Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/5O-01ndXn91lvA7IGVp_7JD4C-I.roa
File: 5O-01ndXn91lvA7IGVp_7JD4C-I.roa (raw, json)
Hash identifier: nMoMotkyMIOIoR19nWnqbdZxJYSLaTBAftysCvWr7wQ=
Subject key identifier: E4:EF:B4:D6:77:57:9F:DD:65:BC:0E:C8:19:5A:7F:EC:90:F8:0B:E2
Certificate issuer: /CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
Certificate serial: 019F2368BB20FA0866F565F217968298EFC8
Authority key identifier: A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/5O-01ndXn91lvA7IGVp_7JD4C-I.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20825
IP address blocks: 192.109.211.0/24 maxlen: 24
192.109.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:20:fa:08:66:f5:65:f2:17:96:82:98:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4efb4d677579fdd65bc0ec8195a7fec90f80be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:18:1a:d6:6b:f6:7e:1d:53:cc:74:4b:7b:
77:34:33:6e:8f:17:0e:c1:5c:5e:9f:6f:f2:74:3c:
a9:26:fd:11:35:d7:db:d2:3e:fd:64:d9:8e:75:fa:
44:90:28:6e:7e:7b:9f:1c:96:95:4f:c4:ed:4c:2e:
03:fe:7b:cf:a5:9b:ed:b2:2f:63:46:c2:51:0b:11:
a6:92:ff:a6:54:1f:d9:b2:81:dc:da:91:fd:9a:e8:
2e:e8:3b:7f:ac:15:06:b3:38:95:21:14:27:49:33:
9f:67:61:3b:71:73:68:09:77:f4:35:e3:51:51:4e:
84:7f:20:10:bc:6a:68:7f:ce:17:ab:04:64:cb:b6:
e7:44:c6:08:2a:af:01:c3:ea:cc:ab:c6:1a:30:eb:
a7:64:1e:9d:81:e4:8b:99:81:57:1d:a5:13:8c:2e:
ad:43:1b:b9:47:c9:51:1f:7c:e1:d8:f4:a1:68:8c:
d4:39:6b:7d:1a:08:4f:8f:2e:7e:43:e3:71:c9:7d:
67:72:a5:72:0b:a2:28:bd:f3:87:ad:55:24:af:96:
d3:9e:c3:13:83:df:d3:4d:07:86:68:9d:28:b7:c1:
37:c4:b7:79:5d:47:8c:cc:ee:71:b0:7b:30:a5:17:
86:e7:2d:cd:56:6f:2a:5a:ed:f5:07:17:e5:41:a4:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:B4:D6:77:57:9F:DD:65:BC:0E:C8:19:5A:7F:EC:90:F8:0B:E2
X509v3 Authority Key Identifier:
keyid:A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/5O-01ndXn91lvA7IGVp_7JD4C-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.211.0-192.109.212.255
Signature Algorithm: sha256WithRSAEncryption
5b:63:00:77:49:f7:be:84:70:18:af:1a:4b:f1:07:a2:6e:db:
47:0b:e4:05:86:4e:df:2b:bb:af:74:fb:dc:62:c8:5c:3e:12:
49:16:33:35:ad:53:ed:5d:f6:9e:82:7a:2c:b8:0c:02:bb:80:
5f:6a:6f:dd:0a:8d:50:54:b2:61:6e:d7:1e:2c:55:0f:17:cc:
92:b0:e4:bc:05:35:fa:03:0b:31:6d:e6:e8:5b:22:91:7f:2f:
c7:53:0a:fe:35:52:2a:d4:dc:97:2a:44:de:ff:b4:ce:c6:54:
3c:eb:cf:bc:00:5d:6f:d2:36:6b:d3:c0:c4:a7:be:08:1f:ae:
ba:c0:09:68:6c:ba:b2:ac:53:94:5a:1f:f9:7f:07:02:44:24:
cd:39:8c:5c:7a:40:32:f2:d2:87:d4:8a:4d:19:42:4a:aa:4f:
1c:a2:40:db:de:95:fd:52:b3:68:d9:13:75:88:26:49:ef:94:
3e:8c:3c:68:62:d6:54:47:03:bb:ff:f4:6b:da:26:77:8c:6b:
f1:bf:e3:e5:15:c7:1b:14:7f:59:0c:76:be:4c:e5:47:b0:8c:
4e:e1:6f:4f:67:09:60:9b:67:0f:11:0b:25:f8:66:60:f7:c5:
b7:87:8b:e4:e5:0e:0d:22:ae:af:49:87:0d:5d:d8:11:86:51:
8b:d2:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:57 2026 by rpki-client