Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa
File: PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa (raw, json)
Hash identifier: e0MfoAAfwbq4ZZJ6qywKn5Vxfb/htSXVtX0d+TDmu3Q=
Subject key identifier: 3C:5F:1E:FC:51:CB:1C:FD:95:8E:D1:62:89:96:6B:BD:5B:D2:B0:B2
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 019F23692C87DDE189226D478D1C9AFA0502
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47872
IP address blocks: 185.44.116.0/24 maxlen: 24
185.44.117.0/24 maxlen: 24
185.44.119.0/24 maxlen: 24
212.5.48.0/24 maxlen: 24
212.5.49.0/24 maxlen: 24
212.5.50.0/24 maxlen: 24
2a01:73e0::/32 maxlen: 64
2a01:73e0::/36 maxlen: 36
2a01:73e0:a000::/36 maxlen: 36
2a01:73e0:b000::/36 maxlen: 36
2a01:73e0:c000::/36 maxlen: 36
2a01:73e0:d000::/36 maxlen: 36
2a01:73e0:e000::/36 maxlen: 36
2a01:73e0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:87:dd:e1:89:22:6d:47:8d:1c:9a:fa:05:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c5f1efc51cb1cfd958ed16289966bbd5bd2b0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:1b:d9:d1:80:95:80:51:4b:02:f2:d4:6d:
8e:7b:24:af:81:d7:50:a3:9a:8f:32:ef:20:e4:be:
9a:f8:e0:e7:9f:fc:b7:85:cc:af:79:dc:a6:88:ab:
04:6a:b1:2b:46:80:3b:ad:9a:01:cc:d5:94:f1:49:
f1:13:d5:e6:23:21:27:c9:d5:26:c4:73:5f:d6:24:
ae:6f:0c:c4:8f:48:1b:fd:b9:95:9e:7e:93:8d:17:
16:3b:45:58:c3:c1:04:d9:f0:6c:97:41:cc:29:a0:
42:26:c2:10:52:34:6a:fb:fd:45:8f:33:2c:8c:2a:
ab:81:f4:6a:aa:ef:73:b8:8e:d0:2b:88:0a:bc:f4:
16:21:02:5e:dd:84:eb:77:14:8b:53:22:60:5c:e9:
d6:33:1b:21:ca:6f:dd:3a:df:87:1d:86:d1:70:7d:
33:db:5d:d4:56:a7:e1:76:55:89:1e:03:0e:61:aa:
7c:5a:e2:29:09:14:30:09:54:44:c6:50:34:4a:ad:
e5:48:b2:c5:ea:36:b7:fe:00:29:06:26:44:bb:b8:
40:48:48:9e:ae:10:53:b7:55:95:f5:6e:46:15:39:
28:2c:34:12:a7:f5:74:89:4c:f0:6b:c3:04:1f:0d:
37:e4:93:da:69:a4:cd:79:bd:a3:56:a0:42:b6:c5:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:1E:FC:51:CB:1C:FD:95:8E:D1:62:89:96:6B:BD:5B:D2:B0:B2
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.116.0/23
185.44.119.0/24
212.5.48.0-212.5.50.255
IPv6:
2a01:73e0::/32
Signature Algorithm: sha256WithRSAEncryption
11:ad:5d:9a:ff:a3:00:f1:d2:b8:3f:21:80:8b:ca:65:f7:3a:
a1:6d:e8:f2:b4:ee:e7:1e:77:c7:12:08:98:96:76:ca:17:57:
6c:ab:aa:90:f6:dc:7b:93:28:0e:fa:42:e6:4b:59:61:cf:94:
4e:57:f7:44:0c:d6:77:b0:81:e9:b7:d7:38:00:d7:4a:04:26:
57:72:e8:90:72:69:60:7a:2a:a7:49:2c:97:5b:7b:bd:8b:e7:
bb:c9:aa:54:c6:f8:9d:a9:0e:2f:43:da:2d:95:4e:e4:c2:3d:
e0:2f:6f:c0:a9:f8:b2:de:3e:da:7d:7c:90:f5:fc:26:86:0b:
7b:d7:e2:ab:81:66:f0:7b:8e:00:23:59:54:fd:1a:7b:fe:ad:
ff:c3:14:52:ee:2f:5c:3b:ed:3d:e0:5d:b6:be:83:b4:fd:16:
31:38:0b:d6:48:ba:b9:de:56:ed:42:19:6c:c4:04:76:8e:89:
ae:53:9f:a2:4e:4c:f5:3c:ee:90:1a:06:33:d7:52:8a:35:02:
90:71:b5:a8:85:5a:42:49:78:20:69:00:f0:7a:05:76:f3:bc:
ac:1d:16:8a:ed:71:bb:8f:87:2a:17:2b:39:f4:86:00:d3:d4:
1c:82:78:80:0c:e4:7a:2e:c7:82:4c:91:02:6b:84:55:86:bc:
1f:be:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:43 2026 by rpki-client