Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dsYxmW7HfkiWkx1b2LRdVorWVec.roa
File: dsYxmW7HfkiWkx1b2LRdVorWVec.roa (raw, json)
Hash identifier: q4rS4NBNc4WRGzoZFfyUSbAvXN5s7eaNBf33x1f7MzM=
Subject key identifier: 76:C6:31:99:6E:C7:7E:48:96:93:1D:5B:D8:B4:5D:56:8A:D6:55:E7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A17C9E8491ADA742CB7C5F73B8B3C3CBDA
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dsYxmW7HfkiWkx1b2LRdVorWVec.roa
Signing time: Tue 27 Oct 2026 09:08:45 +0000
ROA not before: Tue 27 Oct 2026 09:08:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10648
IP address blocks: 5.100.231.0/24 maxlen: 24
213.214.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:9e:84:91:ad:a7:42:cb:7c:5f:73:b8:b3:c3:cb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 27 09:08:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76c631996ec77e4896931d5bd8b45d568ad655e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:eb:55:b3:63:33:f3:4c:d6:84:af:91:a2:
3d:40:63:bf:d2:cb:8a:31:f4:b6:d4:da:bc:2e:f0:
77:56:74:08:4e:66:57:4a:cd:85:52:25:61:80:06:
cf:a5:af:3b:46:95:f1:6b:d8:e2:98:b6:be:ed:93:
24:e3:86:1b:40:f4:60:cb:96:50:9b:8a:41:bb:29:
bc:49:20:22:53:ab:09:c2:10:1a:87:cc:aa:e6:14:
1b:87:6a:69:74:eb:d5:f2:40:ea:11:e2:0b:17:6a:
86:0e:65:c2:4e:9b:f3:70:3c:3e:b0:6e:f2:07:75:
e1:63:5b:95:52:02:9e:5a:a4:4e:73:4e:9e:8e:76:
a5:ff:1a:f2:be:19:1a:d5:cd:4f:3c:25:0f:45:9e:
bb:ae:1f:37:03:57:be:7a:61:46:a8:aa:ea:8c:76:
e3:6c:84:58:f9:f5:fe:97:ec:d4:72:31:8d:77:eb:
dc:0e:c0:1d:02:94:37:24:73:74:91:df:8a:d4:3d:
e4:7b:ba:26:51:cd:9f:27:7c:eb:28:85:ba:57:0f:
d3:26:dc:7b:5e:7e:8e:8e:7a:a1:17:f0:22:d0:99:
5f:80:dc:31:70:b2:f0:70:b1:89:6e:1a:d8:54:3f:
d9:c3:a1:c8:a0:39:08:db:86:3e:85:f4:df:8a:f6:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:31:99:6E:C7:7E:48:96:93:1D:5B:D8:B4:5D:56:8A:D6:55:E7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/dsYxmW7HfkiWkx1b2LRdVorWVec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.231.0/24
213.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:92:99:cc:00:2f:e8:f1:a3:cc:48:bd:d2:65:5f:17:ef:55:
29:b3:cf:88:0b:64:f0:5e:7c:2d:c9:c2:cf:60:66:df:14:4f:
03:f9:61:62:9c:69:b2:1f:df:17:71:9b:8e:cc:f4:7d:9b:0c:
f6:23:01:cb:97:05:70:e4:09:58:b8:b0:cd:8e:dd:80:53:11:
8e:0d:ec:03:cb:b1:fd:da:6f:da:c4:4a:f9:4c:59:07:d7:a2:
6f:db:19:27:63:79:8f:c5:ac:cf:9b:52:2b:25:fd:1f:2f:f6:
ac:e2:e1:bf:9f:65:8d:e0:cf:fd:0b:bd:80:d3:e3:04:c6:41:
51:aa:14:a0:98:37:01:de:aa:b5:0d:f8:a4:f0:ca:85:36:08:
a2:27:63:d4:b9:bb:63:ff:c7:fe:25:bc:d4:63:fb:8a:fd:51:
80:fb:4e:f4:01:c8:53:41:40:3b:6d:ef:42:98:aa:2e:eb:e2:
7b:f0:b1:03:fb:af:0b:13:71:03:62:22:1b:43:33:00:fd:bd:
f4:d8:ff:93:b8:88:fc:f6:7f:12:c4:72:4e:87:b1:4f:22:34:
54:72:4d:86:37:ec:1e:ac:f0:30:d0:57:fd:61:17:ad:14:78:
42:b0:f3:e0:81:c8:09:4f:9b:93:55:83:ee:06:45:49:9b:5e:
f7:8a:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:16 2026 by rpki-client