Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/5FYGYJ3CTJgz_RO6RtjrvdukztM.roa
File: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (raw, json)
Hash identifier: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=
Subject key identifier: E4:56:06:60:9D:C2:4C:98:33:FD:13:BA:46:D8:EB:BD:DB:A4:CE:D3
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019ED1235E50977C080A4CFE11C91458F4E8
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/5FYGYJ3CTJgz_RO6RtjrvdukztM.roa
Signing time: Tue 16 Jun 2026 15:53:36 +0000
ROA not before: Tue 16 Jun 2026 15:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202069
IP address blocks: 152.175.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:23:5e:50:97:7c:08:0a:4c:fe:11:c9:14:58:f4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 16 15:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e45606609dc24c9833fd13ba46d8ebbddba4ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:5c:4d:8e:bb:13:46:b1:3b:54:ed:cb:c1:
bb:6f:c3:06:32:d0:05:ff:4f:f8:d8:59:74:d7:0a:
70:17:91:46:47:99:c5:ec:e1:eb:38:1d:cd:95:06:
a3:2c:d9:fc:8f:f9:23:b6:ed:42:8f:da:32:14:42:
10:f4:60:c3:0b:f8:31:3f:1b:b8:8f:80:69:3c:19:
4f:5e:46:37:5a:00:70:38:19:b2:96:09:0c:11:5e:
76:ff:97:5e:43:5e:f1:a5:37:0b:e7:7b:fe:57:0f:
c3:2c:2a:9d:3d:f2:15:c0:2a:3f:dc:87:f6:b1:3d:
22:66:9b:b1:f7:aa:ad:92:41:9b:d6:1c:99:7a:7a:
c4:da:19:4b:37:6f:fb:a1:be:dd:aa:3c:bc:96:ff:
ef:a1:ae:6b:23:ef:b7:76:7b:eb:6d:ae:9d:36:11:
aa:a7:a6:fa:c3:61:57:c3:91:70:1c:cb:97:0c:d6:
a2:cb:8e:e9:41:59:4a:e2:33:ff:9c:e6:66:03:7d:
ac:81:fe:3c:6f:a2:57:55:57:64:cc:d4:9b:18:84:
93:d6:cb:37:f6:e6:aa:d9:df:e0:f7:ce:82:d1:6d:
f2:5f:79:85:4a:dc:83:8d:35:32:69:10:4e:72:3c:
ea:a7:85:f3:10:f4:8f:b3:34:b1:19:43:c6:00:c4:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:06:60:9D:C2:4C:98:33:FD:13:BA:46:D8:EB:BD:DB:A4:CE:D3
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/5FYGYJ3CTJgz_RO6RtjrvdukztM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:98:02:eb:21:78:08:c4:2e:f2:a9:6a:69:a2:43:00:1d:df:
69:0b:8e:40:b2:5f:bd:d6:83:fb:4e:e9:33:17:9e:10:4c:79:
1b:40:1b:11:6a:14:33:38:1f:8b:c7:ac:1c:5a:a2:b5:41:9d:
c8:c1:94:78:ca:ed:0e:02:7b:94:a2:4c:3d:e0:08:c7:b2:d5:
2d:78:bb:34:b5:4c:f9:ac:22:e0:ac:9a:75:98:33:79:b7:61:
99:70:5b:df:97:dc:69:6d:03:15:13:0a:ab:78:37:9b:bf:5b:
49:99:77:9d:07:44:35:94:19:c7:7b:26:67:57:db:e3:69:2c:
10:34:ca:b2:4d:79:72:74:e3:e7:9f:6f:16:9b:a5:9f:a5:fd:
73:e7:5b:90:e2:6a:82:ce:8e:88:cc:28:be:b1:3c:b7:17:64:
6e:fd:3f:cd:d7:7c:30:6a:00:9c:e9:90:5c:8f:ce:53:c3:80:
68:0f:52:1c:95:d3:de:b2:59:6e:4f:a1:e8:c4:e9:87:67:c7:
72:b7:da:bd:f1:51:5e:dd:c8:b3:43:b4:8b:d9:bd:9f:92:3a:
40:26:bb:a3:e5:72:1e:1b:74:2a:9f:31:16:db:60:46:d0:b0:
76:6f:3f:94:76:34:06:77:eb:79:d4:75:14:9a:52:30:c5:f3:
f0:73:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:07 2026 by rpki-client