Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/5Nv5ZvX-dgvlECGfA772vvi7Pu8.roa
File: 5Nv5ZvX-dgvlECGfA772vvi7Pu8.roa (raw, json)
Hash identifier: ARwb8cKZO4IVM6e8qrKxoaRFCxWeYFfWShniGC6fqog=
Subject key identifier: E4:DB:F9:66:F5:FE:76:0B:E5:10:21:9F:03:BE:F6:BE:F8:BB:3E:EF
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01A0C846A1999C8F9A0DB2910991F51CEA76
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/5Nv5ZvX-dgvlECGfA772vvi7Pu8.roa
Signing time: Tue 22 Sep 2026 08:41:07 +0000
ROA not before: Tue 22 Sep 2026 08:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51175
IP address blocks: 188.123.199.0/24 maxlen: 24
188.123.204.0/22 maxlen: 22
188.123.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:46:a1:99:9c:8f:9a:0d:b2:91:09:91:f5:1c:ea:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Sep 22 08:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4dbf966f5fe760be510219f03bef6bef8bb3eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:b1:2d:a8:c0:7a:2d:7d:f2:1c:f3:38:3b:
7f:0d:52:bf:9f:97:b5:55:62:63:cb:4b:42:ee:af:
fb:7b:1d:c8:5c:6f:f0:e6:61:37:8f:21:4d:2d:de:
5d:d7:5c:8a:ec:7b:0d:e0:6b:f0:4b:43:df:3d:e6:
e9:6b:e9:d2:70:95:f8:c0:26:38:c1:68:6b:85:fb:
a7:76:22:b0:de:cd:f3:f6:71:17:f6:92:c3:cc:c9:
c2:8b:66:bd:94:f5:aa:11:da:60:a0:03:d4:fe:0f:
10:df:c3:06:f6:4a:cd:98:40:a0:6b:15:eb:1e:53:
88:ba:4b:25:09:8b:81:b2:b6:e3:16:f5:80:29:79:
fd:c7:12:f5:5f:50:5b:70:19:85:ec:29:a2:e7:57:
e5:5d:d9:9a:ed:73:e3:3f:18:af:ca:cd:aa:ec:62:
e4:86:84:d2:79:ba:ca:56:ab:66:a0:d1:26:96:80:
e2:ac:44:58:61:19:f9:a8:ff:32:34:82:da:3d:df:
84:65:fe:84:4b:a9:16:52:54:ff:c5:e0:dc:04:a2:
53:05:1f:1c:48:58:62:e7:7f:4e:d4:3e:34:23:d3:
4a:5f:5c:65:b9:18:80:8e:4a:97:cd:de:b3:c6:69:
1a:ce:46:af:a8:0f:66:05:81:d8:55:ae:29:3c:f9:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:F9:66:F5:FE:76:0B:E5:10:21:9F:03:BE:F6:BE:F8:BB:3E:EF
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/5Nv5ZvX-dgvlECGfA772vvi7Pu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.199.0/24
188.123.204.0/22
188.123.212.0/23
Signature Algorithm: sha256WithRSAEncryption
68:1b:76:15:e3:78:fe:d6:f0:f5:ad:5a:81:84:9a:53:d2:da:
96:21:6b:a1:07:78:1d:34:cc:3c:0b:4d:d2:cd:30:8c:02:58:
d4:d5:3f:ab:fe:c1:d6:46:90:2e:64:29:24:c0:0c:84:a4:31:
e0:dd:8d:87:5f:8e:5d:54:70:4e:a6:91:3e:70:e7:29:eb:07:
b8:1f:81:08:2e:46:82:de:9f:98:0e:82:56:54:51:df:a6:e7:
6c:0d:7a:f3:4f:73:30:c8:99:d8:53:de:33:53:9b:86:7d:08:
d3:83:10:7f:1f:68:a3:04:92:11:f1:d8:37:83:78:36:2a:5a:
3a:ea:47:e7:12:14:9a:7b:b8:e8:c4:4d:d8:b4:69:da:0c:1b:
cb:25:42:3b:37:a5:37:e2:a6:0b:91:e3:fb:68:11:45:07:d7:
b1:0c:06:9f:57:ce:a6:a1:d6:66:ae:b3:4e:7c:28:ad:a1:c8:
6b:6b:c6:a6:be:9c:95:f6:30:7f:fe:de:ea:e4:14:97:fe:60:
5a:6f:c1:67:19:c7:b3:e2:ed:32:0b:76:87:b1:cf:ab:3e:71:
62:14:b7:84:d0:ef:69:9f:24:e5:e8:99:ad:ca:26:c3:0a:be:
d0:57:fd:c8:58:80:f1:c1:08:bc:47:2a:76:4b:a4:e6:0b:0f:
15:b2:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:27 2026 by rpki-client