Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/G5mvuaSRPkxYIO5weFmc3z2dMvE.roa
File: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (raw, json)
Hash identifier: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=
Subject key identifier: 1B:99:AF:B9:A4:91:3E:4C:58:20:EE:70:78:59:9C:DF:3D:9D:32:F1
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 019C46110CA33E4010A54B980C0D78D0D8E5
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/G5mvuaSRPkxYIO5weFmc3z2dMvE.roa
Signing time: Tue 10 Feb 2026 05:40:48 +0000
ROA not before: Tue 10 Feb 2026 05:40:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201639
IP address blocks: 185.3.188.0/24 maxlen: 24
185.86.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:11:0c:a3:3e:40:10:a5:4b:98:0c:0d:78:d0:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Feb 10 05:40:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b99afb9a4913e4c5820ee7078599cdf3d9d32f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:7c:d1:df:c6:1f:9f:7a:f2:d1:8d:66:49:
a3:e8:6c:72:47:94:a3:71:8a:f9:98:95:ee:d4:91:
b5:a6:0f:f3:89:ec:bf:19:4e:c9:20:d3:d2:e6:ab:
d6:cd:35:d8:68:84:b9:b2:38:c3:42:28:65:e5:7e:
b4:6a:00:a7:a1:d5:00:da:93:62:f2:3e:66:61:8e:
5c:6e:09:29:75:03:c8:0f:d3:ea:55:e6:0e:0f:71:
6e:86:ad:6f:82:c8:b3:e1:49:85:e8:dc:0f:fe:95:
e3:ef:f0:c9:6c:e1:90:0c:87:ce:76:e4:57:04:02:
1c:8a:d8:84:bb:17:39:5d:7e:19:b4:c4:92:39:7d:
2e:60:83:26:2c:e4:14:1e:00:36:dd:1b:3d:61:16:
f9:d8:92:b9:af:19:f8:b1:c7:d8:fb:86:3b:80:68:
7b:6d:5d:8a:5a:79:bc:cd:c7:35:40:06:00:67:fc:
fd:79:11:d0:1e:d8:e0:c1:1a:0b:90:0d:6f:30:b5:
3b:04:b5:5a:d3:53:b5:38:68:a8:b1:bf:bf:93:39:
04:99:dd:0f:07:e4:bf:b8:59:48:48:c9:c0:84:06:
7d:2e:53:25:63:3b:9d:d9:01:78:a7:0b:50:ef:2e:
01:ac:ca:25:97:a8:67:f4:9f:e3:4b:c4:50:68:93:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:AF:B9:A4:91:3E:4C:58:20:EE:70:78:59:9C:DF:3D:9D:32:F1
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/G5mvuaSRPkxYIO5weFmc3z2dMvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.188.0/24
185.86.192.0/24
Signature Algorithm: sha256WithRSAEncryption
41:92:22:59:29:f9:16:48:83:4f:fb:9e:49:07:d9:d3:0d:72:
80:15:96:3f:32:48:39:db:eb:1b:4c:35:4c:d1:3e:36:bd:37:
36:db:ad:2f:b2:c9:4f:31:e1:c9:0c:75:71:90:93:56:4c:2c:
2a:2e:9e:41:7c:02:b6:89:f0:34:3b:81:e5:30:79:fc:6e:ab:
ee:6f:17:41:8c:1c:50:c8:0e:4e:9f:5b:ac:e6:d5:31:13:30:
a6:ef:fa:8d:82:20:59:58:6e:e5:17:26:44:00:ac:58:0d:0d:
d7:3a:63:6b:45:90:64:1f:f8:e5:20:f2:62:00:63:2f:b3:ac:
73:57:65:35:e2:e0:2c:05:e0:06:a5:56:30:15:74:1e:df:4b:
08:a0:2d:ae:1d:99:33:40:09:91:7c:92:a5:f9:f7:4a:15:96:
16:07:c8:ca:ed:cd:d3:a1:89:b0:f4:a1:19:1c:d6:00:de:68:
0e:42:be:2c:cf:f2:fd:32:67:7c:32:39:6b:de:cb:33:b9:af:
3a:7c:cd:45:39:66:8c:94:59:02:90:e1:2f:2d:44:1f:07:73:
c5:eb:99:dd:36:d7:d8:32:f5:7c:a3:57:e5:3b:de:b8:14:88:
4d:51:fd:d5:50:1c:c5:d0:85:e5:79:80:61:bd:6d:db:6c:0f:
07:61:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:23:27 2026 by rpki-client