Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa
File: 5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa (raw, json)
Hash identifier: 7yWAM4rRw5M/JV2A3HQ3yWCJTTzj2IN/RNPOITjQ4mE=
Subject key identifier: E5:9F:79:81:48:92:74:E1:B8:AF:FB:B3:02:23:7C:D2:B9:50:AF:E4
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 019F2369257385431AFC179F7D915BE7691E
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2259
IP address blocks: 134.158.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:25:73:85:43:1a:fc:17:9f:7d:91:5b:e7:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e59f7981489274e1b8affbb302237cd2b950afe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:6d:1a:7a:f2:56:34:43:39:d7:cb:22:65:
a3:20:e6:77:cf:09:ac:ee:de:ef:95:36:a4:25:b3:
c1:90:7e:a3:10:f2:59:61:35:17:b7:25:74:ef:a5:
4a:60:f2:85:90:be:47:54:c6:92:70:f5:66:8b:05:
2d:78:38:8e:33:94:16:dc:d9:3d:88:07:f9:be:69:
24:68:e0:46:7d:e0:a2:41:e3:c3:6b:4f:9e:68:d1:
97:bb:02:a0:64:73:e0:60:32:f9:97:a7:68:e7:ac:
c6:14:bd:5d:1c:3f:35:fa:8e:94:ba:f2:d8:60:b2:
c9:be:46:2f:05:16:4a:7c:37:f7:fd:4a:67:97:2b:
94:7d:5e:d5:bf:cf:81:95:e4:0c:1a:e3:d3:1d:42:
0f:f4:b4:b6:10:08:70:26:de:b4:83:8a:27:05:a5:
e2:c1:01:63:8c:dc:5a:b1:d4:9c:d9:6c:f6:19:7a:
5a:6f:bc:67:79:ac:3a:6e:01:ba:73:48:66:23:86:
a8:b7:d0:5a:fb:0c:3e:99:f0:e0:d0:3b:3b:cd:53:
2d:27:a5:2f:a2:40:ac:04:96:20:e5:d0:1d:08:81:
97:eb:2b:4c:65:17:1c:53:38:da:49:70:54:ad:49:
93:79:6f:6c:5f:c8:97:eb:15:5b:79:d3:e8:f1:df:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:79:81:48:92:74:E1:B8:AF:FB:B3:02:23:7C:D2:B9:50:AF:E4
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.158.144.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:7c:bc:e5:88:49:01:be:b8:4a:d5:5c:57:ae:12:26:04:b6:
ad:cf:44:75:05:b8:11:f3:32:68:f1:70:78:d3:e3:75:f5:6f:
b5:af:b9:25:68:ac:14:3a:a8:7e:e1:d2:e9:23:20:92:d4:d7:
e7:9c:01:ae:53:39:96:f7:a7:4e:d2:a1:e2:48:4d:13:75:5d:
0f:a2:fc:0c:1c:e8:14:f5:d7:4f:f1:c9:02:1b:93:b5:55:52:
2d:f0:2a:c7:2a:51:9e:61:a3:49:43:2e:50:39:9a:e3:f4:13:
27:72:f3:4c:7b:93:02:60:3d:60:15:51:5c:a8:7f:ef:73:8b:
a3:60:1f:4f:d4:0d:a9:e1:c2:87:e3:b8:a4:45:62:ee:03:ca:
1e:b4:b2:70:1c:59:55:bc:85:b7:6a:d1:d7:b6:bf:e3:2e:0a:
11:89:35:f4:1a:79:5a:66:93:83:c7:3a:3e:20:12:6b:87:39:
ba:47:29:73:76:32:b3:bc:d6:2b:1e:66:27:bc:be:19:ab:cc:
02:a9:f2:c7:ee:6a:49:78:50:5e:03:54:67:11:cf:a5:54:cc:
64:a2:ee:f6:75:48:be:c0:82:e6:51:da:13:be:e5:3c:7e:d8:
16:13:f6:bd:f8:bd:b3:03:35:39:dd:27:67:5f:f0:fc:ff:34:
97:45:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:22 2026 by rpki-client