Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/5Wgno04KyidaX-QDbhDJedktTA8.roa
File: 5Wgno04KyidaX-QDbhDJedktTA8.roa (raw, json)
Hash identifier: Xc3/xXxuEfrWMY1HHfepNmNKSi6o4qwYhfPj+oAmePQ=
Subject key identifier: E5:68:27:A3:4E:0A:CA:27:5A:5F:E4:03:6E:10:C9:79:D9:2D:4C:0F
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019C2D4831C07D2FDE364D5AE3E125FE88B9
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/5Wgno04KyidaX-QDbhDJedktTA8.roa
Signing time: Thu 05 Feb 2026 10:10:31 +0000
ROA not before: Thu 05 Feb 2026 10:10:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 185.56.46.0/24 maxlen: 24
185.87.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:48:31:c0:7d:2f:de:36:4d:5a:e3:e1:25:fe:88:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Feb 5 10:10:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e56827a34e0aca275a5fe4036e10c979d92d4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:be:31:97:25:c4:56:bd:a7:21:9a:12:7b:
07:e2:9c:22:ab:88:59:a4:aa:e4:94:63:8a:1c:36:
d0:f5:b3:3f:e8:a9:5a:82:ca:c4:c5:ef:04:aa:4e:
51:6f:38:43:76:0b:67:24:fc:0b:ad:0b:9c:39:60:
c9:1d:5f:d7:e1:0c:2d:bc:87:95:49:b8:2a:61:46:
4f:09:4c:45:35:06:4f:11:c5:d1:71:e3:dd:2d:af:
bf:10:30:4e:03:bf:5b:f3:6f:08:76:ad:0e:3b:4d:
be:ab:25:ed:6a:69:ec:9a:6b:ab:da:71:6c:79:b7:
bd:27:b1:48:01:a8:67:f2:61:fa:3e:bf:e6:e6:46:
71:b1:61:1f:6f:49:3a:40:03:b2:18:7a:4f:21:a6:
fe:d5:8f:19:27:58:07:d9:4e:1a:0a:33:50:54:a1:
a7:83:0f:ca:8a:26:f6:de:4e:ad:ba:ab:2a:85:1c:
b0:7c:42:84:31:7d:32:9c:03:cc:ed:d7:fa:f8:c3:
01:b7:a3:62:55:39:78:a3:a6:3b:f1:29:a6:e6:e6:
46:d0:70:44:21:36:e5:75:48:25:43:b5:e8:5e:2b:
46:91:ec:d9:f7:e5:2d:2b:16:a8:8e:8a:b0:70:be:
ea:95:1f:eb:42:f5:09:4b:54:c1:20:72:31:9e:8b:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:27:A3:4E:0A:CA:27:5A:5F:E4:03:6E:10:C9:79:D9:2D:4C:0F
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/5Wgno04KyidaX-QDbhDJedktTA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.46.0/24
185.87.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:dc:5e:b8:c6:46:c0:1e:74:e6:56:c3:4b:b4:52:5b:af:be:
72:81:bb:e3:42:2d:24:ea:3a:37:ba:d9:55:7d:7b:9e:1e:a7:
65:dc:1f:88:e2:aa:6e:16:3d:ed:cd:7a:f3:2e:a5:e0:f3:6f:
2e:b1:58:3a:a0:c1:9a:ce:3e:91:13:51:e3:75:cd:aa:61:ad:
9e:a9:e2:45:a7:ae:d6:28:33:45:07:9e:79:ad:0b:c7:5b:75:
b7:c4:4e:fa:04:f3:72:7f:62:57:9c:3c:cc:52:75:80:5a:4d:
9c:bc:fb:17:d8:2b:cd:8e:2c:8f:10:fc:f8:bf:48:a8:99:4a:
45:80:3f:53:54:a1:d7:eb:ff:c4:84:61:63:c3:f4:7d:45:15:
dd:7b:ba:92:63:39:70:cd:0b:85:74:35:19:16:0a:e6:16:c0:
59:39:19:89:71:0b:a9:39:d9:8c:01:1c:df:26:8f:6d:34:68:
b0:31:49:75:34:9f:92:bd:f9:2c:15:1e:98:d0:85:90:16:79:
9b:72:b9:ee:33:16:88:b1:09:8f:2b:00:7f:e9:99:29:52:4c:
fa:b0:40:5d:a3:1d:14:d8:69:d6:51:33:07:8e:73:ad:ce:1d:
34:5d:61:d3:da:34:a4:fe:e9:7b:4d:bc:27:5a:11:69:6e:53:
59:d5:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:10 2026 by rpki-client