Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/RghnkC7lpzyqEt-bFvtVPzkig_M.roa
File: RghnkC7lpzyqEt-bFvtVPzkig_M.roa (raw, json)
Hash identifier: hBlMhr0CGa8UWmuUtAYqcy1sZ/1KrVhJfYSSNWmqDco=
Subject key identifier: 46:08:67:90:2E:E5:A7:3C:AA:12:DF:9B:16:FB:55:3F:39:22:83:F3
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 01A057C8CD4E15729852E230D66D2DE997E8
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/RghnkC7lpzyqEt-bFvtVPzkig_M.roa
Signing time: Mon 31 Aug 2026 12:26:12 +0000
ROA not before: Mon 31 Aug 2026 12:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203641
IP address blocks: 5.182.160.0/22 maxlen: 24
185.107.160.0/22 maxlen: 24
193.111.170.0/24 maxlen: 24
2a0b:dc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:c8:cd:4e:15:72:98:52:e2:30:d6:6d:2d:e9:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Aug 31 12:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=460867902ee5a73caa12df9b16fb553f392283f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:72:c8:13:ec:61:71:71:5b:fa:4a:e8:98:
a3:8e:0b:4c:f0:1a:b5:5f:11:4f:0e:00:33:c3:9e:
b0:bb:bf:37:0a:06:10:c6:5f:e0:23:2b:0e:de:b3:
3a:d9:d2:87:76:ea:03:6c:63:fc:3e:64:67:10:57:
1f:ed:6f:d9:4e:7c:b7:d1:4e:bf:98:80:2b:57:f8:
8c:a7:50:f8:94:25:01:66:22:64:8f:56:6f:ba:95:
02:6a:c6:59:c4:18:dd:47:55:cb:1b:b2:f6:d7:d3:
b6:d5:77:34:39:a5:4b:b5:2b:2c:54:a7:06:28:06:
05:05:8b:60:3f:e3:16:c5:a0:9a:26:e3:a3:eb:31:
08:cb:98:79:e9:bd:3f:95:8c:ba:30:c4:01:49:4e:
2a:9b:45:91:33:ca:a9:64:9c:e0:c9:23:01:fc:e6:
af:0d:17:76:be:aa:98:61:04:e9:9b:f5:61:73:c4:
b9:15:19:9f:27:37:6e:55:35:0d:d2:46:22:6d:74:
ff:10:2d:46:58:a8:e3:af:2f:ea:53:4e:16:e6:5e:
59:86:37:50:34:8b:8d:fa:b6:c2:57:ac:54:b4:f9:
f2:b5:cd:81:d3:f6:0e:ab:4a:06:4d:bc:ec:6c:08:
c6:6a:95:71:54:65:37:1a:9f:56:10:6a:03:15:bc:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:67:90:2E:E5:A7:3C:AA:12:DF:9B:16:FB:55:3F:39:22:83:F3
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/RghnkC7lpzyqEt-bFvtVPzkig_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
185.107.160.0/22
193.111.170.0/24
IPv6:
2a0b:dc40::/32
Signature Algorithm: sha256WithRSAEncryption
1c:a3:dd:6b:3c:86:75:d1:ec:58:92:61:59:ca:25:c9:27:dc:
73:60:f5:ca:c1:2d:7f:96:d3:19:c8:ed:58:9c:3c:e1:d2:08:
5a:de:20:46:b1:29:f5:6f:12:53:93:93:45:7e:0e:77:49:87:
6e:e8:e7:aa:43:1a:e3:e8:ae:88:ca:69:14:11:57:ed:6d:a2:
13:17:8f:4c:5f:91:47:2c:da:0b:4c:26:cb:70:7f:21:b8:a2:
85:12:c7:a3:00:fc:13:d4:88:a0:94:f9:28:e0:4c:c0:42:21:
d8:82:59:7d:35:da:68:3a:b9:d1:85:a6:d6:a2:85:2b:f8:53:
c0:08:2e:1b:92:cc:d8:36:02:61:38:c1:24:e5:a4:2c:b4:d0:
7b:ff:69:bb:30:48:96:7d:bc:09:89:eb:31:5f:6e:64:9e:ce:
04:33:3c:c8:24:be:69:3a:08:2d:b1:e2:a5:e2:b5:71:67:4c:
73:46:a4:ea:b5:4b:e8:8a:5e:f8:ca:ee:1a:d5:ac:1a:e4:fd:
95:2a:cb:1f:78:f6:af:30:72:8a:e0:6d:94:4b:c2:e6:21:d2:
77:f7:9b:6c:60:a6:a9:64:2c:62:11:af:21:1f:49:07:2f:e5:
6c:42:23:ea:0c:7d:bd:8e:71:ce:68:a9:b3:c7:e7:77:29:35:
dd:25:af:55
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaBXyM1OFXKYUuIw1m0t6ZfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2
NzcyYjAwHhcNMjYwODMxMTIyNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjA4Njc5MDJlZTVhNzNjYWExMmRmOWIxNmZiNTUzZjM5MjI4M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwdyyBPsYXFxW/pK6JijjgtM8Bq1
XxFPDgAzw56wu783CgYQxl/gIysO3rM62dKHduoDbGP8PmRnEFcf7W/ZTny30U6/
mIArV/iMp1D4lCUBZiJkj1ZvupUCasZZxBjdR1XLG7L219O21Xc0OaVLtSssVKcG
KAYFBYtgP+MWxaCaJuOj6zEIy5h56b0/lYy6MMQBSU4qm0WRM8qpZJzgySMB/Oav
DRd2vqqYYQTpm/Vhc8S5FRmfJzduVTUN0kYibXT/EC1GWKjjry/qU04W5l5ZhjdQ
NIuN+rbCV6xUtPnytc2B0/YOq0oGTbzsbAjGapVxVGU3Gp9WEGoDFbyoFQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFEYIZ5Au5ac8qhLfmxb7VT85IoPzMB8GA1UdIwQY
MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt
MjZjZGM1NTY0NGQ0LzEvUmdobmtDN2xwenlxRXQtYkZ2dFZQemtpZ19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0
LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBbagAwQC
uWugAwQAwW+qMA0EAgACMAcDBQAqC9xAMA0GCSqGSIb3DQEBCwUAA4IBAQAco91r
PIZ10exYkmFZyiXJJ9xzYPXKwS1/ltMZyO1YnDzh0gha3iBGsSn1bxJTk5NFfg53
SYdu6OeqQxrj6K6IymkUEVftbaITF49MX5FHLNoLTCbLcH8huKKFEsejAPwT1Iig
lPko4EzAQiHYgll9NdpoOrnRhabWooUr+FPACC4bkszYNgJhOMEk5aQstNB7/2m7
MEiWfbwJiesxX25kns4EMzzIJL5pOggtseKl4rVxZ0xzRqTqtUvoil74yu4a1awa
5P2VKssfePavMHKK4G2US8LmIdJ395tsYKapZCxiEa8hH0kHL+VsQiPqDH29jnHO
aKmzx+d3KTXdJa9V
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:53:05 2026 by rpki-client