Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/kxHU9slq2aLE6_op3HuvnargXy4.roa
File: kxHU9slq2aLE6_op3HuvnargXy4.roa (raw, json)
Hash identifier: tOciGR7/TODlPMYKlcNhDqy+uu+hSIvMTof9UZ/0z2s=
Subject key identifier: 93:11:D4:F6:C9:6A:D9:A2:C4:EB:FA:29:DC:7B:AF:9D:AA:E0:5F:2E
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01A1B9864C295DA60F7843E63FE04F927F8C
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/kxHU9slq2aLE6_op3HuvnargXy4.roa
Signing time: Sun 08 Nov 2026 04:59:08 +0000
ROA not before: Sun 08 Nov 2026 04:59:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42689
IP address blocks: 5.134.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b9:86:4c:29:5d:a6:0f:78:43:e6:3f:e0:4f:92:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Nov 8 04:59:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9311d4f6c96ad9a2c4ebfa29dc7baf9daae05f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:15:75:9c:e0:9a:81:b4:17:40:6b:a4:1c:
48:cb:ce:17:65:e7:6e:ea:26:77:09:07:53:1b:56:
7f:19:d6:05:23:0e:84:3a:35:6a:a4:c0:61:04:27:
6d:53:68:5f:3c:84:78:12:86:d9:d8:3d:fd:5b:22:
46:62:7c:a2:84:d7:56:bf:12:f7:2f:62:59:13:5e:
72:8f:a4:bc:69:fb:2f:c4:cd:2a:f9:52:ee:e0:cf:
59:0d:4b:93:89:e5:d0:37:72:9d:16:7d:ee:1c:65:
d5:03:2a:36:80:2f:11:1b:b4:0e:1d:25:68:f5:f3:
40:00:d6:48:c1:8e:fc:75:87:79:13:c3:41:e0:4a:
c1:37:a0:2f:4a:df:66:8f:12:25:09:f5:04:90:5c:
9e:87:92:3a:d1:ae:13:31:75:22:8c:bd:4b:71:bf:
1f:c9:a2:77:65:0e:1e:28:ec:1e:ee:98:94:7c:89:
01:de:44:1e:6d:7c:da:ff:c8:ff:0f:fe:45:26:18:
3a:2f:c1:f2:ac:c8:f9:33:de:d4:b4:d5:24:28:bd:
08:05:e5:d1:d5:4f:b0:40:c3:ab:1b:44:28:9c:66:
88:5e:d8:10:5e:f5:b0:07:2a:11:7f:cf:57:95:08:
d5:ae:03:96:1f:a0:9b:b4:a9:63:e7:49:f4:3d:20:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:D4:F6:C9:6A:D9:A2:C4:EB:FA:29:DC:7B:AF:9D:AA:E0:5F:2E
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/kxHU9slq2aLE6_op3HuvnargXy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:4b:67:c9:7f:64:e5:b9:da:dc:55:89:d4:3f:03:55:af:06:
3a:e4:5e:9d:4f:86:2a:1a:35:77:d9:02:f1:7b:74:c8:f9:73:
4c:0e:a9:ae:14:4a:8e:b3:68:9a:87:0a:49:79:01:64:f6:27:
b1:34:24:a1:b3:4c:22:84:e7:91:d6:ac:08:8c:03:5a:36:61:
2e:6d:44:b2:b5:01:4c:b8:ef:27:54:22:ad:e4:de:40:45:b7:
bc:11:aa:f1:b9:b7:b2:71:04:54:94:79:67:08:00:e1:51:0c:
0c:60:1e:0a:df:80:93:ca:0e:f3:a7:e3:4e:ba:49:2b:57:c4:
18:39:a2:25:1a:c3:65:ad:b0:1d:34:4d:d1:34:80:48:ad:a7:
7f:1a:2b:24:64:a9:06:4e:d1:ce:7d:8e:64:ef:5b:8c:9d:99:
e3:c7:5f:ba:da:cd:b7:f5:27:74:9f:47:c2:a5:67:24:83:94:
36:cb:cd:10:10:71:ef:44:85:2b:df:23:e1:f3:29:1c:01:0c:
86:0d:5c:ac:b8:d1:14:97:dd:13:fc:de:9d:f9:39:6e:ef:d3:
05:b1:e8:8d:6a:0a:f1:a9:a9:de:87:f2:d9:a3:88:c9:21:e4:
69:5c:16:b1:b2:cf:81:36:10:08:3e:71:0f:95:48:b8:91:1d:
9a:6c:0a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:11 2026 by rpki-client