Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/_l4YjibNL4tMMVqIwdmfRf9vXqI.roa
File: _l4YjibNL4tMMVqIwdmfRf9vXqI.roa (raw, json)
Hash identifier: P9JOmxd5QUs3HnQ33b/0KwXQ8MA8bLPVK9YMxcnjWHU=
Subject key identifier: FE:5E:18:8E:26:CD:2F:8B:4C:31:5A:88:C1:D9:9F:45:FF:6F:5E:A2
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01A07B6261B03B16ADE37EEC094770F7A126
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/_l4YjibNL4tMMVqIwdmfRf9vXqI.roa
Signing time: Mon 07 Sep 2026 10:20:40 +0000
ROA not before: Mon 07 Sep 2026 10:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211775
IP address blocks: 5.150.8.0/21 maxlen: 21
5.150.16.0/24 maxlen: 24
5.150.24.0/24 maxlen: 24
5.150.63.0/24 maxlen: 24
194.59.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:62:61:b0:3b:16:ad:e3:7e:ec:09:47:70:f7:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Sep 7 10:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe5e188e26cd2f8b4c315a88c1d99f45ff6f5ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:bd:8a:b0:94:b5:9c:28:9e:d2:2c:e2:d7:
e2:eb:91:f3:c1:08:9c:ad:26:7a:c6:a7:08:f5:b0:
80:ac:3b:88:bd:f2:25:5d:da:52:8c:ae:dc:9f:58:
e5:6b:ea:af:db:f1:13:d7:f5:42:d9:1f:f2:ed:24:
21:88:38:7a:50:7b:bd:7e:ea:5f:84:aa:fc:b2:9d:
b3:0b:be:83:2c:ba:a7:20:5d:25:5b:2d:e7:53:a3:
79:b8:39:50:ce:b2:5c:db:16:1f:5f:62:b6:af:09:
4c:f2:96:0b:5e:43:74:3a:5b:cd:01:84:f6:ac:99:
98:35:5a:79:83:4c:e5:38:25:d6:87:b2:62:6b:81:
3d:71:85:f6:c9:7c:b7:eb:4d:dc:61:3e:e4:f7:54:
c9:cf:3e:a2:4a:5c:ee:ec:00:37:5c:63:21:7c:15:
ef:68:f1:b3:13:e8:d3:66:fb:ce:e6:42:1c:b3:a9:
76:ec:65:1f:15:81:bf:58:3b:b8:ca:92:1f:ce:f0:
1b:a2:84:e7:38:86:da:d7:40:59:fb:70:f8:79:ee:
41:77:56:ce:03:30:2d:80:68:b6:85:f8:88:dd:89:
3c:fa:3c:2d:4c:6b:a0:ef:44:d4:b1:9a:2c:b5:a1:
4d:41:4a:e9:87:94:d8:14:33:13:78:cb:6a:ab:d3:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:18:8E:26:CD:2F:8B:4C:31:5A:88:C1:D9:9F:45:FF:6F:5E:A2
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/_l4YjibNL4tMMVqIwdmfRf9vXqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.8.0-5.150.16.255
5.150.24.0/24
5.150.63.0/24
194.59.0.0/23
Signature Algorithm: sha256WithRSAEncryption
69:f9:12:08:7f:96:19:16:6b:a9:e1:f1:93:e6:3d:4e:bd:c6:
a7:e0:09:4e:fc:c5:fe:4b:7d:b1:6a:95:03:52:6d:8b:c9:8b:
a7:51:91:61:79:6d:05:b7:35:fa:b7:87:dd:03:3e:32:1f:ed:
63:ee:f5:a5:01:41:56:24:70:2d:d9:55:2e:b7:10:18:de:50:
69:da:bf:44:fb:b7:53:76:13:3c:55:81:64:24:3b:f3:08:b6:
de:92:f3:cd:c0:a8:f7:81:a4:95:e3:14:9e:2b:b8:71:31:78:
8e:8f:5c:70:e5:07:ef:65:b9:cd:59:5a:71:8f:44:03:b2:19:
a4:ae:b2:de:17:c1:1b:56:2c:f7:b5:84:c3:e8:98:a8:ee:fb:
56:11:c0:1e:a8:3f:44:d1:dc:75:fe:b6:cc:78:91:f3:5d:14:
7d:08:be:44:64:e4:f3:74:d7:b7:ef:c5:02:e8:eb:46:df:29:
a1:aa:68:75:2e:f0:9f:28:0e:20:cc:6c:0c:6f:d4:e1:14:6b:
68:dd:14:16:dc:0f:25:45:ac:c7:83:97:07:da:cf:5e:16:53:
8b:88:6a:ef:eb:0b:5b:0f:88:d1:db:19:31:80:b3:0e:f9:00:
72:64:dd:5f:a3:44:4d:6d:48:d4:61:85:1d:df:d0:08:59:00:
79:c5:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:50 2026 by rpki-client