Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/5uFqtK5EOJoON-YeoPpKe-5ZsvU.roa
File: 5uFqtK5EOJoON-YeoPpKe-5ZsvU.roa (raw, json)
Hash identifier: 1RsW4e4qI16rm62817RPhQlzQ6DF1Py6FU5TPxF1PD0=
Subject key identifier: E6:E1:6A:B4:AE:44:38:9A:0E:37:E6:1E:A0:FA:4A:7B:EE:59:B2:F5
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 01A0D8D8FD1FB0D3812ADAC1A51EBC34BBCF
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/5uFqtK5EOJoON-YeoPpKe-5ZsvU.roa
Signing time: Fri 25 Sep 2026 13:54:54 +0000
ROA not before: Fri 25 Sep 2026 13:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21100
IP address blocks: 91.228.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:d8:fd:1f:b0:d3:81:2a:da:c1:a5:1e:bc:34:bb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Sep 25 13:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6e16ab4ae44389a0e37e61ea0fa4a7bee59b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:49:c1:98:eb:d3:29:8c:73:63:58:10:7b:
95:75:bb:b7:5e:5d:62:b4:be:bd:09:1e:c6:1e:1a:
f7:5f:56:9c:bc:52:2d:83:39:ed:86:83:50:be:9b:
b0:b1:d8:86:63:47:63:64:5c:26:93:93:d4:ea:28:
a5:6f:65:04:d7:22:a1:ff:1d:90:08:3d:4a:61:42:
c5:8e:38:84:ed:94:06:51:14:5f:5e:7b:c5:b3:cf:
77:0f:ea:67:d2:cf:a2:18:d6:1b:32:0e:c6:d8:02:
01:0a:72:29:4e:62:9e:b9:fe:30:7f:52:4e:ee:86:
1b:7e:84:46:47:4c:47:c5:75:5b:6c:a1:06:b0:1a:
27:e4:48:c7:11:42:92:0a:0d:37:e5:6d:11:25:20:
a8:63:a7:8b:60:c4:ea:96:00:03:5a:49:98:94:aa:
7d:bd:64:77:89:ea:44:00:05:de:da:a0:d2:a3:80:
12:71:7b:51:5e:bc:16:cc:cb:86:41:2c:a2:18:17:
5a:d9:b2:54:f7:5d:37:3a:a6:9b:3a:7a:bf:2f:4e:
e2:32:60:00:c4:2a:73:3f:67:93:e3:3e:33:2e:29:
33:34:94:71:a4:9c:91:f4:7a:bc:d5:09:91:d6:45:
c7:78:ed:03:72:39:63:68:1f:94:96:d4:7d:6c:fe:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:6A:B4:AE:44:38:9A:0E:37:E6:1E:A0:FA:4A:7B:EE:59:B2:F5
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/5uFqtK5EOJoON-YeoPpKe-5ZsvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.146.0/23
Signature Algorithm: sha256WithRSAEncryption
96:45:c6:87:76:c7:e2:6c:eb:dc:ce:ea:6a:8f:aa:e8:74:6c:
c1:c3:85:a1:59:b8:c7:49:7e:1f:91:2e:00:8f:a5:57:e5:7f:
47:40:db:41:4d:3b:5f:6e:d3:05:da:60:5a:e9:94:56:d4:73:
b4:e8:e8:b1:ce:aa:31:01:f9:33:11:ab:6f:47:f1:9a:84:ee:
d0:06:98:15:93:40:5f:1b:35:5d:2e:ab:90:29:dd:e5:36:22:
41:6e:06:ed:c1:6c:ac:e0:9d:8d:c5:82:d4:af:8e:db:6b:70:
61:ed:36:3d:20:4b:0f:b7:54:b6:02:a1:86:b4:68:05:87:46:
5f:77:9f:65:69:0f:4b:e7:d7:1f:ae:69:a6:d2:87:f9:4a:4c:
5d:b3:aa:fd:fc:3a:8b:30:0b:c8:5b:f0:ae:6a:ba:e9:6e:47:
78:f6:07:ee:81:4b:aa:55:37:8d:f0:75:0e:20:92:8c:00:bc:
22:71:53:eb:9c:37:f0:18:52:95:c8:7e:92:0c:04:13:fe:fa:
2f:db:bb:85:d7:93:dc:ff:ab:3d:f3:24:15:3b:ed:23:4c:b6:
06:79:80:29:aa:e6:94:e5:18:93:fa:f1:47:38:c5:81:4b:37:
03:1d:a0:29:29:5e:c9:1a:2f:54:4f:d9:13:b4:05:c3:3c:d1:
6e:79:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:06:58 2026 by rpki-client