Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/5X7YRTYutQRnZKSXOYRzfFKU__g.roa
File: 5X7YRTYutQRnZKSXOYRzfFKU__g.roa (raw, json)
Hash identifier: SZ3JcTfmeT/78/b8EzDuDunNtUACrBhXm0w/aIDmEqM=
Subject key identifier: E5:7E:D8:45:36:2E:B5:04:67:64:A4:97:39:84:73:7C:52:94:FF:F8
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 019D85DFA71A002D6446B76984444A2A3D6E
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/5X7YRTYutQRnZKSXOYRzfFKU__g.roa
Signing time: Mon 13 Apr 2026 08:05:20 +0000
ROA not before: Mon 13 Apr 2026 08:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213093
IP address blocks: 185.184.60.0/24 maxlen: 24
185.184.62.0/24 maxlen: 24
185.184.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:df:a7:1a:00:2d:64:46:b7:69:84:44:4a:2a:3d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Apr 13 08:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e57ed845362eb5046764a4973984737c5294fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:8d:2a:8d:a6:2b:ec:66:8e:aa:f2:d7:7c:
01:6b:51:b8:f9:5a:15:88:e0:d5:c1:5a:5a:72:b2:
19:72:7b:5c:1d:dd:cf:9e:ea:6f:44:c1:8d:1f:ae:
97:94:d0:16:40:59:58:de:7f:3b:9e:55:7a:36:28:
5b:ff:12:66:44:fc:cf:04:aa:f9:d1:c5:81:09:39:
b6:a5:7c:0a:d3:01:a1:9d:42:c3:67:65:cc:02:c3:
33:f8:e4:a2:bf:73:4b:75:eb:5a:e8:e5:37:f2:f0:
f7:20:62:d0:0f:2b:8b:83:5c:50:24:4d:f4:90:20:
1b:88:22:c7:7d:79:55:0d:8b:93:c1:15:94:3d:ff:
7b:3d:65:5f:42:e2:bf:5e:da:55:9a:99:20:95:82:
0c:06:af:73:09:3e:d7:9e:07:a0:19:7a:65:e4:5a:
53:89:1f:fb:a6:bd:11:b0:6e:88:ed:f1:b6:d2:38:
5c:2b:c3:38:5d:8c:34:18:c9:d2:c3:99:7a:53:88:
da:ea:79:e5:43:79:fa:9c:fd:f3:0e:26:92:e4:59:
b7:f4:1d:d0:35:ce:e8:36:eb:e0:bf:a3:37:d2:1f:
aa:bd:93:91:b1:3a:04:b4:43:08:ef:79:cf:77:3d:
00:cf:d6:3c:36:6f:2d:75:07:78:b9:c4:77:64:b2:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:D8:45:36:2E:B5:04:67:64:A4:97:39:84:73:7C:52:94:FF:F8
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/5X7YRTYutQRnZKSXOYRzfFKU__g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.60.0/24
185.184.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:33:8a:e6:25:cb:59:a0:94:ea:6c:36:f0:d0:da:19:03:fe:
97:2b:e2:25:66:ce:17:25:c5:b5:ec:52:8c:35:02:e7:9d:e0:
e7:24:ae:4e:91:fa:c2:59:84:5f:16:00:ab:d1:97:ad:47:8f:
00:25:ac:54:97:31:1d:ec:1d:0d:a9:1e:c8:6c:65:76:74:d8:
e5:3b:d9:af:d3:9e:35:d7:79:89:04:52:ba:28:66:fe:9c:a4:
be:55:fa:2f:d5:0e:91:66:14:b3:f6:21:06:7c:a9:ab:4f:89:
af:ab:8c:ef:3f:db:9c:17:ed:15:fb:4a:50:9c:cd:8e:d2:37:
4e:2f:75:da:8b:67:81:fd:74:eb:23:00:09:b1:41:38:68:41:
35:11:7a:e4:e2:4e:65:5a:1a:b4:65:b5:0e:ac:96:6e:37:2a:
47:ee:33:65:9f:9e:dc:28:30:94:b2:e2:a6:5d:74:1d:da:89:
67:e9:b9:81:ec:b3:30:73:80:c5:6b:a1:b6:e9:02:5b:15:f3:
a4:d3:41:4f:7b:9a:dc:c7:9e:d8:ce:93:fc:60:5b:9e:05:cc:
7d:76:da:1b:c5:23:43:20:ea:f1:1a:a6:b9:7c:c8:01:45:d4:
ad:2f:64:c5:06:3c:3d:21:13:24:2b:18:2d:86:7a:46:37:0c:
fd:c7:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:41 2026 by rpki-client