Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5ge23ND1OJo4GD_fpAse8h5GeIk.roa
File: 5ge23ND1OJo4GD_fpAse8h5GeIk.roa (raw, json)
Hash identifier: PRqximGAIUQ/5UldtlNWcaVKczKyl5txIjZ42ikkmqE=
Subject key identifier: E6:07:B6:DC:D0:F5:38:9A:38:18:3F:DF:A4:0B:1E:F2:1E:46:78:89
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CE2D75EF13F7AF9B12ECF5360172E934E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5ge23ND1OJo4GD_fpAse8h5GeIk.roa
Signing time: Thu 12 Mar 2026 16:18:11 +0000
ROA not before: Thu 12 Mar 2026 16:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 84.21.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:d7:5e:f1:3f:7a:f9:b1:2e:cf:53:60:17:2e:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 12 16:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e607b6dcd0f5389a38183fdfa40b1ef21e467889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:99:84:dc:18:dc:9e:ae:eb:ec:f4:22:bd:
d1:4f:2b:1b:4d:88:96:b7:be:83:c8:01:84:13:80:
cb:22:52:21:68:14:59:e3:94:e7:2c:59:51:ca:a0:
86:89:93:d0:10:56:eb:fc:29:f3:1f:fe:88:6b:42:
65:45:01:5d:fc:89:33:fa:c3:84:dc:2b:1b:3e:ee:
33:54:ac:bc:19:76:22:75:8b:61:2d:83:89:4b:fc:
8c:63:d7:65:7d:57:11:01:35:5c:99:59:97:7f:dc:
02:9b:53:3f:0f:89:4d:9c:4f:a5:b8:48:f9:d6:e8:
0b:a7:b5:0d:26:80:95:03:6a:c1:2f:26:78:fa:9c:
e0:f9:a2:c7:f1:c5:7a:db:89:66:b0:43:d2:f8:27:
43:9a:32:c1:6c:ea:10:95:ea:bb:82:8c:11:9e:7e:
f1:0e:a3:ed:c6:3f:0f:7a:c0:0a:d8:d2:47:8a:d2:
e8:8c:96:97:85:68:d0:8e:b5:0d:6a:87:a6:4c:73:
f2:1a:eb:d7:16:83:bf:bf:59:a5:79:32:bc:27:bd:
de:9d:5d:e6:44:7a:e8:fc:aa:8f:99:be:71:93:73:
01:d2:5b:0e:c9:0b:0d:1e:3f:da:e3:b4:4a:93:ef:
5b:e4:99:75:d0:ad:76:0e:4a:52:53:f7:34:ce:d4:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:07:B6:DC:D0:F5:38:9A:38:18:3F:DF:A4:0B:1E:F2:1E:46:78:89
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5ge23ND1OJo4GD_fpAse8h5GeIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.191.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c0:f1:b4:5d:bd:4f:3d:b8:6c:2a:c1:b8:62:96:91:b5:37:
82:f3:0d:17:4f:04:a7:5c:c4:11:61:16:ad:f2:24:d4:99:04:
c5:c9:21:f0:ab:44:4e:17:9e:9b:06:3b:79:2f:a2:ca:47:0d:
4e:66:40:05:c6:84:f4:bb:08:34:ae:68:cb:3b:f8:88:75:e3:
1a:6f:80:ee:39:e9:a9:05:30:df:5a:79:07:22:38:36:5e:d6:
fb:97:42:2b:8e:13:1a:92:d8:15:2d:ca:d5:e8:a6:6e:ed:5c:
2f:9c:87:1f:43:7d:e6:f7:84:cc:b3:81:ec:d5:f6:48:71:5a:
d0:e4:9c:ef:a6:29:fa:60:44:54:1d:7c:7c:98:fa:c4:17:28:
86:58:c9:ea:f3:bc:fe:09:00:87:64:83:27:9d:48:d9:56:92:
3b:3e:17:68:6e:de:39:26:e3:bb:09:39:79:8f:57:a4:55:1c:
68:2f:d4:78:73:91:69:53:67:36:8a:29:45:53:3f:19:bd:98:
44:10:89:0e:0c:07:88:7f:0e:50:f3:7a:62:25:45:50:4f:56:
63:e6:ac:53:b8:a4:06:83:ca:1b:3f:cd:7c:04:3f:31:7d:14:
b0:5f:46:0a:2e:ee:27:1d:94:92:d3:43:51:40:61:f1:62:4e:
a3:21:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:30 2026 by rpki-client