Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/5GHGItuWgu2NHBkUyuT1w9sHbLk.roa
File: 5GHGItuWgu2NHBkUyuT1w9sHbLk.roa (raw, json)
Hash identifier: UV/ClPkiXHS5oK6NPF6bZeR3cjtsNMceTFI7CQjYMO0=
Subject key identifier: E4:61:C6:22:DB:96:82:ED:8D:1C:19:14:CA:E4:F5:C3:DB:07:6C:B9
Certificate issuer: /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial: 019F843E2CD208CF86794DC2EE3F1A65B690
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/5GHGItuWgu2NHBkUyuT1w9sHbLk.roa
Signing time: Tue 21 Jul 2026 10:34:55 +0000
ROA not before: Tue 21 Jul 2026 10:34:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49911
IP address blocks: 165.65.204.0/24 maxlen: 24
165.65.205.0/24 maxlen: 24
185.76.48.0/24 maxlen: 24
185.76.48.128/25 maxlen: 25
185.76.49.0/24 maxlen: 24
185.76.49.0/26 maxlen: 26
185.76.49.128/28 maxlen: 28
185.76.50.0/24 maxlen: 24
185.76.51.0/24 maxlen: 24
185.237.101.0/24 maxlen: 24
2a13:7200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:3e:2c:d2:08:cf:86:79:4d:c2:ee:3f:1a:65:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
Validity
Not Before: Jul 21 10:34:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e461c622db9682ed8d1c1914cae4f5c3db076cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:33:0f:d6:10:f1:8d:1f:00:66:97:e2:7f:
2c:8c:08:96:11:42:d2:6b:87:0e:a0:62:ae:8c:db:
67:61:cb:f3:d7:81:b6:03:9e:d9:4d:d1:a6:6d:d1:
2e:91:5b:78:bf:2e:29:e2:4f:d9:61:73:5c:f6:8e:
15:36:2b:fe:fe:2d:61:e3:73:96:7e:86:55:de:c9:
85:a4:6a:2c:b8:8d:69:f8:93:be:cd:a4:a3:4e:4d:
cc:8c:f0:04:db:0c:7d:e0:fe:b9:5d:8a:1f:59:72:
6c:a0:58:cd:8c:f6:19:f9:97:bc:ad:89:3a:64:71:
4a:c8:df:06:d0:f3:e9:98:d2:be:58:b9:0c:98:f2:
86:81:70:1d:25:3c:91:2b:02:29:6b:7e:26:2a:b6:
d5:61:41:47:75:40:6f:0f:dd:7f:eb:f3:56:21:aa:
ef:8b:c4:72:c6:7b:9b:7d:2d:2d:de:f0:b7:45:c6:
6f:aa:d2:04:3f:d2:42:9e:a1:ed:e9:84:fc:33:45:
70:4c:d9:7a:37:15:80:2e:cd:39:11:ea:d2:f8:5c:
af:06:d0:d4:8f:ff:a0:4a:89:f3:28:9c:f2:21:f2:
04:c2:63:e6:cf:b0:92:aa:09:5e:fa:d7:51:56:3c:
6a:c6:3c:bb:1f:4a:07:e1:ed:65:45:52:a4:f0:9e:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:61:C6:22:DB:96:82:ED:8D:1C:19:14:CA:E4:F5:C3:DB:07:6C:B9
X509v3 Authority Key Identifier:
keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/5GHGItuWgu2NHBkUyuT1w9sHbLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.65.204.0/23
185.76.48.0/22
185.237.101.0/24
IPv6:
2a13:7200::/29
Signature Algorithm: sha256WithRSAEncryption
48:de:fa:39:9d:fb:4b:bc:82:e4:24:07:66:ac:0f:d2:23:54:
ce:27:70:8e:3d:6b:c6:20:8c:c2:ca:6e:c5:e3:3d:ef:26:fd:
2f:f1:18:a0:5d:cf:3a:3a:07:23:fe:85:49:96:68:dc:3b:72:
b7:b5:ff:33:e4:4f:f3:b9:70:51:6a:2f:19:74:7a:1f:b8:ed:
e6:32:4c:68:3d:86:d2:23:d5:03:6a:f5:81:81:b5:20:b3:3e:
a2:51:24:c9:bd:b0:ac:6a:da:07:c9:c5:8b:ba:f6:8c:e1:1a:
99:71:33:32:52:b7:ac:f5:47:c8:6c:12:86:e4:5d:5b:93:7d:
ac:e3:67:38:2b:0a:97:d0:ee:82:e6:6e:28:9f:6f:f3:aa:cf:
cc:b4:20:89:38:94:80:d7:7d:1d:4a:10:af:ec:21:9e:72:ef:
a0:c5:d2:ac:f9:9f:ff:21:07:6d:b3:f6:f2:4d:35:d4:a8:0e:
30:b1:80:97:ee:27:bb:34:59:67:2a:36:3b:53:a5:9a:9f:46:
34:36:ab:03:4a:ce:df:8a:7e:a4:f9:fc:9a:9f:1f:7e:2b:83:
e1:30:9a:6c:dd:eb:bd:ee:4d:b5:31:ef:f0:71:17:c8:22:40:
64:83:ce:ac:fd:aa:64:ff:af:b4:11:7b:57:61:81:ad:a3:ff:
8f:b0:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:38 2026 by rpki-client