Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5spmDI70f3Ww1c_jv_t5U1vTThA.roa
File: 5spmDI70f3Ww1c_jv_t5U1vTThA.roa (raw, json)
Hash identifier: S+CiRY/ZN5VUxNrWB67D+LBq4kLRrGAhzLqenBbzrs4=
Subject key identifier: E6:CA:66:0C:8E:F4:7F:75:B0:D5:CF:E3:BF:FB:79:53:5B:D3:4E:10
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C89CF600424EE7024C05A3E25AC36F30
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5spmDI70f3Ww1c_jv_t5U1vTThA.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402511
IP address blocks: 2a09:8140::/29 maxlen: 29
2a12:3000::/29 maxlen: 29
2a12:4480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f6:00:42:4e:e7:02:4c:05:a3:e2:5a:c3:6f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6ca660c8ef47f75b0d5cfe3bffb79535bd34e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:b2:d2:35:32:04:8f:31:71:46:a0:0c:98:
e0:fe:97:86:b3:74:90:9e:c3:3e:f2:87:26:d9:96:
e2:b3:dd:54:53:83:32:19:98:d5:db:11:dd:d9:54:
fc:40:23:94:4e:66:d6:21:f1:a5:0a:f2:f7:e4:1e:
b7:97:d9:71:83:34:1d:71:78:33:67:a9:1c:ef:26:
cb:75:d5:73:8d:26:89:2e:78:2f:95:73:d0:2e:76:
9d:89:25:a5:0f:0b:cc:aa:8a:66:56:75:d2:83:34:
11:f1:d0:ba:21:fb:f9:8c:d1:1b:20:42:10:42:09:
01:e6:83:cf:4b:74:b2:a1:28:3f:ad:a3:f3:d1:2f:
cc:20:a0:b0:69:05:69:19:f9:8e:59:75:98:07:12:
58:09:6f:74:07:36:6b:cb:17:f8:09:45:c5:b0:e7:
4b:22:6b:4b:d7:53:a5:b6:84:fc:9a:e0:8e:2a:a7:
37:44:0d:37:1f:75:1e:e2:1b:6b:8e:5a:0f:4c:2c:
37:42:6e:f4:83:c6:1c:25:31:15:f2:23:33:53:90:
83:2a:7a:75:13:40:6a:ca:cd:eb:4a:4c:dc:e4:3a:
7e:d9:df:c6:0c:1f:81:93:bf:54:b0:a0:e2:18:80:
31:7b:1b:e6:48:10:2a:54:bd:3b:a9:12:d2:67:0e:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:66:0C:8E:F4:7F:75:B0:D5:CF:E3:BF:FB:79:53:5B:D3:4E:10
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5spmDI70f3Ww1c_jv_t5U1vTThA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:8140::/29
2a12:3000::/29
2a12:4480::/29
Signature Algorithm: sha256WithRSAEncryption
54:3a:04:93:03:33:09:91:f9:8a:16:7d:7e:51:b5:c9:d5:52:
bb:22:c0:21:0e:17:ef:7e:51:ee:cd:d1:68:65:29:df:c2:6f:
c1:d7:e4:06:5c:b2:e6:dd:3b:68:3c:58:57:15:80:a9:55:6f:
3c:35:da:4b:2f:17:83:70:05:1a:92:3d:cb:2a:b1:70:14:75:
6e:85:20:d6:b8:2a:bf:2a:ae:05:fa:26:de:3d:2c:13:f3:9b:
95:6e:69:86:ba:a9:c8:a0:87:43:d9:d1:8c:ad:73:13:d6:e9:
14:a9:24:31:6e:5e:08:5a:f7:3b:ac:d9:a5:3d:15:8e:d2:f6:
0b:bf:7b:9a:52:1a:ae:c3:00:38:a1:62:6f:e2:71:83:9c:c9:
4a:0b:66:29:a4:89:82:20:1f:dd:80:ac:f5:a1:c3:c3:2d:80:
4f:bd:b6:5e:0d:f1:4e:1a:44:f2:ff:9a:05:ff:c7:37:02:7e:
3c:a8:61:bc:3b:d5:cf:68:8f:a6:69:cb:42:0f:76:87:7b:17:
78:c9:fd:8d:52:5d:9b:38:44:29:13:8c:d1:90:ed:1b:03:6e:
88:7e:59:cf:ef:e5:12:4b:c6:9a:86:df:c4:84:25:e1:db:99:
17:a7:66:ca:b6:4e:da:1e:4c:15:54:8a:38:87:e8:eb:3d:07:
c0:3e:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:03:54 2026 by rpki-client