Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/5VTYF8RHuM9hcpAN3kwPNt4o2dA.roa
File: 5VTYF8RHuM9hcpAN3kwPNt4o2dA.roa (raw, json)
Hash identifier: Rd+pDgwOetwYm3BS2RYIzb2Wh7xKpHMttU38WFORi7g=
Subject key identifier: E5:54:D8:17:C4:47:B8:CF:61:72:90:0D:DE:4C:0F:36:DE:28:D9:D0
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F8AD889366BAA7A283A4639687B6F925C
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/5VTYF8RHuM9hcpAN3kwPNt4o2dA.roa
Signing time: Wed 22 Jul 2026 17:21:14 +0000
ROA not before: Wed 22 Jul 2026 17:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a09:3f00:6100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:d8:89:36:6b:aa:7a:28:3a:46:39:68:7b:6f:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 22 17:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e554d817c447b8cf6172900dde4c0f36de28d9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:0b:01:68:14:d2:6a:e6:31:0d:5c:7a:a2:
56:d9:ad:65:e6:01:c4:e6:69:34:51:b4:f1:84:88:
90:90:10:ec:a5:43:79:dd:cc:84:46:cd:0b:8d:ec:
ec:25:30:69:a3:7a:27:98:9c:e7:c9:38:d9:e0:e4:
a2:60:b3:43:ff:aa:f6:66:14:ce:72:a4:bc:05:05:
44:af:15:07:45:12:6f:8a:71:cd:1d:f6:78:f0:65:
44:3d:59:9f:d2:c7:6b:ba:e0:66:74:d6:a7:25:3a:
5a:29:a5:86:4e:73:36:15:ec:61:93:0c:53:91:27:
5b:4b:21:72:74:b3:2f:7f:70:c1:22:d2:2f:df:31:
a4:53:d4:84:90:b4:31:1f:0f:35:c3:e9:10:00:c4:
a0:13:c5:f0:dc:8c:4e:32:38:40:cc:1e:82:d0:cd:
21:3e:82:06:6f:65:db:73:44:fa:2a:f4:70:12:c2:
15:df:71:33:c5:66:ac:f9:f8:e2:43:0a:30:51:c0:
95:49:62:8d:d8:12:de:ae:5e:f2:54:69:a0:74:47:
d7:6c:b3:3f:0d:98:f6:43:65:92:13:da:8d:ea:5e:
5e:9b:6c:5a:71:79:e4:d9:34:e6:cb:9b:cf:34:a2:
05:f3:3f:44:fb:ee:6e:02:4d:12:aa:2b:2b:e0:07:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:54:D8:17:C4:47:B8:CF:61:72:90:0D:DE:4C:0F:36:DE:28:D9:D0
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/5VTYF8RHuM9hcpAN3kwPNt4o2dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:6100::/40
Signature Algorithm: sha256WithRSAEncryption
47:2c:97:40:06:e6:58:15:27:16:61:86:74:2e:ff:67:2a:36:
e8:64:86:2a:bb:3b:cf:c0:cd:30:16:c1:5a:14:e5:d2:bf:a3:
4e:5f:0a:e8:c1:c1:5a:0b:26:e2:de:c2:8c:29:ea:32:30:0b:
4a:e6:2a:33:03:49:c1:5c:4e:45:42:7b:e0:87:ce:01:ce:96:
64:97:e4:00:98:ae:33:fc:e2:6b:24:06:af:c8:c4:d3:29:9e:
b2:9d:e5:63:b9:b3:70:ea:f0:0c:ef:70:3d:67:4d:4f:7d:6d:
e4:f4:97:d1:ff:1b:0d:08:5a:a6:cc:0d:0c:39:05:67:ba:6e:
08:b6:c0:51:2f:9d:0c:8e:21:8f:8f:6b:89:e2:a2:cc:28:4a:
bc:23:1f:33:72:d3:43:08:bd:18:a0:4e:e8:4a:06:78:51:3a:
94:86:43:8c:54:fd:9e:59:67:3d:87:84:27:d3:14:09:6f:a3:
89:e0:d1:62:59:7a:8a:75:16:bd:5f:c0:de:ca:37:a6:85:47:
55:0a:f1:63:7e:b2:73:80:81:b9:81:01:9d:f5:59:a4:87:9e:
20:8b:eb:b0:6e:0c:ed:d1:bb:37:98:ef:67:04:1e:60:ce:a1:
e0:11:bf:51:2c:f3:15:95:bd:e6:16:0d:4a:8f:5a:00:45:eb:
38:63:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:32 2026 by rpki-client