Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/kj5YuOBS069E6SSrtGV3M3d2Gxs.roa
File: kj5YuOBS069E6SSrtGV3M3d2Gxs.roa (raw, json)
Hash identifier: q6hB+Cb3Y6iSMpFUfaUhP38XFh8WQhJsi85v+marK6I=
Subject key identifier: 92:3E:58:B8:E0:52:D3:AF:44:E9:24:AB:B4:65:77:33:77:76:1B:1B
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A1B728386BDBD735766B3D53F8378905D3
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/kj5YuOBS069E6SSrtGV3M3d2Gxs.roa
Signing time: Sat 07 Nov 2026 17:57:08 +0000
ROA not before: Sat 07 Nov 2026 17:57:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205719
IP address blocks: 153.79.168.0/24 maxlen: 24
153.79.169.0/24 maxlen: 24
153.79.170.0/24 maxlen: 24
204.62.120.0/24 maxlen: 24
207.89.20.0/24 maxlen: 24
207.89.21.0/24 maxlen: 24
216.162.45.0/24 maxlen: 24
2a14:a087:2::/48 maxlen: 64
2a14:a087:5::/48 maxlen: 64
2a14:a087:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b7:28:38:6b:db:d7:35:76:6b:3d:53:f8:37:89:05:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Nov 7 17:57:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=923e58b8e052d3af44e924abb465773377761b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:cc:32:5b:40:b7:23:74:1a:69:dd:bf:f9:
28:c6:ca:a0:8b:35:1a:38:ee:c1:b5:cf:47:aa:13:
2e:45:3e:1e:48:51:5c:15:99:b4:07:da:63:33:ff:
0c:8f:80:90:bb:64:46:da:6b:68:fd:3c:cb:7d:bc:
1f:61:b3:3a:d0:03:fc:16:9a:7c:d6:e1:cc:d7:d3:
67:7a:70:a7:72:83:13:ee:92:83:b8:af:f2:8c:3f:
4f:7d:26:a2:9e:8f:ef:69:91:64:ec:d7:d8:4b:a2:
18:60:4d:9e:ca:08:76:c5:77:43:f5:5e:f5:18:21:
f7:bc:0e:d2:0b:81:37:46:39:f9:10:9f:fa:bf:ee:
c2:b8:7a:cb:22:f1:11:90:27:0a:88:10:a7:e7:b5:
4a:81:76:6f:3e:00:5f:82:68:2e:ab:21:b5:12:6d:
3c:fb:7f:52:8d:15:bd:02:6f:d0:2d:1d:1a:65:99:
9a:6f:d5:b5:d1:0f:a6:12:6e:df:60:48:3e:e1:85:
f1:a0:39:c7:db:c9:e4:55:e4:b3:00:78:f4:7b:23:
f0:93:07:83:6c:fb:3c:c8:88:e6:8d:66:3a:5d:f5:
9e:9d:b9:04:5c:64:42:9e:ec:7e:79:1c:f0:c8:75:
8b:d4:9e:a0:6d:3a:3b:8c:0e:36:d0:a4:38:70:69:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:58:B8:E0:52:D3:AF:44:E9:24:AB:B4:65:77:33:77:76:1B:1B
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/kj5YuOBS069E6SSrtGV3M3d2Gxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.79.168.0-153.79.170.255
204.62.120.0/24
207.89.20.0/23
216.162.45.0/24
IPv6:
2a14:a087:2::/48
2a14:a087:5::/48
2a14:a087:a::/48
Signature Algorithm: sha256WithRSAEncryption
20:0b:5c:c3:0b:cb:3a:17:ef:ca:a7:ae:cc:8d:9e:2c:e9:f5:
f5:82:f5:8d:af:21:c3:65:3e:14:eb:7e:53:d5:90:13:94:b1:
e8:2e:35:77:ba:fe:da:a6:34:de:6d:11:bf:89:62:84:3d:ca:
f9:8a:ad:78:6e:bd:97:50:2d:60:92:36:4e:af:72:b7:0c:67:
92:00:4a:85:c9:e9:2f:f0:13:15:dc:8e:5a:41:07:37:5c:31:
cc:5e:7d:3d:ba:5a:eb:19:4c:5c:de:3e:d0:20:ea:95:d8:2e:
c4:29:ca:96:cf:9d:67:0c:f7:b0:c8:19:8d:ca:a9:8f:85:39:
fc:ac:05:dd:57:bc:c1:e3:82:db:f6:20:6a:4e:d6:75:d9:8c:
83:5e:e3:fc:67:42:cb:77:3a:06:68:72:83:a6:67:15:0b:bf:
3f:36:cf:7f:46:e1:04:3b:5d:15:5e:d7:79:28:bc:40:a0:58:
4d:da:dc:df:8a:0c:62:d4:79:c1:b2:4d:83:64:fb:6c:1a:dd:
28:5d:9f:6b:83:1b:3c:36:b9:1b:8b:0b:7c:3b:fe:43:13:b6:
70:a6:9e:c3:af:83:70:49:2f:0a:ad:f1:70:5d:83:ec:94:1a:
a1:f8:d4:3e:e5:17:23:70:f1:f4:b2:90:e9:90:b7:ae:58:b9:
33:9f:aa:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:36 2026 by rpki-client