Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/5F8EPRCwAO9R0s3emE3nMIVi-i8.roa
File: 5F8EPRCwAO9R0s3emE3nMIVi-i8.roa (raw, json)
Hash identifier: nyuBuPwwDb0keiCkpqhAWuHjHqCL5kLPWyJJ50t6Ers=
Subject key identifier: E4:5F:04:3D:10:B0:00:EF:51:D2:CD:DE:98:4D:E7:30:85:62:FA:2F
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019B783561C75A96650E292C7DEA1D4FF6C1
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/5F8EPRCwAO9R0s3emE3nMIVi-i8.roa
Signing time: Thu 01 Jan 2026 06:18:42 +0000
ROA not before: Thu 01 Jan 2026 06:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50647
IP address blocks: 185.181.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:61:c7:5a:96:65:0e:29:2c:7d:ea:1d:4f:f6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jan 1 06:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e45f043d10b000ef51d2cdde984de7308562fa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:93:c3:8e:52:4c:01:85:cd:09:ff:d8:ad:
7f:36:18:89:a6:c5:73:b1:ff:17:18:09:e0:af:27:
56:d0:74:df:1b:98:19:87:0f:55:b5:0e:1a:ea:2a:
07:0f:58:1d:36:46:e4:86:e0:72:f5:c8:aa:75:d7:
3e:f9:b0:43:1f:c5:50:ed:db:b4:9e:21:87:36:d2:
24:68:11:24:ac:51:66:01:50:d1:69:77:ef:89:1c:
9a:96:62:f0:74:f4:e4:31:27:b9:2f:37:83:77:6f:
e0:8b:f0:30:a7:a5:d9:89:b8:5d:c7:24:07:25:a8:
67:d8:d8:95:0e:6e:15:d4:ea:33:21:0f:9e:e1:47:
6b:13:21:ca:b9:d7:0a:f7:72:0e:be:b0:23:f1:28:
11:bb:f2:db:68:69:96:6b:5a:9f:0c:24:55:af:d3:
98:42:80:aa:d1:b6:12:06:dd:8e:99:46:6a:7a:43:
66:4d:4b:7d:14:50:b3:11:bf:21:bc:ac:13:cc:b6:
d9:a2:55:57:d5:63:6a:22:1c:b1:46:98:6b:af:17:
a0:6b:11:83:49:27:7a:41:df:f0:de:8f:80:dc:7a:
ce:3e:52:a7:a5:a7:a1:19:cb:4c:47:f2:73:21:78:
96:ac:5d:62:40:f6:cc:75:49:7e:58:99:4c:73:17:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:04:3D:10:B0:00:EF:51:D2:CD:DE:98:4D:E7:30:85:62:FA:2F
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/5F8EPRCwAO9R0s3emE3nMIVi-i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.248.0/22
Signature Algorithm: sha256WithRSAEncryption
69:3c:b6:29:2c:16:f2:ce:c6:4c:18:16:b3:cf:13:c8:72:dd:
d6:fd:f2:0c:f5:e0:1b:3f:b5:ac:28:20:99:56:5e:ff:0f:97:
62:c6:b2:3c:db:28:f0:24:23:89:10:a0:7e:cf:21:8f:22:61:
a2:f3:23:84:16:72:bf:12:60:e5:59:5f:30:e6:ff:3e:66:0a:
6b:c5:93:79:3e:1f:e2:ca:1e:c2:11:81:ec:29:40:24:96:55:
db:97:1c:6d:25:b1:e4:1b:fe:5d:a7:b8:70:d0:13:e3:b5:81:
cd:75:c7:1b:97:66:a7:f3:0c:e1:c1:6d:02:1e:72:4e:7f:f8:
f2:05:38:9e:6a:dc:a8:a2:16:e7:a5:5f:45:9a:01:29:c4:10:
b1:ce:e7:0b:ab:0d:85:ef:eb:5f:ed:e1:e7:45:f8:14:da:38:
1c:7d:fb:f8:4a:4c:4d:fd:c9:ee:eb:6a:c7:7a:4b:40:56:93:
94:f7:71:29:8b:79:d9:7e:69:c4:6e:35:2e:2f:8e:5c:2f:f2:
fc:67:4c:f4:0f:59:df:91:7f:5f:b3:72:71:e7:41:05:0b:10:
56:69:c2:d2:dc:33:05:36:43:62:ab:25:11:45:79:e9:5d:45:
f6:80:1a:1a:d7:ae:74:c6:ec:dd:5c:8f:a8:61:3a:54:53:81:
1f:20:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:50 2026 by rpki-client