Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/rKSwg-gfGohjWHPkbqPBm-9aCJ4.roa
File: rKSwg-gfGohjWHPkbqPBm-9aCJ4.roa (raw, json)
Hash identifier: bo7MuT5NBAuRXYh/PevXBd3Gv+xnMii2bi8veJxYQec=
Subject key identifier: AC:A4:B0:83:E8:1F:1A:88:63:58:73:E4:6E:A3:C1:9B:EF:5A:08:9E
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019F94297B4732F8EB82C7D9D3EC107F7FCE
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/rKSwg-gfGohjWHPkbqPBm-9aCJ4.roa
Signing time: Fri 24 Jul 2026 12:46:14 +0000
ROA not before: Fri 24 Jul 2026 12:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219140
IP address blocks: 5.134.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:29:7b:47:32:f8:eb:82:c7:d9:d3:ec:10:7f:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 24 12:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca4b083e81f1a88635873e46ea3c19bef5a089e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:ef:3b:26:b0:0f:c9:8d:69:65:31:2b:d4:
01:c1:ca:85:f4:27:b7:6f:74:6c:a4:15:88:d3:16:
22:01:dc:d1:51:66:ad:1c:fd:cb:be:45:c6:ae:c1:
82:23:0b:cf:f8:93:23:82:3e:2a:30:71:e0:2b:c4:
9a:78:02:60:ba:c4:2f:96:f1:d3:74:6e:3f:e3:ae:
37:83:04:00:d3:09:e2:4d:98:0c:e6:03:67:7f:9e:
2c:82:1a:6c:9a:fa:cb:a7:a1:64:f6:c8:bc:17:7a:
3a:99:09:c2:5b:9b:29:b9:cf:43:2e:de:b3:1b:fa:
41:14:1e:e5:67:3a:53:d4:6d:69:e0:3c:78:bd:b3:
1b:91:6d:54:07:5b:04:11:3f:aa:cd:c0:b1:18:b9:
2c:07:e0:5a:d5:98:fc:68:db:54:31:00:0f:f2:05:
84:b9:06:64:42:e4:6c:f0:4e:44:ec:ff:5e:1b:c5:
53:c8:3c:6f:65:b9:4a:ee:d9:4e:05:91:ef:a7:66:
94:69:ac:73:1d:38:0c:d1:c0:78:9a:5d:17:7b:02:
43:ba:4f:e1:b6:8c:2e:87:e1:94:f1:10:8e:37:03:
73:c2:22:f3:44:f5:3a:0f:52:28:4d:66:f7:6f:e0:
c0:5b:7b:85:ed:ce:9d:22:5a:28:8e:a6:ce:4b:19:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:B0:83:E8:1F:1A:88:63:58:73:E4:6E:A3:C1:9B:EF:5A:08:9E
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/rKSwg-gfGohjWHPkbqPBm-9aCJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.81.0/24
Signature Algorithm: sha256WithRSAEncryption
89:53:7a:1b:23:d2:65:da:04:07:d3:80:80:3c:45:29:c3:89:
f9:0b:c9:88:18:00:a6:7c:92:88:54:8b:5f:42:b4:e5:88:95:
f5:2d:fc:45:f9:29:36:46:a1:81:64:83:d5:18:4e:d0:36:6f:
7d:37:c4:b1:3f:99:09:1f:1e:15:f9:d9:7f:71:38:4b:ac:6d:
b3:ce:b0:d5:b5:e2:af:70:7c:85:65:e5:fc:b3:ed:72:18:62:
6c:61:72:4b:ab:f1:01:6d:36:4a:79:cf:9d:7d:df:73:f9:12:
34:5c:0f:75:9c:f7:65:40:e1:8d:44:38:f5:b6:cd:d5:5d:60:
b3:22:48:a3:ee:cf:84:6e:53:cb:e8:77:d0:56:9c:eb:c2:fb:
f7:19:44:0d:72:25:ba:5c:90:56:d4:2f:56:73:f7:12:ec:f0:
27:30:33:9c:b5:11:f3:d5:67:9a:bb:ef:9f:a0:85:8a:0d:f2:
6d:2f:df:de:05:f5:3b:e8:40:f5:46:30:14:3a:b9:06:d4:7a:
32:ef:2f:90:5f:97:84:59:1e:ec:e9:8b:9c:c6:e5:99:97:8e:
e7:72:a2:12:cc:00:fc:ae:5f:08:4f:25:28:37:db:93:9f:1e:
1f:26:2d:94:ec:10:aa:0f:04:d2:20:60:43:79:78:11:04:ee:
0a:31:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:58 2026 by rpki-client