Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/aKhm2-SBdzrHdgwny5hqJBNb4vs.roa
File: aKhm2-SBdzrHdgwny5hqJBNb4vs.roa (raw, json)
Hash identifier: WMJxq1jHFHDP5TrE/Oav78icsdu5DH2NggBTM3k9YS0=
Subject key identifier: 68:A8:66:DB:E4:81:77:3A:C7:76:0C:27:CB:98:6A:24:13:5B:E2:FB
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019E16C9FCEEEF807A0354570D118EC1D4E6
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/aKhm2-SBdzrHdgwny5hqJBNb4vs.roa
Signing time: Mon 11 May 2026 11:26:36 +0000
ROA not before: Mon 11 May 2026 11:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 84.37.64.0/23 maxlen: 23
212.180.6.0/23 maxlen: 23
212.180.10.0/24 maxlen: 24
212.180.16.0/22 maxlen: 22
212.180.32.0/22 maxlen: 22
212.180.52.0/24 maxlen: 24
212.180.60.0/22 maxlen: 22
212.180.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:c9:fc:ee:ef:80:7a:03:54:57:0d:11:8e:c1:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 11 11:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68a866dbe481773ac7760c27cb986a24135be2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:8d:d8:7a:ed:83:80:8c:b3:ca:b7:7a:8b:
9c:3f:31:af:c2:f5:08:a1:56:5b:1f:80:73:4d:88:
f6:5b:ed:d8:38:52:7d:91:1e:ea:59:3d:cf:9a:ed:
91:2e:1e:18:d8:35:f0:1d:c9:67:54:24:d1:e7:ba:
97:d7:c9:03:ea:5c:1a:f5:5e:22:57:2c:b2:f5:d6:
d5:4a:ca:a1:14:9c:69:96:3a:70:57:f9:9e:ea:78:
e9:51:44:4e:ff:32:9c:43:bd:b3:b8:fc:f0:80:6b:
6d:91:e4:5d:7b:09:49:f4:0e:f3:7d:df:c3:e2:90:
84:71:51:39:76:b6:08:9e:cc:0f:bf:c4:c9:a4:12:
a8:eb:07:29:16:7e:cc:3b:ef:57:f5:49:fb:91:4e:
1d:52:6a:f6:f0:d7:37:9d:7d:42:a6:4d:cf:7e:83:
b4:26:a8:0e:a0:e1:60:4f:40:61:b5:b3:a0:3a:ad:
8f:fd:8c:6a:1d:6a:de:09:6e:b8:c3:8a:ad:cb:5b:
6c:7f:a1:7f:0a:e5:5d:0b:4e:f8:cb:96:e3:0c:9a:
c0:76:e7:1d:7f:9d:2e:e5:0e:2d:d2:15:c4:35:b7:
6a:2e:d1:1c:87:11:21:2c:f7:01:91:4b:27:35:c0:
81:81:cf:73:6b:fa:ee:2a:22:d4:14:15:13:02:55:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:66:DB:E4:81:77:3A:C7:76:0C:27:CB:98:6A:24:13:5B:E2:FB
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/aKhm2-SBdzrHdgwny5hqJBNb4vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.64.0/23
212.180.6.0/23
212.180.10.0/24
212.180.16.0/22
212.180.32.0/22
212.180.52.0/24
212.180.60.0/22
212.180.104.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:1e:12:20:97:01:2d:12:e1:2f:b0:16:44:0d:e0:19:5e:5d:
01:29:5f:37:ed:eb:ee:7f:ed:b6:a3:0f:0a:0f:ce:99:a3:1c:
8a:3f:26:00:a3:f2:e5:43:4e:f5:09:7d:bb:f2:bc:ce:d2:68:
e9:02:b6:13:83:be:6b:55:39:cf:57:f9:f2:ad:98:20:ab:19:
98:9c:9a:87:93:68:59:87:90:69:21:0a:94:fc:0c:87:6e:ab:
a3:96:58:4f:bf:8e:b0:bb:ef:63:ef:77:1e:b6:43:15:12:9a:
89:33:83:57:43:7a:1f:15:bd:1a:60:dc:69:ad:8f:1e:bd:79:
29:8d:6b:48:7c:67:d7:d1:b8:59:16:b9:1e:e4:c8:bf:28:ad:
e0:f1:7d:5b:04:0b:a8:97:03:3d:15:af:a5:24:5e:e2:0d:9e:
11:d4:5a:33:6d:eb:c8:c0:0c:33:8f:fd:fa:d8:27:60:f4:86:
ad:1c:ce:45:15:f7:d7:86:56:da:81:05:f9:2d:b1:4d:11:59:
e7:30:95:da:59:1e:0f:28:2b:f0:cc:c1:fb:cd:fe:ba:67:47:
34:3f:5b:1c:62:3c:e9:3e:b1:1c:c4:8f:f5:de:7a:45:15:14:
f0:6a:35:89:19:3a:f6:42:a6:43:fc:08:e1:ea:fc:7d:ce:c6:
1a:1c:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:35 2026 by rpki-client