Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/m45BlYZTQkdRNQBIKAHysc7a9XM.roa
File: m45BlYZTQkdRNQBIKAHysc7a9XM.roa (raw, json)
Hash identifier: dLNcsNQmYqGgyQkdcyLHBO4ycBY+Q9RDEXZQIBCVPNA=
Subject key identifier: 9B:8E:41:95:86:53:42:47:51:35:00:48:28:01:F2:B1:CE:DA:F5:73
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019F8E535790FBA079522D7C014B3BFC5978
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/m45BlYZTQkdRNQBIKAHysc7a9XM.roa
Signing time: Thu 23 Jul 2026 09:34:14 +0000
ROA not before: Thu 23 Jul 2026 09:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a14:5f00::/29 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:53:57:90:fb:a0:79:52:2d:7c:01:4b:3b:fc:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jul 23 09:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b8e419586534247513500482801f2b1cedaf573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:97:7c:74:08:de:db:5e:52:cf:8b:da:06:
7c:27:ce:8e:ca:d7:e4:1a:9e:51:bd:3c:ac:d2:b3:
e2:cd:05:ad:43:13:4e:ea:62:ac:01:79:5b:4d:75:
05:a2:ec:db:b1:6f:15:d2:03:87:27:72:51:59:3b:
46:bf:78:f9:50:f5:47:a1:ff:4e:dd:2e:d1:87:89:
02:08:dc:8f:84:19:65:6d:25:ea:27:16:53:cc:07:
44:ca:dd:ad:96:46:ac:db:d3:09:32:de:47:53:cb:
a0:2a:17:91:94:2c:5b:91:53:b8:fd:95:0a:b5:49:
41:56:67:3b:9e:1f:d4:39:e1:7e:80:cc:ad:aa:12:
48:2b:93:c1:62:c2:f2:cf:1e:39:a7:13:8f:56:07:
15:6c:b9:68:d7:ae:8c:7e:af:d2:2a:de:41:35:e8:
6f:11:f1:34:85:cc:d5:a1:bb:e7:dd:1b:b0:cc:b0:
d1:e3:84:44:50:94:a7:31:1a:98:ee:66:09:45:a7:
c2:48:75:51:eb:a8:05:43:fc:66:ca:2e:d2:ef:0b:
fc:aa:b5:84:58:2d:a8:e7:da:a9:6e:4f:7c:9f:c4:
b6:af:b6:c5:27:b2:68:95:23:52:21:eb:5f:c2:73:
5c:56:c7:00:d7:cf:59:08:fb:12:70:14:af:65:7d:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:41:95:86:53:42:47:51:35:00:48:28:01:F2:B1:CE:DA:F5:73
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/m45BlYZTQkdRNQBIKAHysc7a9XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
4e:b8:b4:cf:e4:9b:5e:67:4e:54:ce:5e:01:ee:91:b5:9b:2f:
49:f0:47:3c:02:8a:f5:43:2b:3e:f0:93:f9:a2:bc:78:30:c4:
0c:1f:15:78:14:cd:ba:f8:c0:95:44:06:c6:90:50:d5:87:b1:
cd:ef:45:b1:b6:da:16:73:ab:4e:47:c5:4f:2f:3d:40:3c:b5:
ce:4b:12:cf:7a:98:56:89:7d:75:7b:e4:c6:49:94:cd:ff:03:
cb:07:d4:d6:ef:8d:57:df:ef:3d:1c:1e:ea:62:6e:8b:ed:12:
74:9d:f1:2e:90:e4:49:c0:a5:09:be:4d:77:b1:f7:4a:1a:14:
b1:23:d0:1e:84:d0:90:0a:ff:b9:6f:5c:86:d5:cb:e0:87:1f:
2e:b5:60:b8:a1:cd:29:e9:cf:0b:ab:1c:14:84:58:58:26:34:
5d:dd:f7:85:71:58:f5:18:95:8a:df:d7:3d:0b:d6:8c:89:89:
3f:2c:8f:b2:4f:6b:ce:22:13:fd:7c:31:48:a1:43:b7:d4:cd:
64:d5:04:2d:de:3a:4e:79:da:d1:f4:ae:f4:4d:f0:46:41:8a:
3f:49:65:a3:7e:37:ea:f8:3d:f7:0d:d6:97:46:5d:e5:7a:f6:
1d:c0:4f:e5:cb:45:a7:1d:03:2d:54:e2:14:e2:9a:06:ee:d3:
a2:40:01:36
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+OU1eQ+6B5Ui18AUs7/Fl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi
M2M0ZmQwHhcNMjYwNzIzMDkzNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjhlNDE5NTg2NTM0MjQ3NTEzNTAwNDgyODAxZjJiMWNlZGFmNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu+XfHQI3tteUs+L2gZ8J86Oytfk
Gp5RvTys0rPizQWtQxNO6mKsAXlbTXUFouzbsW8V0gOHJ3JRWTtGv3j5UPVHof9O
3S7Rh4kCCNyPhBllbSXqJxZTzAdEyt2tlkas29MJMt5HU8ugKheRlCxbkVO4/ZUK
tUlBVmc7nh/UOeF+gMytqhJIK5PBYsLyzx45pxOPVgcVbLlo166Mfq/SKt5BNehv
EfE0hczVobvn3RuwzLDR44REUJSnMRqY7mYJRafCSHVR66gFQ/xmyi7S7wv8qrWE
WC2o59qpbk98n8S2r7bFJ7JolSNSIetfwnNcVscA189ZCPsScBSvZX0mFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJuOQZWGU0JHUTUASCgB8rHO2vVzMB8GA1UdIwQY
MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt
MDU2NWYzMzdkY2JlLzEvbTQ1QmxZWlRRa2RSTlFCSUtBSHlzYzdhOVhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl
LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRfADAN
BgkqhkiG9w0BAQsFAAOCAQEATri0z+SbXmdOVM5eAe6RtZsvSfBHPAKK9UMrPvCT
+aK8eDDEDB8VeBTNuvjAlUQGxpBQ1Yexze9FsbbaFnOrTkfFTy89QDy1zksSz3qY
Vol9dXvkxkmUzf8DywfU1u+NV9/vPRwe6mJui+0SdJ3xLpDkScClCb5Nd7H3ShoU
sSPQHoTQkAr/uW9chtXL4IcfLrVguKHNKenPC6scFIRYWCY0Xd33hXFY9RiVit/X
PQvWjImJPyyPsk9rziIT/XwxSKFDt9TNZNUELd46Tnna0fSu9E3wRkGKP0llo343
6vg99w3Wl0Zd5Xr2HcBP5ctFpx0DLVTiFOKaBu7TokABNg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:06 2026 by rpki-client