Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/5iHp1QJzSxFi9y4pkePt5QKL-Zg.roa
File: 5iHp1QJzSxFi9y4pkePt5QKL-Zg.roa (raw, json)
Hash identifier: lJiI1N3DnF79ErzjbyhVb741cRQCBNwpN9QEJj/N4lg=
Subject key identifier: E6:21:E9:D5:02:73:4B:11:62:F7:2E:29:91:E3:ED:E5:02:8B:F9:98
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 019F12F4BA99873DB5F3AD675149C27B65AD
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/5iHp1QJzSxFi9y4pkePt5QKL-Zg.roa
Signing time: Mon 29 Jun 2026 10:37:36 +0000
ROA not before: Mon 29 Jun 2026 10:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206392
IP address blocks: 91.243.79.0/24 maxlen: 24
2a14:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:f4:ba:99:87:3d:b5:f3:ad:67:51:49:c2:7b:65:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Jun 29 10:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e621e9d502734b1162f72e2991e3ede5028bf998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:99:e2:9e:4c:a3:45:72:65:22:ed:3a:aa:
96:e0:3a:07:15:d6:9c:98:31:09:47:f1:41:a7:82:
e4:ba:6f:d7:a9:68:2e:6f:92:f8:0e:46:9e:ae:52:
8d:5c:e5:0b:c9:1c:f4:86:db:73:76:57:55:4c:4c:
29:87:41:99:ba:f9:1b:c6:b7:c0:1e:69:43:04:7f:
41:a9:a4:a8:21:a9:70:93:6f:2a:cf:c0:30:a0:cb:
48:ff:5a:b9:19:05:3b:d7:d6:9d:51:36:c2:9d:61:
c9:7f:42:12:e2:be:e5:91:c7:44:c7:a3:40:44:5c:
98:63:24:88:7d:33:6d:73:f0:2e:ea:9a:26:e7:d0:
30:33:46:b4:e6:cc:a4:44:85:23:67:df:cb:ce:bc:
83:6b:f9:18:06:ca:f2:a2:aa:b9:1e:83:97:57:6b:
00:54:0f:30:84:12:67:f9:88:66:7e:39:b1:f6:db:
ea:18:f0:5f:52:3f:6f:86:7c:65:87:87:57:b8:1b:
f1:b1:71:28:ba:b2:85:18:8a:72:37:b9:a0:b0:0d:
63:9c:f0:60:8c:07:0c:b0:36:79:17:3f:41:0f:fe:
62:88:d6:20:6c:c9:62:bb:71:9c:33:29:a3:72:e8:
ec:8a:f8:f7:de:93:8b:14:3d:63:4c:fb:70:2a:cd:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:21:E9:D5:02:73:4B:11:62:F7:2E:29:91:E3:ED:E5:02:8B:F9:98
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/5iHp1QJzSxFi9y4pkePt5QKL-Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.79.0/24
IPv6:
2a14:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
a9:83:e1:c9:05:f4:6f:bd:1e:4a:c2:1e:86:d0:6f:12:f1:9b:
2b:99:1a:3f:5b:4d:c9:6e:f0:dd:44:10:9a:bb:39:45:eb:21:
80:ba:09:47:66:02:83:7d:5d:c0:7b:ad:b9:bf:6e:d9:72:11:
98:6b:17:0a:b6:22:f0:30:1a:69:41:0f:52:23:72:6c:c1:83:
b5:07:56:3c:d1:58:31:aa:e8:80:74:60:90:f6:fd:11:f5:b8:
a1:f1:16:05:d4:ba:13:3a:1f:d0:77:99:85:51:aa:f7:e9:e0:
aa:95:d6:bf:e2:89:e2:04:39:a7:bf:1f:c9:6e:f2:bd:d0:bc:
9a:55:c3:15:33:85:9b:44:95:d7:70:fc:1b:8f:a9:bd:e2:fe:
e7:fa:8f:c8:c3:84:87:1b:91:d1:6f:8a:a3:89:5c:17:d9:1b:
3a:70:f1:11:8a:ee:c8:d1:5e:f4:df:2e:a7:ff:7e:77:78:a8:
be:83:fa:41:86:2f:a3:1f:c1:f1:eb:ea:0c:dd:2b:c5:f5:f1:
8c:30:86:58:e8:1f:c2:ae:03:38:e5:88:f8:59:bb:57:23:bc:
18:f6:d5:dd:42:f2:f7:b6:72:bd:e5:ff:d5:b7:26:5a:5d:a6:
e7:ec:4c:76:d6:10:a3:3a:d0:e6:84:aa:c5:6c:d4:b4:46:56:
4d:a5:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:00 2026 by rpki-client