Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/nOIPf31n0hqNNUFkwgs5mu_r16U.roa
File: nOIPf31n0hqNNUFkwgs5mu_r16U.roa (raw, json)
Hash identifier: bY0y5m9344e5uBwv1NhF6cWf/MpQHkd0UouDaPzr3Vk=
Subject key identifier: 9C:E2:0F:7F:7D:67:D2:1A:8D:35:41:64:C2:0B:39:9A:EF:EB:D7:A5
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 019E4A1DA2D88DF93F2D3318AB04B3EF1CBC
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/nOIPf31n0hqNNUFkwgs5mu_r16U.roa
Signing time: Thu 21 May 2026 10:38:36 +0000
ROA not before: Thu 21 May 2026 10:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211320
IP address blocks: 185.26.138.0/24 maxlen: 24
185.26.139.0/24 maxlen: 24
212.118.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:1d:a2:d8:8d:f9:3f:2d:33:18:ab:04:b3:ef:1c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: May 21 10:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ce20f7f7d67d21a8d354164c20b399aefebd7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:ff:5e:2d:c9:2b:9f:e6:09:b1:0e:09:9f:
d0:4b:e2:e6:a6:82:b6:2f:5d:78:dd:3a:40:08:bc:
90:ae:e3:7b:bb:9a:40:2f:5a:4d:07:c0:a2:32:72:
23:2d:51:28:e7:01:a1:b5:cb:8c:b2:8e:7c:09:66:
80:ce:c0:eb:56:ff:f6:fa:60:6e:e9:d8:ac:ba:ef:
59:df:8a:49:62:72:51:c1:88:c8:55:cc:b3:09:09:
c0:ad:98:d8:34:40:e0:a4:e9:21:e9:e7:ab:01:b1:
8a:60:e3:44:54:e2:92:45:40:18:dd:d7:89:b4:ac:
92:ba:8e:1d:4e:ad:40:6a:7d:60:70:ec:4a:26:8d:
4c:04:b5:c4:f2:2b:f2:a3:0f:12:d2:2d:4c:1d:3f:
9e:63:7a:f9:8b:f5:e4:4c:50:1c:28:3f:9b:ee:c5:
55:c2:c5:d1:a1:8a:48:75:b4:7c:15:6e:f5:27:cf:
52:a2:12:0f:51:22:d4:d0:2f:17:90:e0:76:ec:cc:
1f:43:c4:1e:ce:ea:dc:1d:2f:18:e1:34:84:33:f7:
27:64:12:d8:87:87:ff:7c:04:e9:f9:6d:13:58:50:
4b:bd:c1:cf:db:6e:8e:0a:1d:ab:1d:8b:fe:e0:ee:
27:29:ee:86:c6:38:21:38:2b:1f:09:00:b2:b3:a0:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:0F:7F:7D:67:D2:1A:8D:35:41:64:C2:0B:39:9A:EF:EB:D7:A5
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/nOIPf31n0hqNNUFkwgs5mu_r16U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.138.0/23
212.118.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:55:00:c5:42:87:16:10:8d:35:60:e5:eb:3e:e9:ca:db:f7:
3e:ca:55:f2:27:31:ab:54:ba:95:f5:e4:88:fb:d6:36:fc:a6:
c5:28:51:e1:8e:57:ff:05:c6:0a:f1:f1:b1:ae:7c:fd:81:f6:
8f:75:46:88:53:41:21:c9:98:59:6e:6f:a2:01:1a:4e:3b:67:
ac:3d:bd:36:49:fd:34:7d:3a:17:62:56:b7:55:a5:8e:04:61:
58:29:34:22:41:8c:5f:fc:a0:d3:12:27:26:58:0d:c3:5d:df:
30:b4:65:63:50:01:e9:e7:73:f9:33:6e:72:b0:b7:ca:71:eb:
3f:5e:c5:71:08:a8:a2:b7:a8:38:86:d0:a7:54:03:8c:78:56:
c1:b2:5a:38:1b:2c:60:5b:b4:99:a7:20:96:ee:fb:6d:2c:61:
4e:ff:f7:ec:e2:74:36:f3:f3:42:78:6e:75:95:09:13:00:ec:
e3:b5:6d:ce:32:72:e2:a7:97:19:00:de:f6:93:97:3b:7a:d6:
e1:a5:6f:13:2d:c8:74:33:c3:51:76:4a:1f:4f:7f:bc:66:9f:
09:d6:cd:6e:4a:14:bc:b0:3d:29:85:4f:f6:89:fd:e0:49:e5:
7b:39:b5:54:72:ac:d1:70:e0:4c:c8:d9:16:05:89:51:ba:08:
7b:e4:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:26:19 2026 by rpki-client