Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/z-f8i-JiXeIUtoUuBCL3PLupjvg.roa
File: z-f8i-JiXeIUtoUuBCL3PLupjvg.roa (raw, json)
Hash identifier: iTgnYU5apRYy/BU1FCnwUKjNYP6BTedx+6SQI5ZtuGM=
Subject key identifier: CF:E7:FC:8B:E2:62:5D:E2:14:B6:85:2E:04:22:F7:3C:BB:A9:8E:F8
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019E21A930E11F87D820916551E8033B3B05
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/z-f8i-JiXeIUtoUuBCL3PLupjvg.roa
Signing time: Wed 13 May 2026 14:06:36 +0000
ROA not before: Wed 13 May 2026 14:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 84.37.34.0/23 maxlen: 24
84.37.38.0/23 maxlen: 24
84.37.108.0/23 maxlen: 23
84.37.114.0/23 maxlen: 23
84.37.178.0/23 maxlen: 24
84.37.180.0/23 maxlen: 24
84.37.182.0/23 maxlen: 24
84.37.194.0/23 maxlen: 24
84.37.220.0/23 maxlen: 24
212.180.20.0/23 maxlen: 23
212.180.30.0/23 maxlen: 23
212.180.38.0/23 maxlen: 23
212.180.40.0/24 maxlen: 24
212.180.50.0/24 maxlen: 24
212.180.54.0/23 maxlen: 23
212.180.80.0/23 maxlen: 23
212.180.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a9:30:e1:1f:87:d8:20:91:65:51:e8:03:3b:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 13 14:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfe7fc8be2625de214b6852e0422f73cbba98ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:df:97:33:fb:53:0a:b5:ac:fb:1d:5a:03:
32:06:6e:5b:6e:31:83:dd:7d:42:a2:36:e0:3d:af:
09:08:c5:14:26:a3:f7:40:40:16:15:bc:3b:c1:c1:
6d:ab:8f:d4:23:89:d7:09:e4:27:84:6d:cf:60:af:
03:f5:25:9e:9b:fa:24:7e:6e:d9:ba:66:95:3c:33:
16:b1:5c:90:68:53:54:87:64:18:9e:36:95:47:6a:
ad:35:ae:6d:43:fe:ac:78:76:ef:76:fd:88:f9:5e:
63:ff:a2:e2:f7:d5:10:c4:45:c9:2c:36:44:e9:27:
42:09:6e:5d:08:10:4e:f3:1f:d7:61:0b:3c:84:14:
8d:0e:37:6b:78:61:a8:52:19:14:ae:25:4e:98:e1:
06:4e:90:f2:95:b4:11:32:be:dc:fa:55:45:5e:41:
5b:e3:2b:e9:1f:d8:f8:a8:24:a4:a3:a6:7c:51:a6:
17:cd:f3:b9:c5:b4:07:2a:57:56:83:ff:2e:45:ff:
8e:cd:c2:a4:b4:9b:d6:a8:57:08:6b:93:8a:9f:fe:
dc:dd:47:df:21:62:09:9e:9c:64:97:a8:86:e1:e3:
ef:87:dd:7e:83:d4:87:e2:3a:e3:66:95:e1:4d:bf:
63:ef:04:60:43:9f:87:11:51:8e:49:dd:23:fe:1f:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:FC:8B:E2:62:5D:E2:14:B6:85:2E:04:22:F7:3C:BB:A9:8E:F8
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/z-f8i-JiXeIUtoUuBCL3PLupjvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.34.0/23
84.37.38.0/23
84.37.108.0/23
84.37.114.0/23
84.37.178.0-84.37.183.255
84.37.194.0/23
84.37.220.0/23
212.180.20.0/23
212.180.30.0/23
212.180.38.0-212.180.40.255
212.180.50.0/24
212.180.54.0/23
212.180.80.0/23
212.180.92.0/23
Signature Algorithm: sha256WithRSAEncryption
84:06:c9:90:ec:cc:3e:22:ec:84:92:6c:bf:e7:10:e4:78:e9:
51:2f:96:80:79:0c:98:b7:4a:9c:bd:97:99:d5:c2:a3:2a:b0:
09:c6:9a:0e:e6:47:f7:0f:b4:50:f1:70:59:40:cc:02:c5:7f:
42:fc:4d:6c:b7:fe:a5:0f:8f:d6:0a:7a:df:0b:73:c0:78:5e:
07:08:ea:87:50:a1:15:a2:d2:9e:8b:fb:a7:50:39:b8:91:ab:
c9:ad:e9:23:a1:e6:12:ff:74:63:ad:9e:53:da:ae:fb:30:3f:
71:82:dd:a0:8d:21:c5:69:a2:89:a0:70:6d:c4:32:16:a0:70:
05:64:f6:f3:bf:17:09:b7:f6:2b:d3:7b:7f:e4:8a:67:cd:ba:
c5:45:6c:48:84:b8:4c:f1:c9:73:06:02:89:50:f4:ae:eb:64:
2e:9c:fe:14:d1:61:e5:de:db:0b:e0:5c:e5:fe:32:17:e0:ba:
d4:02:fc:cf:db:26:c5:50:08:bf:8f:61:7d:bb:1a:b3:45:26:
94:4c:19:75:b8:72:96:67:aa:f7:99:eb:9e:0d:7c:4f:df:a0:
89:d8:48:38:0a:0e:af:b2:eb:d2:f3:9d:f3:7b:d1:f5:f8:5b:
c7:24:da:ae:90:d5:a3:79:cf:2c:a3:32:60:f6:ee:4d:31:ec:
84:ed:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:12 2026 by rpki-client