Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/CL5vgG8h2b9NiWwfbyTtqZf0yaM.roa
File: CL5vgG8h2b9NiWwfbyTtqZf0yaM.roa (raw, json)
Hash identifier: R85d1yKqIezVVA7/iS4hXDWK5iZ8vOcLojDLQ5Lal/A=
Subject key identifier: 08:BE:6F:80:6F:21:D9:BF:4D:89:6C:1F:6F:24:ED:A9:97:F4:C9:A3
Certificate issuer: /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial: 019B7F158C711CB1C7462A5B321164E005D0
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/CL5vgG8h2b9NiWwfbyTtqZf0yaM.roa
Signing time: Fri 02 Jan 2026 14:21:17 +0000
ROA not before: Fri 02 Jan 2026 14:21:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47194
IP address blocks: 212.65.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:8c:71:1c:b1:c7:46:2a:5b:32:11:64:e0:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Validity
Not Before: Jan 2 14:21:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08be6f806f21d9bf4d896c1f6f24eda997f4c9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:15:f1:fa:b6:e0:cd:f8:6d:9f:d1:d0:39:
9a:66:85:9d:1e:b8:2e:af:24:56:8b:d6:d8:11:01:
78:75:3a:1b:07:41:81:e0:8c:96:1f:10:91:c8:b5:
b5:c2:e5:8c:3c:60:50:ed:5b:45:79:f0:fe:de:80:
0a:d7:a3:b7:86:36:69:f2:e2:97:58:fe:04:74:74:
ac:bb:e1:20:5e:35:69:76:71:2d:0e:01:ff:5e:43:
34:41:74:86:42:7c:83:c8:9d:fb:ff:cc:e3:fb:14:
6b:12:e0:57:00:ad:05:1f:6e:17:ba:3a:64:99:db:
35:98:e1:8c:64:76:9c:45:ee:8f:2a:3d:de:37:26:
0c:a2:28:d9:c9:a5:2d:12:c9:95:3c:fc:e4:71:67:
7a:62:ef:e4:a5:cc:8a:c7:4f:e1:f1:42:ed:dc:85:
5d:08:96:83:3f:97:b6:56:db:9a:85:f0:81:b5:74:
68:00:b1:90:8b:e0:7f:97:7a:d4:f1:9f:9f:fc:32:
04:f8:57:55:cc:a9:6f:68:d6:99:47:e3:49:37:cd:
bf:f6:d4:ad:cc:a6:e2:55:5d:c9:5a:b7:5e:5b:ae:
9c:77:67:64:40:26:f1:7f:f7:0a:60:cc:57:2d:b5:
6f:9d:0a:4d:dd:53:c6:48:44:13:35:57:44:53:c7:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:6F:80:6F:21:D9:BF:4D:89:6C:1F:6F:24:ED:A9:97:F4:C9:A3
X509v3 Authority Key Identifier:
keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/CL5vgG8h2b9NiWwfbyTtqZf0yaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.65.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:86:04:fa:e5:91:dc:91:ac:6d:f3:4f:13:f9:34:d0:78:a4:
f2:2c:5e:d2:96:21:63:3e:cd:69:49:cc:12:ae:61:9e:d6:13:
21:7a:b3:de:0d:67:03:c9:66:89:b5:81:1b:4a:28:37:10:79:
7f:e0:a5:68:cb:8a:4a:94:ff:cc:0b:ac:c5:77:17:5a:14:c5:
e8:2d:a0:ec:d7:f8:92:69:a2:da:40:f8:dc:88:d4:7f:ef:b0:
d7:7c:e4:52:4d:62:5a:fe:fb:a0:2b:e2:fe:e7:1b:98:7b:23:
af:55:eb:80:9c:88:2e:6a:3a:d0:0d:f4:71:b1:28:79:77:f4:
a7:26:45:b7:55:79:0e:5d:58:f7:4b:d7:a7:94:fd:cd:a0:a5:
85:35:83:b2:20:c3:a8:1b:c5:e7:9c:c3:81:ec:f8:cd:6b:c2:
57:e0:7a:6e:3a:54:f9:61:fa:1d:a1:26:ed:7d:56:cb:ac:08:
b6:c8:7d:a0:d3:d8:06:57:6a:8e:da:5a:f3:37:0b:28:c5:df:
0a:d2:d5:20:94:c7:64:89:11:1d:8b:6b:ed:b1:21:e0:27:ec:
9f:b3:0d:53:30:25:9d:72:61:7a:52:d8:91:82:c4:3b:0d:27:
1a:a9:42:f4:32:6e:46:65:8d:1e:ee:10:43:da:22:80:ee:ee:
2f:c2:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:31 2026 by rpki-client