Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d5KAJkR5ew2nGru7C36Tmq3mANU.roa
File: d5KAJkR5ew2nGru7C36Tmq3mANU.roa (raw, json)
Hash identifier: FqsYTtvavskOqGfCeci9Rj/v6jd3ghMa/e4FPzXvMGc=
Subject key identifier: 77:92:80:26:44:79:7B:0D:A7:1A:BB:BB:0B:7E:93:9A:AD:E6:00:D5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A17EBAAE0671CC4A3034ACC0CC5EE9F63E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d5KAJkR5ew2nGru7C36Tmq3mANU.roa
Signing time: Tue 27 Oct 2026 18:58:45 +0000
ROA not before: Tue 27 Oct 2026 18:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213382
IP address blocks: 9.247.19.0/24 maxlen: 24
9.247.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:ba:ae:06:71:cc:4a:30:34:ac:c0:cc:5e:e9:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 27 18:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7792802644797b0da71abbbb0b7e939aade600d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:99:ee:a3:3f:0b:ce:5d:f9:4f:45:aa:33:
b6:5e:f0:52:e6:fd:d2:27:f6:5a:0d:69:62:96:4d:
c7:72:e4:07:10:44:f7:5b:ab:c7:e7:79:47:e5:3e:
8b:59:8c:d4:21:ba:05:b9:0d:af:ac:ad:94:39:55:
bf:77:eb:5d:8a:0d:e9:43:ed:92:51:74:2d:0a:67:
f1:cb:c6:f4:38:1f:60:8d:54:f0:8b:30:57:f3:38:
b6:63:9b:49:47:f2:88:e5:4f:6e:e9:86:e4:86:74:
5c:28:c3:e8:a4:80:ba:5e:79:d8:8a:8e:7f:bf:76:
52:18:08:c7:a6:38:2d:a5:45:01:92:e5:ea:ef:7e:
a1:c2:eb:2d:39:74:c3:cc:30:52:28:2f:dc:f8:1c:
54:c6:c7:0c:dd:7d:89:f3:c2:cb:01:23:b0:89:be:
b7:0b:12:d8:b3:f6:d1:f4:33:9e:fc:9a:af:90:c0:
ef:f5:9e:c7:50:91:51:47:c9:d5:7b:ef:67:a5:11:
9a:84:15:c1:7f:73:2e:3d:aa:89:e8:66:cb:ec:5f:
c0:48:6c:bc:78:ed:45:a4:6f:82:16:02:46:c7:ef:
58:75:8b:cb:af:44:34:7c:c5:a8:0f:5e:ea:9c:ab:
e8:37:de:03:19:24:05:ef:30:d0:4b:62:a2:a5:d8:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:80:26:44:79:7B:0D:A7:1A:BB:BB:0B:7E:93:9A:AD:E6:00:D5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d5KAJkR5ew2nGru7C36Tmq3mANU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.19.0/24
9.247.26.0/24
Signature Algorithm: sha256WithRSAEncryption
24:aa:d7:56:e0:29:c1:c6:4c:77:f6:00:d2:33:e9:6a:10:56:
07:35:b3:7e:49:96:a9:d8:b7:d2:7b:f6:a9:86:a7:32:a6:e5:
33:7c:6c:7c:e8:6b:6b:40:30:33:30:02:5b:1f:b6:0e:f6:8e:
05:84:38:ae:3f:76:a3:d3:25:37:89:5a:61:a2:2d:d4:2e:fc:
d9:a3:2a:b2:76:e2:28:5c:9c:9a:b7:1e:18:0c:69:fd:6d:90:
68:69:16:1b:c7:28:75:4d:79:cb:58:e5:b4:da:3b:45:78:5d:
67:d8:95:b6:3a:62:fa:9e:8d:f9:e6:2b:db:d8:32:c9:8d:84:
ca:a3:9b:32:da:d5:2e:f8:e1:87:39:57:8a:59:55:ae:57:4f:
84:4a:f8:d0:d9:6e:26:fa:12:9d:0c:50:bc:5b:62:d6:15:12:
ec:e9:df:2f:4a:19:c7:8e:f0:34:27:10:24:53:e1:a3:8a:06:
2d:a3:bb:c2:53:a6:fb:7d:e4:04:bd:be:7d:63:45:32:0c:d4:
06:12:d2:e8:c5:e2:0a:f2:fd:af:bf:ff:66:9d:ce:0c:99:93:
f7:d4:c9:58:fc:e9:e9:b4:2f:4d:f9:50:31:5b:43:ce:b2:0a:
f7:64:43:07:1e:08:9f:f5:95:39:33:df:f7:62:4c:5d:8b:db:
43:51:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:29 2026 by rpki-client