Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/5MYsrTrGt0DK3hhe_hTnJHjRUSk.roa
File: 5MYsrTrGt0DK3hhe_hTnJHjRUSk.roa (raw, json)
Hash identifier: d8Ob0+iWtRfV6Nx5Pu8v5JKQ/eOTHxz4fRHVoGisGcw=
Subject key identifier: E4:C6:2C:AD:3A:C6:B7:40:CA:DE:18:5E:FE:14:E7:24:78:D1:51:29
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 019F23686C3A94FBE1059A1E2E15298F45DC
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/5MYsrTrGt0DK3hhe_hTnJHjRUSk.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202844
IP address blocks: 109.205.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:3a:94:fb:e1:05:9a:1e:2e:15:29:8f:45:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4c62cad3ac6b740cade185efe14e72478d15129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:31:6c:c4:92:10:53:5d:4e:78:6c:45:65:
d5:99:e4:14:7f:36:6f:ce:fe:0f:45:2c:35:66:95:
e1:cd:f5:aa:50:89:e9:07:17:87:fa:6f:05:61:67:
cb:a7:db:8a:5f:fc:4d:a6:3d:11:47:22:c8:30:90:
96:cf:7a:7d:9e:4b:fb:ec:a6:cf:fe:42:35:5a:39:
c2:20:86:60:16:e8:84:b4:60:b4:fb:a6:f0:f5:2b:
86:a4:17:fe:a0:8e:61:fc:d1:34:95:48:f4:09:1b:
21:ea:31:ce:2c:c6:4c:12:a6:82:43:38:94:d0:c9:
51:8e:de:cb:6e:0e:95:79:cb:ec:6e:fc:c8:fb:dd:
44:5a:43:ba:a8:f8:11:df:9c:56:ca:3a:49:47:73:
7e:c1:8d:b3:d5:dd:bc:ce:f0:cc:25:7c:cb:31:01:
33:64:0a:2b:33:45:73:ad:7b:a3:68:df:4f:d0:c5:
b5:8e:c2:d7:c9:4b:0c:49:72:fb:d0:f8:ad:92:38:
2a:b9:3d:e5:ab:d7:2e:12:af:36:59:35:d2:6f:a6:
0f:bf:5f:62:55:dc:8a:cd:87:b6:e0:62:82:8f:3c:
83:61:de:fe:b8:6f:eb:4d:63:4f:05:01:67:66:30:
15:76:8b:b4:31:c2:af:16:9f:13:a8:79:01:90:9c:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:2C:AD:3A:C6:B7:40:CA:DE:18:5E:FE:14:E7:24:78:D1:51:29
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/5MYsrTrGt0DK3hhe_hTnJHjRUSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.136.0/22
Signature Algorithm: sha256WithRSAEncryption
69:a4:3c:0d:5e:03:7c:93:36:a1:1f:1a:17:76:63:37:bd:d5:
df:63:f1:ac:bb:05:6e:23:10:7d:c7:c7:e5:49:a8:05:8a:29:
2c:5a:28:57:1f:1d:88:ea:d7:4d:59:7b:d9:80:02:0d:d2:7d:
04:50:5a:04:36:e1:d5:18:b6:fb:68:a7:47:10:cc:fe:93:10:
36:98:e6:5f:98:6e:c3:25:cd:d5:b0:68:16:d4:eb:1e:eb:99:
74:58:01:d3:31:24:90:cb:a4:28:ed:49:8f:bc:0d:5a:f7:31:
20:a3:62:5c:5d:5d:da:95:8d:55:48:f2:65:6d:e5:e0:50:f4:
51:30:d4:70:cb:a6:35:7b:77:8c:2c:16:3c:a0:50:2c:eb:c7:
69:a6:20:99:e2:8d:ce:ce:f4:5b:a7:f0:fd:5d:8f:65:4a:df:
75:e7:db:87:6a:1b:b9:f2:1d:97:46:ed:f1:42:f9:7d:9b:c0:
63:ea:be:4b:9c:a5:e2:5e:8f:62:8f:a0:2c:b0:26:08:e0:5e:
9e:4d:54:c9:2e:ea:16:be:bb:17:1a:90:b3:57:ec:2d:27:a4:
68:09:40:2e:5b:4f:38:1d:28:d5:73:d0:34:44:b0:73:72:3b:
bf:b9:c4:04:15:48:77:aa:8b:ae:db:9b:b9:8b:95:3f:48:b2:
03:ab:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:14 2026 by rpki-client