Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/5yZRraURZiKqlnX05fjyNx52w8o.roa
File: 5yZRraURZiKqlnX05fjyNx52w8o.roa (raw, json)
Hash identifier: +Z9OtbAB80W8dUmluQL2ejT5e57YATp7trdLCUv5PPc=
Subject key identifier: E7:26:51:AD:A5:11:66:22:AA:96:75:F4:E5:F8:F2:37:1E:76:C3:CA
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019F6A6EAF6133E3A6CAE519CA19701D2AF1
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/5yZRraURZiKqlnX05fjyNx52w8o.roa
Signing time: Thu 16 Jul 2026 10:17:46 +0000
ROA not before: Thu 16 Jul 2026 10:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15386
IP address blocks: 149.232.189.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:6e:af:61:33:e3:a6:ca:e5:19:ca:19:70:1d:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jul 16 10:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e72651ada5116622aa9675f4e5f8f2371e76c3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:7a:61:b2:fa:74:b0:16:66:76:e7:a6:88:
0d:3c:a9:2d:1c:61:3c:75:33:5d:0a:e3:68:98:62:
ba:85:15:c5:a5:07:f9:fc:30:6d:2e:79:7b:c6:cc:
97:d7:01:e7:6a:d1:f5:ed:43:21:33:52:21:de:8f:
0e:2f:5e:f0:7b:b6:da:ba:5e:9b:9c:16:18:46:83:
f0:10:d3:27:f6:44:f7:a3:2b:22:99:30:ee:bd:ad:
47:05:fa:eb:1d:84:f4:c9:4c:84:1b:b0:66:4e:04:
da:50:6a:aa:51:0b:33:7b:fc:e8:1c:c2:fe:d7:0e:
65:56:87:36:88:9b:54:2a:e5:a5:97:04:e2:81:27:
1b:28:b5:92:b5:ac:ec:2b:ff:6b:7a:06:96:9a:a1:
ac:79:c6:a1:86:a4:70:d3:0d:94:db:b8:d8:e7:07:
fc:42:1a:63:0d:fc:cf:66:38:70:ac:3d:16:0c:e1:
56:b3:8d:7e:dc:28:cd:bb:cf:dd:63:c0:92:83:b0:
e1:0c:fe:06:5c:a7:10:87:8b:64:3a:bf:e7:51:fc:
ad:6c:0f:92:11:08:b3:48:35:b0:64:f3:2a:26:1f:
ef:05:92:cf:7e:24:bc:be:50:77:34:3d:30:7b:ba:
42:86:7b:7f:ae:e3:09:ee:58:33:10:e8:ad:b2:cf:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:51:AD:A5:11:66:22:AA:96:75:F4:E5:F8:F2:37:1E:76:C3:CA
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/5yZRraURZiKqlnX05fjyNx52w8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.189.0/25
Signature Algorithm: sha256WithRSAEncryption
34:19:f1:fc:a0:ee:1e:d9:22:89:18:76:5e:bc:66:3a:38:9d:
ff:ae:4d:5a:33:10:67:8b:e1:cd:10:2d:ff:96:80:82:eb:b1:
79:90:c5:bb:97:9a:80:ed:a2:4c:a9:a4:f7:ac:ad:95:5c:56:
61:b6:21:29:aa:42:ee:88:7c:d1:a7:d5:c8:73:d2:a0:23:33:
25:05:c0:05:d7:9e:ff:be:94:51:b1:7d:f5:33:80:dd:6d:fc:
3b:a3:34:51:87:99:81:a2:9b:e5:98:39:c0:a5:64:8a:0d:68:
e6:1c:b8:25:cf:d0:62:50:a1:70:ea:53:95:9a:b8:ae:48:3e:
cd:14:3d:f4:0d:44:9b:d3:1e:d7:52:0a:fa:51:bd:09:c7:34:
bd:15:e6:07:6c:7b:41:b8:33:9e:a5:25:b0:f8:1e:36:f3:41:
d3:22:0e:99:71:d3:fd:01:01:7a:62:72:15:8f:fb:0e:0c:28:
b8:db:b8:f2:5a:34:65:b2:bf:bd:f5:80:e4:b8:64:b8:7c:d1:
a3:7a:63:a6:42:50:f6:e4:be:fe:0a:f3:2f:4e:75:46:c2:59:
c1:44:eb:31:21:6b:aa:2c:17:fc:9f:96:05:c7:33:c1:6e:6c:
2a:1e:29:1f:69:4f:ab:65:d7:60:0e:a6:63:9b:85:cf:d1:8a:
fe:df:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:05 2026 by rpki-client