Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/RMWx0na57fb4dm5uTmWlaZfAY8o.roa
File: RMWx0na57fb4dm5uTmWlaZfAY8o.roa (raw, json)
Hash identifier: oMhmDSIeMo2V2QXvcmz5Nm8/bP3iTh98RN6hsLbmoWU=
Subject key identifier: 44:C5:B1:D2:76:B9:ED:F6:F8:76:6E:6E:4E:65:A5:69:97:C0:63:CA
Certificate issuer: /CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
Certificate serial: 019E8D14C690EC03F3004A46BA1CD0C97EEF
Authority key identifier: A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/RMWx0na57fb4dm5uTmWlaZfAY8o.roa
Signing time: Wed 03 Jun 2026 10:43:29 +0000
ROA not before: Wed 03 Jun 2026 10:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21217
IP address blocks: 80.80.224.0/21 maxlen: 21
80.80.232.0/22 maxlen: 22
80.80.236.0/23 maxlen: 23
80.80.238.0/24 maxlen: 24
185.169.92.0/23 maxlen: 23
185.169.95.0/24 maxlen: 24
185.247.8.0/22 maxlen: 22
185.247.9.0/24 maxlen: 24
185.254.152.0/24 maxlen: 24
2001:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:14:c6:90:ec:03:f3:00:4a:46:ba:1c:d0:c9:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
Validity
Not Before: Jun 3 10:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44c5b1d276b9edf6f8766e6e4e65a56997c063ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:66:ee:a2:5b:14:cb:24:b8:01:2d:03:56:
02:90:40:88:17:e4:2e:21:09:e1:99:14:5e:7c:92:
b9:2e:b7:2d:b3:00:1b:f1:03:53:c2:47:ab:c2:a8:
45:41:f1:e6:c7:c2:16:3b:df:3b:1f:26:8d:bb:bf:
54:e7:b1:50:bf:6e:aa:e1:a5:5f:c3:a0:77:a4:87:
6e:4b:f9:b6:82:e3:1c:f4:3a:a3:0a:d7:39:b2:b9:
20:7c:94:d0:91:2b:41:3b:4b:50:1c:59:dc:0e:4a:
22:d2:90:92:d2:5f:6f:8a:9d:47:8a:8d:41:d3:d4:
26:c5:c3:3f:60:d2:8e:f1:0d:fb:7a:03:44:38:71:
b1:9d:0f:12:13:20:28:3d:86:1d:9f:89:0b:41:d3:
27:84:5f:37:ab:35:8d:ba:db:09:e6:b6:2f:f9:3f:
54:43:e1:d2:2e:db:b7:10:be:48:b1:bd:a6:39:71:
1c:97:03:6e:6e:74:d6:59:65:8a:85:f3:4d:67:53:
de:95:fe:2f:3b:78:04:f9:1e:dd:0f:fd:ca:de:45:
db:47:99:a7:d7:09:66:8f:72:b6:96:ab:b3:d9:3d:
5f:7a:9f:cf:ca:45:6f:97:ad:a7:47:8a:4b:21:54:
eb:70:90:d2:55:e8:f9:9a:9f:f7:7c:2f:93:11:d8:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C5:B1:D2:76:B9:ED:F6:F8:76:6E:6E:4E:65:A5:69:97:C0:63:CA
X509v3 Authority Key Identifier:
keyid:A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/RMWx0na57fb4dm5uTmWlaZfAY8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.224.0-80.80.238.255
185.169.92.0/23
185.169.95.0/24
185.247.8.0/22
185.254.152.0/24
IPv6:
2001:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
31:f6:1d:12:20:a9:9d:25:d1:e4:f0:6a:71:36:74:ad:96:ed:
d9:46:56:6d:ce:d2:b8:ab:c9:98:c8:1c:6e:14:2b:8e:1d:b8:
f1:f8:78:e9:d6:8e:6b:0d:a5:b2:7f:3a:ea:42:38:8f:e0:10:
7d:c8:11:9e:6a:2f:d4:92:d7:85:25:eb:26:c8:a8:07:ff:c3:
69:dd:fa:69:30:78:fa:40:c6:81:20:07:3e:fc:25:09:89:76:
b6:bd:b2:b9:4b:2f:70:d6:4a:a3:9f:bf:87:dc:6d:56:0a:e3:
22:19:77:f5:20:d3:be:7e:92:fa:d4:ef:80:3d:2f:97:0d:f9:
d0:bc:a8:2f:e4:87:29:a3:78:05:c2:e3:7f:e3:e2:20:81:18:
d7:f0:47:c7:c2:38:4a:b5:e3:9a:21:b3:80:dc:f5:97:36:47:
3f:3d:68:5e:39:de:94:af:01:04:23:ba:26:ab:6a:0a:45:6c:
f8:66:fb:05:81:2f:72:46:d7:a5:5d:c0:ac:42:33:83:78:9f:
60:ec:49:43:af:8d:14:d7:cc:e8:fc:05:53:13:b2:69:70:ef:
16:b4:87:dc:70:47:dd:c9:b7:2b:69:cc:a5:63:ee:c3:6d:de:
1d:c2:7a:f3:7e:b5:a6:2f:2e:19:5f:57:60:7f:35:85:f3:41:
c9:1d:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:43 2026 by rpki-client