Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa
File: 5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa (raw, json)
Hash identifier: Cn3egeW7Svzjn6B2DztmCBuQlzu52DOzJj+3bmdAQVc=
Subject key identifier: E6:E5:E9:9B:59:8A:D8:B9:31:FE:1A:26:F5:8C:D5:63:A8:77:5F:C8
Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial: 019D763365A43F38EA2E42718B47DA3E09D8
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa
Signing time: Fri 10 Apr 2026 07:02:53 +0000
ROA not before: Fri 10 Apr 2026 07:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48014
IP address blocks: 185.136.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:33:65:a4:3f:38:ea:2e:42:71:8b:47:da:3e:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Validity
Not Before: Apr 10 07:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6e5e99b598ad8b931fe1a26f58cd563a8775fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:f7:66:e2:8e:c7:00:fa:e0:97:d0:dd:1c:
1a:a7:4b:b8:66:c2:0c:85:3b:99:90:e8:3f:64:f9:
89:10:81:16:58:bb:31:2c:2b:ad:bd:56:b1:f9:98:
44:42:98:53:4f:a3:e2:f7:9e:ba:a2:c6:8e:8e:67:
6d:93:b3:42:30:75:22:17:7b:a2:ec:5a:44:bf:c0:
54:c4:19:2f:51:89:69:ba:7f:6d:90:a8:26:66:92:
bb:b6:5e:c3:cb:71:03:2a:55:df:05:98:9f:91:57:
db:f6:67:e0:25:0c:5f:db:aa:cb:cb:79:61:98:69:
94:9d:76:ca:90:7a:45:44:da:14:82:5c:14:a9:0c:
92:78:94:5e:a1:23:a0:e3:7c:35:76:eb:23:1b:94:
fb:51:a5:e4:ee:33:53:ce:64:0e:7e:3d:dd:15:f0:
b0:af:f2:07:cd:c7:47:64:09:09:13:11:40:3d:41:
2d:67:1e:c7:67:ad:62:bd:7e:fa:fd:a3:2a:52:0d:
96:63:c8:0d:4b:a3:70:94:a8:d2:7b:c8:ae:ae:0f:
68:ed:36:3d:a0:05:d6:b4:60:d3:b8:88:68:12:77:
3b:33:de:4b:e6:75:da:4c:73:8c:d4:1b:2c:4d:6d:
12:58:d6:4d:d4:12:0f:70:d7:ed:3c:47:78:7d:1f:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:E9:9B:59:8A:D8:B9:31:FE:1A:26:F5:8C:D5:63:A8:77:5F:C8
X509v3 Authority Key Identifier:
keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.12.0/24
Signature Algorithm: sha256WithRSAEncryption
58:02:6d:e4:7f:96:6c:4e:1a:6b:26:31:2b:ef:e2:ba:c7:9f:
19:35:ca:23:b2:8d:ef:be:19:7f:38:0c:1b:ea:c5:97:71:89:
93:3a:62:9e:bf:c8:53:ee:42:7b:1a:20:35:00:53:5d:e9:d6:
e6:84:db:d6:47:a5:81:5d:96:4e:56:d1:5d:23:2a:f5:1c:78:
e3:00:eb:b8:dc:e0:2f:34:2b:10:35:b5:80:1b:5e:a6:9b:aa:
09:30:52:6e:6f:41:16:bc:17:c9:27:73:00:af:d8:56:b5:8f:
96:76:7c:9c:bc:d2:13:11:67:2a:34:3c:3b:f8:1e:aa:55:a7:
33:a8:83:61:30:7c:5d:e5:00:ef:a7:0c:3e:2e:0d:1b:09:9f:
6b:cf:c6:cf:73:ec:ec:bb:a5:43:8e:ec:08:78:8d:8b:46:61:
f0:6f:33:76:77:44:2f:c0:f5:ff:5d:b9:b7:64:25:2a:23:a0:
55:b8:ac:7c:bf:66:a5:d5:e2:74:c8:0d:8f:32:ba:34:49:2e:
8c:7e:7e:65:f3:04:0e:cb:27:11:5b:57:71:b5:9b:8a:62:8f:
3a:6f:77:f9:11:d1:7a:c5:3e:76:2d:5e:70:e5:fc:13:4c:a9:
2e:ff:57:43:4e:13:62:85:97:cd:00:0c:da:d6:e2:a5:96:13:
66:37:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:40 2026 by rpki-client