Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/rARkACIZbDXpmi_9ncmesjK3ITA.roa
File: rARkACIZbDXpmi_9ncmesjK3ITA.roa (raw, json)
Hash identifier: 337LNSkQOfixU8zhnuOM2xsTYHb/5v8c7467NmxE228=
Subject key identifier: AC:04:64:00:22:19:6C:35:E9:9A:2F:FD:9D:C9:9E:B2:32:B7:21:30
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 01A08F61D114580CF2531B9F507C13293099
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/rARkACIZbDXpmi_9ncmesjK3ITA.roa
Signing time: Fri 11 Sep 2026 07:32:27 +0000
ROA not before: Fri 11 Sep 2026 07:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 5.254.0.0/17 maxlen: 24
5.254.0.0/24 maxlen: 24
93.114.40.0/21 maxlen: 24
93.114.41.0/24 maxlen: 24
93.114.42.0/24 maxlen: 24
93.114.45.0/24 maxlen: 24
93.114.46.0/24 maxlen: 24
93.115.80.0/21 maxlen: 24
93.115.80.0/22 maxlen: 24
93.115.80.0/24 maxlen: 24
93.115.81.0/24 maxlen: 24
93.115.82.0/24 maxlen: 24
93.115.83.0/24 maxlen: 24
93.115.84.0/24 maxlen: 24
93.115.85.0/24 maxlen: 24
93.115.86.0/24 maxlen: 24
93.115.87.0/24 maxlen: 24
93.115.88.0/22 maxlen: 22
93.115.92.0/22 maxlen: 24
185.242.204.0/24 maxlen: 24
185.242.205.0/24 maxlen: 24
185.242.206.0/24 maxlen: 24
185.242.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:61:d1:14:58:0c:f2:53:1b:9f:50:7c:13:29:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Sep 11 07:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac04640022196c35e99a2ffd9dc99eb232b72130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:d7:25:ef:36:9f:e5:6c:70:72:24:e9:19:
1b:0b:fd:af:df:93:04:8c:22:97:45:23:fd:76:7c:
06:d1:bb:83:b5:db:1a:a2:31:2e:85:bd:0f:d6:e5:
0d:4e:45:54:fa:0c:3d:c3:0d:33:4d:55:0f:71:44:
4c:d7:02:2a:10:e9:74:c5:1c:39:9e:98:d7:ac:a1:
15:58:87:a8:99:12:71:23:c7:c3:2f:1c:c5:f3:67:
ac:1e:79:30:6e:5e:78:4f:6e:5f:8d:6d:c8:31:0b:
3f:00:cf:46:16:a6:f3:bf:0a:7e:07:34:e6:b9:14:
65:94:cd:9c:aa:59:68:bc:6a:db:0a:ac:16:70:50:
b3:01:d9:b7:a6:a5:2f:33:67:cc:5a:3d:22:64:89:
b9:18:30:59:97:e0:07:c1:e5:d6:db:9d:c8:30:eb:
db:2f:53:37:ac:e4:a6:4b:96:f2:7d:99:4a:00:03:
7e:79:5c:b4:63:b4:c1:eb:fe:cb:15:bd:d1:40:fa:
d4:44:56:64:d0:6b:6f:f5:f8:37:bb:b7:8c:c1:1c:
35:a7:77:49:19:ab:e7:89:89:e3:35:01:3e:4a:bb:
c5:0f:c4:8b:d5:27:f4:69:43:ab:b8:8b:bf:12:09:
96:a2:53:55:61:a6:a5:dd:44:b1:e9:08:7b:88:8b:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:64:00:22:19:6C:35:E9:9A:2F:FD:9D:C9:9E:B2:32:B7:21:30
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/rARkACIZbDXpmi_9ncmesjK3ITA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.0.0/17
93.114.40.0/21
93.115.80.0/20
185.242.204.0/22
Signature Algorithm: sha256WithRSAEncryption
72:b1:46:f5:13:ac:63:b8:e5:bc:64:52:ef:55:33:c8:d3:9b:
d7:7a:af:10:9b:9b:07:97:62:51:cd:e5:42:6d:e8:f9:6c:bd:
87:d7:52:b7:36:ae:1a:cc:3d:00:88:68:e5:a9:30:20:08:ab:
3f:31:50:09:af:1f:6d:42:a4:01:84:53:38:6a:e2:8a:3c:79:
d1:e9:52:31:c8:f2:20:0c:90:a4:ef:ca:ce:59:50:dc:79:38:
d2:a0:e3:53:84:78:76:fb:5d:66:76:4e:37:e2:56:a2:18:af:
32:ab:78:2b:30:b1:1f:d3:77:b6:17:c3:30:be:49:f3:b4:d1:
42:6b:6c:64:da:28:1f:c1:ae:24:bc:2d:81:91:4d:15:1d:7a:
19:97:89:61:f1:d4:ae:ba:a9:dc:47:62:39:3d:a5:7a:40:be:
51:5e:09:ba:c2:0c:4c:6b:59:5f:97:e8:fb:53:ac:63:e7:2f:
68:c9:04:a1:7e:e7:8d:7b:a6:96:21:bc:02:b4:4b:ac:39:f5:
e6:76:49:d0:2c:04:f6:57:49:f8:e6:81:db:c5:0b:49:17:d7:
39:99:ce:07:eb:53:20:ca:dd:7b:59:29:f3:dc:ec:be:44:fc:
3f:53:c4:8d:65:17:6c:16:ad:79:0f:9f:c1:1f:e3:56:05:02:
93:c0:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:43 2026 by rpki-client