Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa
File: d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa (raw, json)
Hash identifier: 580hC/g7jAmf5qnSe5kqGVmdVRqVfvipXlRmFzU43Q8=
Subject key identifier: 77:98:64:40:CD:D5:7D:C8:EC:D1:32:56:AB:8E:AB:1E:53:51:CA:54
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 01A0AF4ABDA3BF241D6EAB7FC98C8F673DB7
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa
Signing time: Thu 17 Sep 2026 12:15:06 +0000
ROA not before: Thu 17 Sep 2026 12:15:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51115
IP address blocks: 81.161.98.0/23 maxlen: 24
132.243.176.0/22 maxlen: 24
132.243.180.0/24 maxlen: 24
178.248.232.0/21 maxlen: 24
185.65.148.0/22 maxlen: 24
185.94.108.0/22 maxlen: 24
2a03:70c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:4a:bd:a3:bf:24:1d:6e:ab:7f:c9:8c:8f:67:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Sep 17 12:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77986440cdd57dc8ecd13256ab8eab1e5351ca54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:7c:5a:4d:ad:79:47:5f:57:53:c9:bb:c1:
d9:f2:84:3e:fd:40:d5:4a:f3:13:cb:2d:2b:e5:8b:
55:8b:c4:a2:b1:94:61:83:0b:8c:c2:e1:93:70:4f:
e7:cc:47:4e:d8:df:14:63:dc:8a:66:79:79:70:67:
32:1c:9c:36:77:5a:e8:3c:ce:0f:48:3a:4f:af:37:
42:5e:84:85:5f:26:cb:ea:fd:a3:0c:be:2f:40:90:
db:d8:f7:07:d5:47:7b:66:ac:b6:13:6e:20:c9:0e:
d8:8b:3e:b1:04:c2:55:66:b6:a2:9d:a6:66:c7:46:
13:0e:da:40:bb:ff:87:97:ce:6c:98:66:6a:12:9f:
21:b1:ce:3f:ec:23:3a:9c:06:a0:28:45:a0:fd:a9:
93:57:af:81:1b:86:c8:e8:1f:90:e1:6f:47:f5:da:
50:da:61:31:fd:e7:75:f1:28:27:a0:4e:b5:be:ee:
22:fb:5a:a6:03:e6:d9:ad:ac:9d:e5:a2:9a:bb:85:
e9:f2:6d:19:b8:ce:88:68:7d:bc:d6:74:1c:fe:ac:
0e:28:0c:e8:d5:43:49:2c:a7:e6:0b:08:6c:aa:81:
20:af:86:77:81:62:e1:32:07:bf:1e:c7:10:50:0e:
60:0a:d8:e9:22:51:13:1a:8e:56:be:bf:33:85:a2:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:64:40:CD:D5:7D:C8:EC:D1:32:56:AB:8E:AB:1E:53:51:CA:54
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/d5hkQM3Vfcjs0TJWq46rHlNRylQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.98.0/23
132.243.176.0-132.243.180.255
178.248.232.0/21
185.65.148.0/22
185.94.108.0/22
IPv6:
2a03:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
61:e0:c4:df:e4:a7:01:23:75:7a:88:43:9e:76:67:3e:cf:63:
66:6c:f8:88:16:25:42:a1:16:08:a9:25:0c:df:e4:60:3c:e0:
8e:3c:34:d0:db:98:c3:99:69:cd:2a:9e:8d:5f:38:13:ec:b9:
19:ea:1c:48:0f:c3:a5:8f:b2:5f:95:d9:5f:d8:f2:2f:3d:13:
ce:4a:de:75:a8:64:38:45:f6:32:f8:a7:d8:87:e6:d3:08:1d:
65:c5:d2:a1:a5:c6:91:08:ce:79:1a:2c:84:29:61:68:ea:25:
58:11:6e:f6:13:5c:b7:bd:24:60:58:71:10:5b:cc:ac:f0:06:
c2:03:8f:0a:e7:11:e9:b8:61:42:23:6a:9a:a4:94:9b:58:08:
65:9c:2d:74:e2:3f:4d:3d:53:be:58:a6:ce:50:eb:d3:f3:e6:
4d:e2:3a:89:57:89:74:89:b0:88:74:6b:61:18:2d:fb:ea:2f:
33:9e:8e:6f:54:36:9d:0e:c5:b0:c6:78:2c:4f:54:2d:97:55:
a9:b8:df:a6:4b:e5:5c:74:e7:fe:d7:47:2b:ea:3a:04:93:c6:
32:41:a3:f0:ca:d5:b8:2e:19:c5:5f:bb:7e:d3:4a:21:30:63:
0a:b9:b6:be:31:c1:5c:4e:ee:36:74:28:f2:18:08:cf:1a:aa:
08:4f:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:42 2026 by rpki-client