Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/5Nm5QxzsJ7YsE-CS19DaJf8XBX0.roa
File: 5Nm5QxzsJ7YsE-CS19DaJf8XBX0.roa (raw, json)
Hash identifier: 1KPrYvD31Yury50q6UXSqHu1fxoxPI9X15ufg3y2ows=
Subject key identifier: E4:D9:B9:43:1C:EC:27:B6:2C:13:E0:92:D7:D0:DA:25:FF:17:05:7D
Certificate issuer: /CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Certificate serial: 01A0C8F49548CAE7AEADFF4859EFE3CC3E6C
Authority key identifier: FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/5Nm5QxzsJ7YsE-CS19DaJf8XBX0.roa
Signing time: Tue 22 Sep 2026 11:51:07 +0000
ROA not before: Tue 22 Sep 2026 11:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219265
IP address blocks: 150.251.61.0/24 maxlen: 32
2001:67c:2240::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:f4:95:48:ca:e7:ae:ad:ff:48:59:ef:e3:cc:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Validity
Not Before: Sep 22 11:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4d9b9431cec27b62c13e092d7d0da25ff17057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:be:05:5d:5d:eb:0c:fd:4d:d5:f6:03:0d:
78:8f:e3:ea:83:5e:2b:1d:cf:06:31:12:42:c0:ec:
e1:d6:0d:4c:eb:04:24:7e:70:94:33:2c:3d:bb:11:
f5:c1:eb:2a:07:4d:4d:09:5e:a9:8a:1f:14:97:a8:
01:72:b8:2f:f0:31:ba:29:e8:42:0d:eb:77:38:3d:
0e:08:26:87:a2:fe:e6:f1:47:ff:09:a7:6f:1f:fd:
41:bd:62:d2:05:43:0b:03:98:9a:d5:07:59:e5:e6:
4f:82:6f:e1:18:58:89:72:bf:f6:bf:47:c4:3e:a3:
64:db:d5:e1:d1:f3:0d:ac:8e:33:64:be:7a:a9:e3:
e1:1a:a5:c4:89:c1:f0:be:32:c3:47:31:90:fc:41:
76:a4:30:b0:83:72:e1:ce:2a:0c:9e:b6:99:2f:8d:
96:0e:2b:b4:9d:e1:cb:62:ad:e9:e4:d1:f9:7c:d8:
0c:11:ac:58:f6:06:26:d2:81:94:a7:e3:4d:70:35:
34:f2:33:9d:d7:ba:e2:8d:bb:da:b6:43:aa:83:27:
ed:8b:c4:11:d1:b7:76:6d:ce:33:55:7b:32:9f:e2:
f9:7c:35:80:51:9f:f3:99:a1:26:d8:6e:a7:64:c7:
14:11:20:80:d2:2c:cc:ef:d3:32:d5:4f:d7:26:22:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:B9:43:1C:EC:27:B6:2C:13:E0:92:D7:D0:DA:25:FF:17:05:7D
X509v3 Authority Key Identifier:
keyid:FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/5Nm5QxzsJ7YsE-CS19DaJf8XBX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.61.0/24
IPv6:
2001:67c:2240::/48
Signature Algorithm: sha256WithRSAEncryption
88:ab:61:5e:2b:87:32:ec:8e:a2:2e:74:bc:1c:60:ca:41:60:
32:5c:95:cf:1f:c7:57:05:c1:6d:c6:d0:80:8b:b8:47:42:c1:
e0:e2:26:a7:47:40:20:8f:29:3b:f2:0c:5d:39:6b:40:dc:c1:
68:5e:d0:c6:e7:5b:fe:bf:cc:bf:b7:00:32:db:74:ab:17:61:
3c:6b:9e:26:f5:ec:cd:a0:c6:e3:a8:96:65:d8:99:aa:bb:28:
b5:92:e5:3b:23:7d:a0:c8:da:d8:c9:79:32:92:07:97:bf:36:
51:ed:e7:39:4c:4c:fb:57:ad:4b:3c:17:f7:65:d0:23:d5:a2:
f6:19:2f:76:08:f6:fb:97:e1:a1:76:d5:2b:39:31:fe:74:e4:
af:1d:74:12:4a:cd:0c:e0:aa:a2:ae:7f:d4:7a:e2:8d:c0:9a:
40:cb:55:e4:fb:9b:5c:f9:8d:aa:de:12:e8:86:f3:2d:28:c3:
0b:f7:f2:2a:30:31:4d:17:d4:90:ac:1c:26:ae:ac:5f:42:43:
f1:de:7c:71:44:29:77:27:4c:41:31:ee:39:d2:cd:76:37:a5:
c3:c1:58:50:6a:11:22:03:c9:d9:5f:7b:4b:4a:cd:c8:ed:67:
47:9d:45:ca:fd:75:8e:8a:98:28:34:c5:b2:e3:5f:a5:19:40:
3f:ee:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:37 2026 by rpki-client