Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa
File: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (raw, json)
Hash identifier: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=
Subject key identifier: 0E:3F:64:B9:95:AB:F6:DC:8B:4E:CE:FC:88:01:27:64:4C:F8:81:5B
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 019F23685E91C8EDE2F8EE11C2731B237A29
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206757
IP address blocks: 5.252.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:91:c8:ed:e2:f8:ee:11:c2:73:1b:23:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e3f64b995abf6dc8b4ecefc880127644cf8815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:26:69:cc:69:29:ee:62:3a:e7:7d:a1:41:
d7:da:3a:e2:5e:a2:cd:3f:f3:24:9f:21:77:df:1b:
c4:5e:e1:0c:e5:66:ee:4b:8a:36:61:fb:0a:c3:96:
d7:18:6b:df:d6:ba:8b:ff:d2:46:e4:2e:43:7a:db:
2e:64:ae:b9:57:ff:5f:21:bf:3e:7b:22:d6:11:1f:
35:eb:39:87:c6:c1:d4:0e:99:ea:07:6a:08:44:b3:
3f:81:91:f9:26:22:a8:5a:c3:20:e8:2d:05:ab:b2:
12:3b:ff:52:8a:c7:95:c1:fd:f1:28:ea:3f:06:e8:
eb:17:b2:6a:8b:b8:18:71:5e:a7:05:95:93:1e:c4:
d1:85:7c:d1:01:5a:68:ba:69:a7:4c:b2:1e:45:5e:
0a:2c:c6:1b:a1:d9:11:23:00:53:fd:f2:d8:d8:ca:
ba:42:20:8e:bf:5e:dc:5b:c6:cc:a6:6e:71:92:34:
fa:9f:35:76:89:b2:b6:6d:9d:c6:fc:0e:51:ec:01:
66:e4:e4:2a:92:c5:42:45:f5:d3:c5:41:55:60:fe:
be:f9:21:eb:08:6d:12:84:37:a3:19:27:ee:e2:86:
0d:46:cb:36:59:bb:24:ed:a4:b5:1c:d4:65:c3:b2:
0b:e8:0f:9d:dd:69:07:7a:22:a4:b2:65:8d:2a:83:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:64:B9:95:AB:F6:DC:8B:4E:CE:FC:88:01:27:64:4C:F8:81:5B
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.0.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b6:71:52:ce:4f:bf:85:af:8e:4a:3f:88:b0:56:bd:40:7d:
60:5a:10:ec:1e:dd:a8:7d:24:8e:ba:16:a0:b6:02:18:1b:7c:
03:72:e5:8c:0b:cd:4e:f9:f6:ce:fa:e1:ed:41:b0:21:78:a2:
ce:13:5d:c1:1a:dc:26:27:a4:dc:99:15:7c:44:28:67:fb:b5:
47:14:02:ec:bd:67:a3:97:1e:b9:8b:18:52:65:f4:fb:85:45:
cc:7f:90:7d:a9:33:36:3a:c7:bf:f4:c4:83:67:38:a5:31:4f:
f3:6b:81:77:f4:d6:c1:8a:43:ea:bd:95:02:48:af:5d:c6:62:
25:dc:b6:43:39:ab:23:8a:c9:75:22:33:a4:da:bb:32:4e:1e:
04:7d:a5:27:67:d1:2c:1a:22:bf:10:94:14:fd:2c:b2:7a:e4:
8a:6f:62:40:9e:cd:44:77:75:ba:c6:0f:cc:e5:d2:e0:e6:9d:
dd:96:3b:a8:b6:8f:f7:97:28:97:cf:08:4f:fb:cb:eb:b0:7a:
0f:92:87:16:51:35:d7:92:3a:4a:1d:34:a6:60:49:7d:f5:fc:
35:c9:9a:7e:c3:06:65:33:36:20:a7:bf:97:20:b3:62:36:1e:
8e:a4:99:34:16:35:6e:40:fa:55:c9:0b:53:98:eb:24:da:fe:
d0:f2:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:21 2026 by rpki-client