Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1R1fnwrx2lkAICyW1A_0Ad3Zb-A.roa
File: 1R1fnwrx2lkAICyW1A_0Ad3Zb-A.roa (raw, json)
Hash identifier: wdi4t6P4z0mO/iHG5igvsESlCtes6srIYLzkoTbEPEk=
Subject key identifier: D5:1D:5F:9F:0A:F1:DA:59:00:20:2C:96:D4:0F:F4:01:DD:D9:6F:E0
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019CF1BBE9B4C43397FE663328107B410232
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1R1fnwrx2lkAICyW1A_0Ad3Zb-A.roa
Signing time: Sun 15 Mar 2026 13:42:30 +0000
ROA not before: Sun 15 Mar 2026 13:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.39.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:bb:e9:b4:c4:33:97:fe:66:33:28:10:7b:41:02:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Mar 15 13:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d51d5f9f0af1da5900202c96d40ff401ddd96fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:93:e8:83:bf:2b:3a:56:0d:73:8e:90:c9:
31:6a:fe:90:41:8a:f6:8d:8d:19:16:0f:4b:f1:e5:
a7:09:bd:7e:4a:4f:be:82:47:a5:d4:b6:92:1b:a0:
10:55:58:8a:f8:0c:af:23:cf:5e:bd:aa:34:87:1a:
71:ed:c8:b4:3a:31:38:09:4f:13:47:29:85:37:65:
a3:fa:87:99:5c:ad:57:8e:6b:80:f2:1f:42:ac:d0:
2c:53:92:d0:85:08:48:11:b4:de:87:91:37:0c:ab:
0a:1f:8a:b2:1f:d0:61:a4:bb:ce:a2:c6:b3:cb:73:
9d:7c:f2:4b:c3:a3:e9:8d:22:39:3c:b4:28:6d:18:
30:99:ea:7b:9c:80:52:78:dd:77:2a:3d:06:57:78:
24:2d:97:22:a4:4d:8b:de:eb:fc:1e:83:e2:22:0a:
56:55:16:8e:d4:48:7f:dc:56:da:e7:56:5c:0a:fa:
17:eb:0f:b5:b6:c7:51:10:19:5f:82:c9:8c:e0:8e:
d8:c7:cf:0f:aa:16:7e:25:7e:e4:53:9b:48:a3:76:
2d:b0:40:7b:24:e9:46:8d:ae:7b:a0:5c:14:0f:7f:
39:45:ac:d3:94:9d:51:80:98:22:63:c2:cf:17:57:
ab:17:43:3c:f2:1d:7b:81:92:ab:ba:90:50:21:68:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:5F:9F:0A:F1:DA:59:00:20:2C:96:D4:0F:F4:01:DD:D9:6F:E0
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1R1fnwrx2lkAICyW1A_0Ad3Zb-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.192.0/22
Signature Algorithm: sha256WithRSAEncryption
15:27:f5:22:57:ca:35:ff:41:db:39:d7:57:61:07:25:78:d5:
ff:98:df:e3:27:73:b6:d2:25:29:20:4d:fe:3e:78:9b:50:8e:
5c:7a:67:4d:cd:29:21:96:3b:77:ad:71:3d:e2:d5:8e:81:df:
87:51:8c:66:c2:37:dd:de:77:23:68:2f:df:16:a8:86:16:be:
fc:a3:50:62:be:34:71:6a:8a:f4:e7:7c:d7:2a:0c:bf:d9:01:
fd:f6:05:d5:d4:68:67:a1:4d:2d:af:85:26:ee:b7:d8:da:03:
eb:26:b6:d8:9d:59:1e:b5:b3:18:4d:e4:18:25:02:ed:cf:21:
a4:dc:54:66:99:76:8d:77:2a:18:bd:0e:7f:b6:04:9c:79:73:
8b:c1:b8:2e:75:55:2d:7f:16:f1:ca:d3:eb:a1:ed:54:03:1d:
89:b9:c2:1d:e3:a2:a0:6b:bc:3d:14:11:ac:32:91:36:26:27:
bb:71:62:dd:89:5c:0f:9f:16:97:8d:1e:77:0c:f5:fa:08:ed:
ee:3f:20:3f:a7:c0:9c:25:12:0e:ea:42:c4:fa:ed:25:9f:12:
15:80:72:18:55:b8:11:1a:3c:03:af:7c:40:00:7b:28:bc:f5:
ec:eb:5d:0d:6b:7c:f3:d1:63:47:9b:ca:95:42:2e:b7:01:25:
0b:3c:8a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:15 2026 by rpki-client