Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa
File: s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa (raw, json)
Hash identifier: IH63TUzfzMb/SQxlsB7kB/bwWUNTCvlV00UxXhSJjuA=
Subject key identifier: B3:92:26:19:C8:D7:09:70:6B:97:F9:41:DD:41:9C:54:E1:06:D6:97
Certificate issuer: /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial: 019F2368B9536D21CAA2035E58106532E597
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203318
IP address blocks: 185.138.80.0/22 maxlen: 24
185.214.73.0/24 maxlen: 24
2a00:1ac1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:53:6d:21:ca:a2:03:5e:58:10:65:32:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3922619c8d709706b97f941dd419c54e106d697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:6c:15:0f:2e:72:bd:5d:08:4c:0a:4f:1b:
8e:5b:4d:5a:ec:9e:62:fe:85:b1:eb:8b:66:f5:4c:
88:8a:23:f4:21:9a:7b:ec:97:a7:cf:be:7d:a0:4a:
cf:a1:ca:18:4b:75:e9:37:6f:0a:85:16:34:1f:32:
b0:c6:a1:e8:f7:09:fb:45:a2:25:01:63:9f:7a:cd:
24:52:43:c8:16:18:71:9d:cc:45:6b:46:25:a1:90:
79:54:54:7a:70:79:93:7b:df:b7:84:4c:81:4a:72:
79:45:34:25:ed:2f:c5:3d:74:a9:25:7a:29:3b:13:
da:28:56:5e:d4:d3:2e:a1:c3:71:94:59:74:4e:1e:
22:22:72:a0:b3:ea:3a:39:e0:2c:f3:af:f9:2e:da:
13:46:bf:8e:e8:f2:69:54:14:7c:a8:5e:75:a5:d5:
91:4c:ba:36:87:cb:4e:54:47:99:4a:b2:77:f9:c9:
ff:5d:0a:ad:95:d1:bf:a5:53:d6:38:6e:c3:38:1b:
10:b6:22:6c:11:2d:51:96:17:13:8e:3d:0b:da:58:
87:4f:70:4c:bc:ab:99:07:77:69:fa:52:93:8a:6f:
17:e6:4a:ee:67:0a:7d:e2:37:68:a2:ce:cb:b8:a7:
bf:91:b9:cb:ac:f2:20:97:22:92:3c:13:38:ae:fa:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:26:19:C8:D7:09:70:6B:97:F9:41:DD:41:9C:54:E1:06:D6:97
X509v3 Authority Key Identifier:
keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
185.214.73.0/24
IPv6:
2a00:1ac1::/32
Signature Algorithm: sha256WithRSAEncryption
05:3a:5f:f7:49:92:7f:97:04:9d:56:64:68:9e:08:73:62:f3:
13:cc:d6:f0:ab:1c:1f:e7:e2:c2:68:ee:05:74:bf:33:e1:f2:
7c:50:ae:fb:75:55:93:91:03:91:6e:35:ee:67:a4:ad:e4:ce:
fa:d3:e6:d2:e0:82:a4:eb:05:0b:5d:0d:61:6d:f4:ea:24:ec:
39:56:6b:29:d7:13:1d:c9:44:36:a7:2b:e6:2e:55:77:2a:be:
cf:59:f4:9c:64:b3:85:cb:88:db:eb:20:7d:57:d5:a1:af:4d:
25:f9:af:94:0b:f8:f1:1f:fa:2c:1d:d6:d6:f9:9b:f3:ea:43:
a8:d0:1c:15:82:a9:d3:25:63:4c:7d:bc:55:bf:c0:9e:e3:c1:
b4:d9:39:e9:0b:9e:be:f2:26:80:1a:6b:05:d1:44:f9:ba:23:
09:23:5a:09:5e:25:0d:a5:6c:a6:5d:71:28:36:bc:ed:72:ac:
bf:ac:aa:b8:24:34:98:e9:2c:11:9d:57:9a:c6:68:7d:7b:d1:
e0:8a:e4:d8:9e:ef:a1:60:a4:55:22:21:66:d0:9f:19:8f:5b:
34:67:d1:67:4f:33:54:02:c5:2a:87:0c:70:18:6d:10:b9:66:
29:a8:6c:a7:07:14:6a:00:1a:83:1f:d3:04:42:b3:68:91:5f:
83:ce:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:49:37 2026 by rpki-client