Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa
File: rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa (raw, json)
Hash identifier: K9+yeHMyCMe7ixPfjQR9+OVohi0uFghFyjSd0m5FsQ8=
Subject key identifier: AC:4E:25:56:5D:52:53:DA:0D:FF:9E:5B:F0:43:FE:0E:50:3F:D0:B4
Certificate issuer: /CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Certificate serial: 019F2368AE371C5229DF51539FE1935FBDD6
Authority key identifier: 05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212606
IP address blocks: 185.178.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ae:37:1c:52:29:df:51:53:9f:e1:93:5f:bd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac4e25565d5253da0dff9e5bf043fe0e503fd0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:e2:cc:b3:c1:b5:40:15:6a:40:f8:ec:a6:
5e:0c:ff:f3:88:79:e1:2f:89:8a:1c:e6:b8:7d:1b:
14:e9:d4:e2:dc:3b:1f:06:30:93:3e:ff:6f:56:10:
06:5d:85:81:4a:69:69:29:d1:e5:ed:9b:72:6b:00:
4d:fe:be:4a:63:18:9e:4b:af:ad:6b:5b:84:b4:ee:
a7:7f:82:d6:75:0f:d8:28:56:62:d8:1a:a7:1f:8c:
b6:2d:8f:da:9e:e0:3d:76:16:76:5f:42:78:88:58:
4e:20:6a:8f:70:85:1a:c8:a6:a8:91:2a:41:55:07:
70:56:7a:62:06:e7:1a:50:a1:cc:eb:78:bc:0c:07:
51:9b:2e:1e:b0:dd:a6:b3:18:0e:92:a8:d6:92:e9:
82:1f:a7:b8:a5:ee:90:a2:6f:6f:ad:92:d1:e8:f8:
56:57:d9:62:d2:9e:26:97:16:a7:d2:8a:a2:b8:78:
38:63:87:a2:dd:1e:d0:15:6c:a6:94:90:b3:d2:05:
60:ad:b0:82:b1:7c:93:d2:ae:48:fa:d2:3e:9e:c2:
a9:bb:2d:0a:5f:26:fb:66:41:e3:8a:6f:6d:a9:3b:
d7:68:0e:1b:9c:37:9f:4d:0d:e9:68:e0:8e:c2:94:
69:c1:c4:65:1d:fb:23:71:0f:2f:a1:fb:33:6b:b4:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4E:25:56:5D:52:53:DA:0D:FF:9E:5B:F0:43:FE:0E:50:3F:D0:B4
X509v3 Authority Key Identifier:
keyid:05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.49.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7d:5b:1e:42:5b:01:33:2d:f4:f5:03:57:6d:34:40:10:a5:
8d:ec:0e:c4:66:49:f3:d0:f0:a2:85:4f:af:69:1d:35:12:48:
f1:61:63:36:73:d1:c1:c6:44:55:9f:4d:9a:43:4c:ab:10:63:
50:8a:a5:a7:17:01:00:20:34:14:e4:dd:79:27:d5:24:d7:26:
52:a6:34:94:f7:ea:ab:a6:d1:bb:af:4c:a1:b6:c3:54:67:e3:
dd:65:be:c1:4c:1b:36:3a:ee:32:ee:20:6b:31:b9:07:ff:d2:
45:9e:4f:e4:c8:7d:1c:3e:52:a0:4c:86:ea:07:55:d8:27:b9:
04:42:98:d8:0d:2f:1e:46:89:19:60:9e:15:f8:32:9e:33:c1:
57:ec:da:5d:7d:dc:cf:29:67:7d:92:9e:53:93:d7:11:08:4e:
03:6f:70:4f:bc:b8:24:ec:ad:ea:0a:f8:29:eb:26:68:11:fb:
27:e3:6f:9c:36:98:55:44:2a:1e:f3:8e:bb:aa:14:95:c1:86:
ed:9f:25:e0:7e:2c:ab:28:3c:c9:5f:c4:10:26:57:f2:30:5c:
d2:27:75:49:d6:fd:17:a5:56:01:c7:41:43:6c:2e:ec:8f:b3:
43:61:6b:e3:9c:fe:c0:bb:aa:83:5e:0d:8d:16:6c:f5:2c:d4:
3a:31:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:05 2026 by rpki-client