Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/5bhy7eDbTF3iSMoLKUHBCIILj4E.roa
File: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (raw, json)
Hash identifier: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=
Subject key identifier: E5:B8:72:ED:E0:DB:4C:5D:E2:48:CA:0B:29:41:C1:08:82:0B:8F:81
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019C7571B2BDD054C18E9F56D7D7A4DE38EF
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/5bhy7eDbTF3iSMoLKUHBCIILj4E.roa
Signing time: Thu 19 Feb 2026 10:28:31 +0000
ROA not before: Thu 19 Feb 2026 10:28:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200910
IP address blocks: 185.255.12.0/22 maxlen: 22
185.255.12.0/24 maxlen: 24
185.255.13.0/24 maxlen: 24
185.255.14.0/24 maxlen: 24
185.255.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:71:b2:bd:d0:54:c1:8e:9f:56:d7:d7:a4:de:38:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Feb 19 10:28:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b872ede0db4c5de248ca0b2941c108820b8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:96:7b:25:7f:d5:9c:bb:f3:60:b3:6d:a6:
24:2b:da:94:82:76:3b:37:54:c6:d9:d8:5a:4f:ca:
67:7b:c3:24:03:61:e3:76:2f:39:24:b1:05:26:78:
93:8d:37:b1:78:20:31:6c:5e:13:4a:43:82:7e:01:
21:2d:2f:98:d1:2a:53:60:c1:a7:12:b6:a6:2f:8c:
38:94:29:54:0b:5b:cb:39:1a:6e:3c:6d:52:8e:ee:
d8:67:d4:9f:77:cd:9f:34:13:d0:3d:4c:9a:e0:54:
98:78:6a:ad:be:3d:4f:23:d1:f2:ed:39:de:99:34:
08:ab:be:a0:fa:9a:a0:6b:1d:d6:e2:de:34:02:b2:
26:a8:e2:71:21:1a:e1:0d:68:8f:4a:1b:4c:8d:30:
ad:b5:c0:58:48:e5:3e:dd:93:69:e4:96:49:48:e1:
31:65:a1:c4:b7:c1:7d:13:67:93:44:c2:5c:78:e9:
86:e3:b0:36:fa:3b:35:e5:b5:4c:a2:bc:01:75:26:
70:a7:70:54:1c:3b:2b:9e:7b:b8:93:03:6f:ec:d1:
37:b5:e1:e9:14:ea:bf:3b:72:40:15:a5:07:2d:f0:
92:2b:e0:5e:79:17:cd:27:ef:04:03:a5:81:ce:7f:
5d:7b:4a:19:5c:d3:d1:f9:76:a7:41:81:f3:33:57:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:72:ED:E0:DB:4C:5D:E2:48:CA:0B:29:41:C1:08:82:0B:8F:81
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/5bhy7eDbTF3iSMoLKUHBCIILj4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c7:07:48:03:76:ff:81:d6:a5:d7:7c:d6:bb:58:38:0a:89:
08:fc:4c:56:7c:82:93:e1:34:cd:6d:dd:a9:20:53:2f:b0:72:
40:a8:77:0b:db:78:3b:c5:66:88:3c:7a:67:5a:ba:c2:06:c4:
d6:78:93:69:22:ae:52:02:2b:5b:07:e6:72:39:b6:90:2e:91:
e0:66:ab:ae:48:2a:b9:47:27:3e:35:06:28:a6:c5:df:2b:58:
c4:e1:93:59:a2:81:4a:57:11:3e:b7:16:50:d9:d0:71:a2:01:
da:0f:73:4e:cb:94:3a:e7:a5:e9:95:80:06:e2:31:85:2f:13:
66:c3:5b:71:2b:1b:94:34:99:28:77:71:9a:09:ce:98:1a:ed:
bc:29:55:5b:7f:87:b7:db:f6:a6:75:57:0f:ff:fd:e2:6a:f1:
54:d4:05:61:f9:d1:97:8d:b6:d6:3a:be:fc:32:fc:6c:69:c0:
95:5f:b8:1b:40:bd:dc:f0:cc:a4:45:6a:be:67:f3:87:c8:fe:
87:a3:0e:d6:86:92:e4:b6:9e:32:2d:04:53:89:7f:df:9a:84:
de:30:42:2f:e3:2b:bf:6d:40:58:cf:0c:e8:54:60:82:1c:4d:
fa:0d:db:10:a0:cf:7a:26:09:c4:31:df:66:b3:9d:5f:82:77:
f6:90:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:18 2026 by rpki-client