Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/5C7B9sK-52QOcFqJhruOpWErXiM.roa
File: 5C7B9sK-52QOcFqJhruOpWErXiM.roa (raw, json)
Hash identifier: 4/5+RXA9GJGFx9VqeqH9sQ5DjIRLWG8YQmxsy4IiZ1g=
Subject key identifier: E4:2E:C1:F6:C2:BE:E7:64:0E:70:5A:89:86:BB:8E:A5:61:2B:5E:23
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 019F79753DF1E8E54D6EEC63FAF2F8571543
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/5C7B9sK-52QOcFqJhruOpWErXiM.roa
Signing time: Sun 19 Jul 2026 08:19:14 +0000
ROA not before: Sun 19 Jul 2026 08:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35819
IP address blocks: 91.212.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:75:3d:f1:e8:e5:4d:6e:ec:63:fa:f2:f8:57:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Jul 19 08:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e42ec1f6c2bee7640e705a8986bb8ea5612b5e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:62:fa:c9:3f:25:f3:38:0f:d2:6e:ba:dc:
b2:1e:c3:45:2c:38:9d:84:9a:8a:11:d3:b9:42:fd:
b4:ab:ef:fe:1b:a9:c3:b4:12:89:89:93:d8:cf:f0:
42:53:76:2b:22:a2:49:16:ff:98:d9:3b:39:60:d7:
70:df:b4:32:69:dc:61:dc:95:2c:db:44:83:ba:05:
3f:73:d2:e7:c1:8d:81:96:fb:bf:6b:2b:0d:66:49:
d7:27:d9:69:1f:7a:18:c3:09:15:cd:85:ab:bf:47:
1b:d1:82:31:a3:f7:92:e1:74:31:58:8f:4d:a1:b0:
16:30:08:45:07:b4:b1:97:08:32:80:10:e5:21:7a:
41:d0:0f:8b:14:10:9c:50:dd:b3:64:1a:4a:81:9c:
12:f2:e3:2d:a7:69:ed:4a:0d:34:d7:f2:d0:f7:c9:
61:17:bd:55:99:4a:29:37:14:f1:83:b7:5e:ff:85:
c2:53:ae:c1:43:62:2a:30:4a:26:9a:a8:3c:a4:e6:
e6:53:79:1d:e2:d4:86:c2:51:17:09:cb:e8:23:ad:
97:0c:07:11:99:d9:b1:95:a5:33:cd:7f:92:5a:e3:
e9:b2:70:5e:41:b8:e6:f1:f7:f5:6f:de:84:93:7d:
31:b3:9b:bf:47:76:87:20:36:fa:52:e1:3a:4c:2b:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:C1:F6:C2:BE:E7:64:0E:70:5A:89:86:BB:8E:A5:61:2B:5E:23
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/5C7B9sK-52QOcFqJhruOpWErXiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d7:51:57:05:ed:7c:ce:35:fe:7c:96:dd:93:f0:09:84:65:
15:68:5a:bf:bc:87:2f:cf:28:f6:53:a4:2c:08:1e:25:fa:52:
79:93:87:09:f6:ba:7f:c1:11:5a:b1:6b:ba:cd:ef:ee:d7:82:
5d:9b:17:fc:ce:95:ca:0f:9c:3b:6f:9b:84:cb:89:a8:c8:30:
2a:8d:1b:7f:39:8b:e8:b8:cf:ee:1e:f4:2b:06:31:93:45:2c:
b2:7b:be:b9:ba:4a:1c:8b:38:26:2d:9c:4d:15:75:8e:b4:34:
65:64:27:ac:05:f0:8c:c9:6e:0f:0e:e6:4d:1c:31:ba:79:7e:
8b:8b:8d:b3:26:a8:f6:be:13:51:5a:a5:64:61:fa:c0:b0:b8:
d2:64:2c:fe:6b:c4:7d:9e:62:12:41:e1:3d:74:17:3a:f5:40:
f9:c5:ce:ec:f2:70:2c:7f:9e:4b:b9:5f:0c:20:63:50:de:df:
8a:0a:d6:1d:41:d3:91:3e:18:b8:86:f9:d8:26:74:78:a4:58:
6b:a3:ed:e0:06:bf:3a:d4:39:61:ee:f1:36:eb:02:d5:d7:3d:
42:ad:4f:2f:98:0b:09:c3:aa:b1:65:8e:74:a6:b5:be:dd:58:
91:a9:ea:48:ba:3e:24:fc:ef:ed:f8:df:f5:ae:11:76:37:a3:
d0:e3:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:06 2026 by rpki-client