Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa
File: 5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa (raw, json)
Hash identifier: IYPpCgmRajRKH3SyHejCDJsXv1khAQdVFsgw3iiSVoA=
Subject key identifier: E6:44:46:DD:34:B7:17:99:92:D4:B2:4D:2A:0A:0C:8F:B0:74:2B:37
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019D1AEDDDC9F0B103D7D35589AE4572B63D
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa
Signing time: Mon 23 Mar 2026 13:41:29 +0000
ROA not before: Mon 23 Mar 2026 13:41:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 212.108.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:ed:dd:c9:f0:b1:03:d7:d3:55:89:ae:45:72:b6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Mar 23 13:41:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e64446dd34b7179992d4b24d2a0a0c8fb0742b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:ff:a0:ce:89:09:1f:7c:a9:55:91:7d:f0:
22:e3:6f:18:f6:74:df:64:d1:56:aa:34:66:54:4a:
b2:60:cf:72:56:7d:d0:61:05:a7:1c:c7:dc:3f:6d:
7b:dd:a8:40:35:f8:b3:73:9a:3d:f6:31:d1:e3:b4:
bf:ba:85:d4:da:cc:ff:73:1e:08:4b:c7:f5:f5:04:
df:10:49:06:bc:fc:a2:6b:f3:ee:05:68:7b:13:35:
af:89:bd:da:d6:89:4a:20:b3:be:98:09:2b:66:46:
28:0f:e1:a9:92:cc:e0:13:5c:a1:a9:b4:ad:9a:8d:
4f:25:e3:f1:09:a6:38:92:db:91:f0:5b:1f:d8:57:
f0:2a:44:7c:b7:13:5f:5f:e3:c8:31:62:55:ee:93:
05:07:0e:fe:b8:b9:b6:7a:26:d3:2c:dc:c1:2e:00:
94:a8:ce:80:0b:1d:96:3d:f8:05:5f:97:81:47:13:
af:ca:c7:29:df:cb:e6:ab:39:04:71:61:a6:51:04:
b2:90:7e:fe:b6:ad:c2:51:2e:87:85:47:d6:91:42:
9c:a6:70:68:71:07:c9:39:93:a6:eb:01:4e:78:28:
34:ba:0d:e3:69:6f:65:48:d4:c8:7d:63:c5:b8:4d:
b4:a3:73:36:51:e2:9c:f2:91:b2:ce:62:07:91:63:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:46:DD:34:B7:17:99:92:D4:B2:4D:2A:0A:0C:8F:B0:74:2B:37
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/5kRG3TS3F5mS1LJNKgoMj7B0Kzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.98.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e9:7d:82:aa:ae:c1:d8:ff:28:89:79:2f:26:74:37:9a:37:
1f:ec:1b:7c:de:06:9e:81:15:38:dc:1b:61:5b:50:e2:2c:e2:
46:d3:e6:92:a9:e2:53:8e:eb:5d:6a:6f:4a:12:25:37:2b:7d:
e1:9a:70:08:22:40:1f:9d:c8:b0:57:bf:47:57:6a:d1:5b:5e:
0a:fe:77:55:0e:4c:03:33:25:f2:7e:de:36:d6:72:f1:34:c1:
e4:47:13:6d:83:46:0f:ee:46:4d:93:16:6b:f8:3a:24:ee:75:
62:9b:96:18:05:c3:31:0a:42:a3:b2:89:5d:e2:da:24:e3:3b:
87:c1:1c:ac:ef:8a:15:32:74:8c:29:db:d1:f7:df:7a:0c:b1:
2e:29:48:6b:34:c9:e1:d4:6e:3c:ba:6f:82:f2:a0:10:82:e6:
5e:2c:23:a7:55:29:57:03:73:28:a2:78:d1:2d:a3:e2:ac:8c:
b6:85:f4:13:6b:59:2c:f1:e0:39:ab:06:8f:3c:df:23:40:24:
f6:09:8e:67:37:8a:aa:e0:5d:db:51:82:2e:86:cd:a3:18:ff:
03:7d:c9:ed:77:5c:d5:ad:1b:4c:64:24:a1:ce:e7:bf:98:3b:
8b:38:8f:6b:7d:d9:3c:66:05:91:eb:49:63:97:b1:ff:11:5a:
ba:aa:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:33 2026 by rpki-client