Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/GCyqvuoIZajxaCMA5AGnKxXrf44.roa
File: GCyqvuoIZajxaCMA5AGnKxXrf44.roa (raw, json)
Hash identifier: 7+IYj0mwkXD09LidnWg7fLKgRz56zO9scadgs8zfXsQ=
Subject key identifier: 18:2C:AA:BE:EA:08:65:A8:F1:68:23:00:E4:01:A7:2B:15:EB:7F:8E
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019F1C8A00C6850D988403F82DF4BFE52CFD
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/GCyqvuoIZajxaCMA5AGnKxXrf44.roa
Signing time: Wed 01 Jul 2026 07:17:13 +0000
ROA not before: Wed 01 Jul 2026 07:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214998
IP address blocks: 5.160.35.0/24 maxlen: 24
5.160.149.0/24 maxlen: 24
46.209.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:8a:00:c6:85:0d:98:84:03:f8:2d:f4:bf:e5:2c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jul 1 07:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=182caabeea0865a8f1682300e401a72b15eb7f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:62:d4:f1:72:5b:4f:c9:ed:c2:2c:1d:fb:
fb:5a:8b:0c:3b:e7:8d:2a:8f:e1:0f:c5:3f:69:80:
13:69:ea:1f:e2:75:4e:dc:d8:e9:b5:cb:ab:0a:60:
be:d0:34:f4:a2:73:21:9b:d3:3a:d2:fe:8b:cb:7e:
c6:88:71:f4:d4:9f:2f:1e:46:06:c2:14:26:4f:26:
96:6a:b8:9d:30:fd:1f:1d:bc:54:6e:38:50:7b:84:
d4:dd:91:0e:d1:3e:81:25:82:f9:d5:14:00:dc:4c:
b6:61:64:f2:b0:77:99:bc:bc:88:9e:98:88:bf:41:
a9:1f:ce:bd:a3:03:aa:b2:f8:66:71:8b:23:83:d0:
e3:6c:55:17:f8:a2:51:78:5f:11:07:5b:3c:1a:27:
cf:e3:1f:84:f7:7e:a5:7e:3c:6b:2f:b1:7b:e9:a7:
0d:44:e5:3b:57:6d:01:69:79:7f:4c:ed:65:a2:73:
dc:55:e6:df:1e:e0:55:db:1f:78:89:4a:d5:bf:67:
28:e2:d3:6e:21:4e:f3:56:92:ec:b7:0d:18:25:41:
4f:83:71:2c:0d:18:dd:d3:06:98:89:be:8f:37:7d:
69:d8:70:67:fb:06:57:4e:9d:16:06:78:08:3e:2f:
c5:72:84:e3:a1:8e:0b:62:5d:0f:ae:db:86:82:3b:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:AA:BE:EA:08:65:A8:F1:68:23:00:E4:01:A7:2B:15:EB:7F:8E
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/GCyqvuoIZajxaCMA5AGnKxXrf44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.35.0/24
5.160.149.0/24
46.209.54.0/23
Signature Algorithm: sha256WithRSAEncryption
81:ed:20:70:9d:93:5b:a2:3b:09:a6:73:1a:36:93:48:b2:19:
25:37:f3:a5:c4:8d:be:3c:23:78:10:9c:81:59:c4:81:3d:91:
77:bb:38:9a:80:58:e1:ec:b6:4e:8c:b8:b8:0b:76:00:a3:17:
16:fe:8a:78:cd:2c:ef:0d:8d:b5:75:ac:38:3c:0e:07:8d:61:
7f:b8:d9:52:4b:06:0d:c7:96:6a:d9:d3:ac:cf:3e:7f:88:23:
d7:d9:26:bc:23:ab:16:a2:be:75:8a:d6:8f:10:aa:38:6e:88:
f2:25:c6:02:09:74:49:cd:28:35:18:f3:12:f1:c9:06:e3:74:
ad:ba:bc:7f:6d:4e:63:39:d7:8f:c6:02:22:3a:93:67:7e:3e:
60:11:3b:57:dd:da:6a:7d:d5:a8:ee:49:ca:94:5e:98:5b:35:
2d:14:d3:1c:a6:e1:c4:d7:0f:4e:94:b9:0e:3f:94:c5:40:0b:
5e:cd:46:a0:59:ff:60:8f:d1:d4:43:03:75:98:3a:03:c4:5a:
ec:8c:33:b2:3f:d0:28:b2:07:37:ce:7d:8d:53:fb:f9:cd:93:
ee:da:81:a1:63:1c:a4:99:d0:b5:1d:51:56:b9:d0:78:a8:f3:
75:7f:ee:d8:18:38:6c:c7:36:e1:34:a0:bf:18:d9:9d:7b:d0:
88:dc:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:24 2026 by rpki-client