:
de:d0:ca:3d:42:30:78:30:14:4d:89:54:e8:7c:09:
24:75:ad:13:f5:bb:50:93:91:c7:1c:a6:34:cc:c0:
94:6d:34:c1:b9:31:cc:a8:99:2b:60:6c:f2:9a:9a:
f0:41:35:c5:12:e5:be:47:a6:2e:8f:9c:c8:af:20:
92:dd:34:49:13:e8:70:f1:7d:0c:f4:c3:e4:8d:e1:
2b:02:a2:52:ef:84:95:9c:2e:0f:5b:ae:ba:d8:49:
d4:a6:ad:da:a7:de:a8:2a:06:01:3e:cf:71:ac:a1:
74:21:ad:73:ee:98:6d:7d:7a:82:00:9a:05:74:9e:
0c:94:fa:94:66:84:60:3f:4e:cb:4a:ea:c7:4f:e3:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:ED:16:4F:10:EF:3E:FD:81:45:25:A6:85:55:F1:24:1C:E2:D0:43
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/23
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:1b:cc:1d:c4:db:90:d1:66:b1:63:b5:6d:cf:c2:18:a8:71:
b7:51:28:a2:be:66:06:2b:43:44:39:c3:af:89:e7:f3:13:af:
20:81:b9:74:a7:b8:7b:11:4c:d3:ee:07:e5:25:d9:7b:8e:ba:
78:ba:88:5a:2e:00:a2:60:31:64:57:56:5d:1e:2f:02:c0:61:
65:2c:f5:dc:04:af:ef:9f:0d:7a:3b:4d:34:af:79:af:97:b9:
3c:b0:49:5e:5d:ed:cb:41:1d:46:01:67:8f:d5:9e:72:50:d7:
c1:9a:f1:bd:f5:8f:51:62:7f:ed:d9:26:9d:99:ae:1c:bb:b1:
64:07:9d:ba:7d:25:56:ab:a2:dd:91:5f:87:e2:fd:0d:54:9e:
9e:eb:a3:0e:f8:55:82:4d:c1:af:83:89:cc:2e:03:b9:18:8b:
de:13:7d:9c:a5:fb:25:0e:95:f6:12:05:64:44:54:4d:5c:d7:
2c:dd:65:61:ac:87:a7:5e:b3:87:5c:d9:00:9a:17:1c:75:87:
fe:56:4d:9d:e3:25:14:b3:a9:ea:26:ca:a8:93:dc:48:0f:9f:
ab:a9:2a:cd:7d:02:72:8a:5e:85:23:4d:75:9b:08:c9:f0:cf:
50:35:35:f0:13:e7:0b:2c:f4:2a:6b:3a:b1:8a:e4:a5:9d:05:
c0:c5:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:06 2026 by rpki-client