Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/5Gxh2chFO_lXBi6O-HHn_6viOlY.roa
File: 5Gxh2chFO_lXBi6O-HHn_6viOlY.roa (raw, json)
Hash identifier: tRa2+QQ5FqsF/gRSgqqadUPeiw05Vz//YZytiQk1M0M=
Subject key identifier: E4:6C:61:D9:C8:45:3B:F9:57:06:2E:8E:F8:71:E7:FF:AB:E2:3A:56
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 01A120201299598A995C31747BFB72C86321
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/5Gxh2chFO_lXBi6O-HHn_6viOlY.roa
Signing time: Fri 09 Oct 2026 10:05:35 +0000
ROA not before: Fri 09 Oct 2026 10:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 185.116.32.0/22 maxlen: 22
2a06:7b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:20:12:99:59:8a:99:5c:31:74:7b:fb:72:c8:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Oct 9 10:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e46c61d9c8453bf957062e8ef871e7ffabe23a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:9d:df:73:7d:77:2e:eb:70:ee:ac:68:2a:
fb:4b:15:13:1b:86:71:33:c5:49:6a:7d:78:58:35:
ab:27:0c:6e:91:e7:2f:ec:f1:1d:45:52:1d:48:f2:
05:2e:42:66:61:13:20:38:0a:ac:e8:28:1a:f0:97:
6d:69:80:51:0e:55:97:ef:62:95:66:f4:44:b9:47:
ef:69:a2:98:37:ff:e7:06:e3:23:a6:8d:48:24:19:
13:84:da:4a:c4:f3:28:ec:66:54:e6:e9:69:2e:a6:
36:73:b1:af:41:ca:70:66:24:c5:01:c7:96:2c:7f:
71:a1:b3:c5:2e:ee:c0:61:56:c3:53:4f:ec:77:80:
6e:08:60:62:91:71:5b:7a:74:4e:fa:34:ea:64:55:
86:8e:26:6b:3a:7b:76:79:06:15:8a:3e:b3:20:83:
99:1e:06:58:8e:8d:0a:f6:cd:ef:7d:3f:79:c4:a2:
78:af:40:c3:f4:68:d4:2f:51:34:02:40:51:6e:63:
30:cb:9f:c7:56:e7:0c:ba:a2:69:c4:42:29:99:54:
7f:9e:3d:ca:58:ef:53:0d:df:e8:69:cb:0f:b7:98:
83:c3:f1:d0:18:71:a4:6b:d4:16:b8:3a:d2:e4:3d:
e3:46:2b:c2:74:20:65:c8:57:82:4b:bc:7e:24:89:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:61:D9:C8:45:3B:F9:57:06:2E:8E:F8:71:E7:FF:AB:E2:3A:56
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/5Gxh2chFO_lXBi6O-HHn_6viOlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.32.0/22
IPv6:
2a06:7b40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:c6:3f:6c:32:72:97:32:33:75:dc:cb:a1:dd:d1:d3:92:d9:
75:1b:33:d6:54:a7:87:6c:4c:00:88:96:b0:be:98:e2:22:14:
bd:02:e3:9c:1d:e9:fe:82:da:75:9c:cc:c6:e6:f3:42:b0:ac:
4f:b8:ec:53:2c:80:41:59:35:c9:4e:51:e9:fe:82:49:85:27:
51:4f:6d:43:af:e3:5f:4b:66:65:ca:47:69:53:85:6d:c8:e4:
1b:81:93:a5:bc:9f:cb:13:8b:ef:5e:47:de:9f:c9:10:04:9c:
d1:00:4d:5a:55:d4:b6:0c:e1:77:23:0f:fa:52:fe:42:57:73:
d2:0b:62:ce:c0:f5:1a:e1:e2:d0:81:ef:43:53:f1:a8:65:a5:
59:fa:eb:ea:9e:f2:03:7f:f6:2c:33:13:98:43:1a:d9:e1:b1:
62:73:24:d1:09:a1:2a:7c:b9:65:38:4e:2f:b8:24:3e:77:7e:
7d:07:e5:07:55:78:3f:85:0c:ab:8a:bc:57:3b:4b:54:44:29:
f3:92:82:28:7a:11:ce:d9:42:25:3d:45:9b:e6:03:c1:58:6c:
cf:74:3b:33:9a:a2:95:d7:76:63:da:31:5b:ad:6e:15:87:e6:
53:bc:28:2e:d4:d4:f6:90:0e:a6:94:3d:ca:df:24:8e:60:09:
19:3c:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:08:05 2026 by rpki-client