Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/5l85adI4WOXSit-4c6HEIjPKoHc.roa
File: 5l85adI4WOXSit-4c6HEIjPKoHc.roa (raw, json)
Hash identifier: ojOA0XRvDOdTK/IWm8Xmo8VtAPCFqWD6gLMlWBk8nYM=
Subject key identifier: E6:5F:39:69:D2:38:58:E5:D2:8A:DF:B8:73:A1:C4:22:33:CA:A0:77
Certificate issuer: /CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Certificate serial: 019F23683027B6EF43E281E5D1E1EC744FF6
Authority key identifier: 4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/5l85adI4WOXSit-4c6HEIjPKoHc.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210436
IP address blocks: 2001:67c:152c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:30:27:b6:ef:43:e2:81:e5:d1:e1:ec:74:4f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e65f3969d23858e5d28adfb873a1c42233caa077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:92:27:a9:29:9a:1b:71:be:63:30:87:f0:
61:e3:07:01:e2:d0:d2:e2:68:15:7b:eb:fb:4f:a5:
5c:f8:25:ed:03:6b:a2:80:67:d0:f3:f1:61:5f:aa:
21:30:cf:8b:68:5f:30:b7:89:0b:7d:13:eb:e6:80:
8d:08:4a:0d:24:23:ac:ed:6f:eb:18:d9:99:39:2f:
c6:eb:bd:9b:98:a3:fc:85:e1:23:e4:43:55:63:11:
92:f6:8f:8e:19:3f:22:c2:12:05:86:5a:bf:62:9e:
a9:51:1a:52:2c:e3:1b:7a:60:c5:db:7a:c7:74:c9:
09:45:08:5c:ac:67:85:9d:ba:7a:ee:25:49:f9:28:
16:ac:05:fe:f8:d1:60:bf:0f:f4:2d:33:79:73:ed:
4c:56:b3:14:05:00:ca:bf:83:9a:4e:50:96:f4:50:
74:8e:cd:a0:d4:c9:91:c2:60:4a:da:09:36:69:72:
14:3e:07:c5:3c:f1:7a:57:66:34:06:81:5c:6c:49:
6e:2a:d5:1f:12:85:73:3e:a2:86:be:a0:7f:f2:3a:
48:66:a4:6a:0e:52:fa:5d:41:81:75:1d:8d:54:12:
c2:1e:ad:87:34:9a:df:f0:b3:ca:7f:82:ad:77:b3:
bb:75:66:40:3d:25:48:25:3b:1e:39:a5:3c:47:13:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5F:39:69:D2:38:58:E5:D2:8A:DF:B8:73:A1:C4:22:33:CA:A0:77
X509v3 Authority Key Identifier:
keyid:4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/5l85adI4WOXSit-4c6HEIjPKoHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:152c::/48
Signature Algorithm: sha256WithRSAEncryption
04:f9:f3:e9:1a:83:d0:1b:8a:a6:b1:cb:d9:bc:d1:56:76:ec:
0f:dc:62:be:cb:83:fb:71:d6:ab:ac:1e:c6:b8:89:67:46:2d:
58:7c:55:90:38:e2:8e:89:ee:4e:1d:1c:e4:0c:1b:99:08:ea:
c4:56:9c:43:ef:f3:a8:d7:89:1c:f6:46:1a:c2:e3:56:48:7f:
7a:a9:2e:d4:f9:b2:16:52:de:d0:a0:7c:d2:e3:3f:2d:b0:df:
28:93:05:7a:d4:67:67:e0:8b:86:36:6c:51:dc:8f:57:c9:63:
83:df:0e:ff:53:07:8d:23:13:f3:bb:04:23:f8:a9:cf:35:a7:
cb:bf:aa:4f:22:ea:28:44:25:1b:3a:0e:34:b8:b9:ae:e9:4d:
47:76:b9:c0:f3:2f:6b:80:a1:ca:14:58:ef:05:1b:44:ff:e8:
bb:30:c6:ce:ac:31:1c:2c:03:ca:bc:1b:84:6d:e6:f5:8f:2e:
09:67:75:a9:5b:e6:70:74:04:68:9e:77:7f:93:c5:da:03:89:
7b:76:13:ae:de:37:e1:42:f4:3d:93:8d:00:b6:34:d9:f4:da:
12:de:fd:31:de:0b:49:fb:d6:cc:da:66:ba:84:82:11:05:de:
04:23:8e:d4:58:67:f2:40:a6:0f:9b:c4:1e:b9:9d:71:f2:fd:
10:4f:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:24 2026 by rpki-client