Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa
File: A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa (raw, json)
Hash identifier: Vg1LcQNz/XKk+x/pf6T3VfFuldheMFgMWkJ/JA6myNs=
Subject key identifier: 03:93:0F:0C:AA:01:E4:5C:7A:2A:FE:4F:50:DF:F1:14:92:D4:1C:83
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019F1722CCA34723C65316CBC8E6DE4EDDAD
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa
Signing time: Tue 30 Jun 2026 06:06:24 +0000
ROA not before: Tue 30 Jun 2026 06:06:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.139.176.0/24 maxlen: 24
185.139.177.0/24 maxlen: 24
185.139.178.0/24 maxlen: 24
185.139.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:22:cc:a3:47:23:c6:53:16:cb:c8:e6:de:4e:dd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jun 30 06:06:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03930f0caa01e45c7a2afe4f50dff11492d41c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:9c:d0:36:a9:65:87:aa:41:6d:af:a8:1a:
3b:f6:2d:ba:5b:cd:57:e7:b8:db:e7:b5:44:7a:47:
45:98:3a:9e:6e:d3:0d:1a:d8:e1:77:5c:a3:aa:d2:
f3:8c:b7:59:c7:87:67:85:83:29:83:d8:4a:0d:70:
76:6c:74:c4:6f:ae:1a:38:db:da:90:e7:88:46:33:
a6:ad:4e:18:10:c2:da:45:a7:2b:bf:72:90:87:85:
56:86:6e:a7:1a:e2:43:1c:b0:72:b6:d8:45:c8:5d:
0f:e3:73:02:af:09:02:79:a8:65:03:31:d0:50:b1:
3c:17:17:8e:13:59:08:80:99:fc:52:0a:07:16:d8:
3f:bd:26:51:69:47:0d:c6:40:e7:50:1b:48:67:e6:
e8:e3:63:6e:21:56:fb:3a:23:df:26:fc:fb:9f:90:
d3:29:8b:36:fb:ca:da:a9:82:a9:7a:2a:9a:fe:34:
41:7e:a9:ad:6c:ed:ea:0d:71:2d:3d:0f:3d:ec:66:
e4:94:62:53:56:4e:1c:a1:75:57:af:fc:76:60:3e:
f6:09:f6:10:7e:d8:70:7b:36:ad:08:fa:85:f8:2b:
f5:df:38:51:b7:d3:ed:fa:91:a7:e9:13:39:43:e0:
73:67:0f:5f:b3:dd:be:dd:18:dc:71:a5:e0:b6:8b:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:0F:0C:AA:01:E4:5C:7A:2A:FE:4F:50:DF:F1:14:92:D4:1C:83
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:74:06:a0:7d:21:c1:90:99:c6:ae:5e:87:0b:8a:a0:dd:f0:
77:87:d5:b4:ff:35:f7:68:b2:02:f4:e7:fd:e7:06:8a:2f:06:
2d:13:f7:f6:14:6b:b1:27:a5:c2:aa:dd:9b:6b:f7:dc:31:fe:
1b:49:69:20:3c:b0:4f:ca:58:50:3a:34:65:b5:92:87:e0:fa:
99:90:62:7d:1d:6c:71:bb:45:7f:88:de:32:a1:da:70:d6:a9:
34:9d:e6:ff:73:b7:23:38:17:f0:ca:69:3d:c0:5c:17:33:60:
ed:f7:d5:b5:bd:98:cd:4d:d0:65:a9:a8:35:04:22:1d:52:79:
9b:39:e1:63:49:0d:a4:26:b2:fb:fd:64:43:0a:32:3b:0c:58:
92:6e:5a:32:e7:c2:f8:81:ee:46:e3:50:f7:62:9b:0e:c7:5b:
98:bc:27:bd:d3:0a:6b:c4:e7:22:ae:1b:fb:fb:8a:9b:04:e1:
70:12:03:12:23:aa:a1:3d:fc:d7:17:79:cc:5e:07:c7:bc:b6:
3c:7a:8b:b7:67:32:c5:33:da:50:b6:44:c1:f0:7b:56:71:76:
ab:27:30:8a:64:25:47:3f:62:07:99:40:1f:e7:25:d4:db:11:
39:91:95:94:14:13:41:05:89:6a:00:70:48:fc:0d:81:4d:df:
7c:4a:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:25 2026 by rpki-client