Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa
File: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (raw, json)
Hash identifier: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=
Subject key identifier: E5:DB:BD:A1:79:BE:E5:19:E6:27:C2:97:DB:18:FF:67:2D:15:A9:2C
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019D2C8D66F3D2753630688C6B38A294389D
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa
Signing time: Thu 26 Mar 2026 23:49:17 +0000
ROA not before: Thu 26 Mar 2026 23:49:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:8d:66:f3:d2:75:36:30:68:8c:6b:38:a2:94:38:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Mar 26 23:49:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5dbbda179bee519e627c297db18ff672d15a92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:68:0b:61:f4:fe:a8:d8:45:67:15:03:af:
08:5f:46:c2:d3:2c:a4:85:2f:48:c0:ff:43:22:04:
43:d9:3c:f3:80:37:21:06:f0:eb:c0:f4:b3:6f:d1:
e6:36:f7:f4:e6:4a:3f:18:75:d9:2f:3f:5c:fe:b6:
44:02:ec:83:79:10:cc:91:bd:5e:37:98:12:a5:44:
fe:c6:5d:29:9a:94:80:50:c3:fc:1a:bb:c4:58:a2:
65:9c:3b:6f:24:60:51:db:20:6e:ba:e7:9d:51:4a:
4d:70:dd:04:a9:43:29:55:68:9b:e7:a5:ad:6e:d9:
27:d9:e5:f3:85:a7:89:08:80:d2:be:30:d3:3e:bd:
10:5e:4a:8e:31:fa:54:5e:5e:8a:96:18:a3:cc:58:
ba:41:8d:63:eb:11:c4:23:82:43:dd:90:26:ab:75:
dc:fd:d5:9c:4c:4a:5f:cd:fe:2f:65:8c:f9:b0:64:
7e:10:ba:bb:46:0b:98:0d:98:79:82:95:a7:a5:64:
fb:1f:c3:ef:1a:22:25:28:37:43:3c:42:8a:7f:ab:
10:65:61:98:73:ca:56:b5:ff:7e:20:b6:18:1f:30:
6c:b8:f1:fd:63:f9:77:77:08:00:11:85:04:27:d2:
d8:7a:9d:13:1b:85:13:88:6f:a4:bc:1e:4a:4d:8d:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:BD:A1:79:BE:E5:19:E6:27:C2:97:DB:18:FF:67:2D:15:A9:2C
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:75:42:02:dd:f6:68:c6:4e:32:37:f1:24:44:cd:0d:9a:dc:
87:5f:4f:bc:ef:5d:d0:63:0f:46:3b:b4:d1:59:84:d0:49:a2:
51:ed:b7:e4:b6:31:0b:70:a2:b2:ad:8b:6c:e8:2d:aa:c3:ce:
1a:ed:9c:8b:82:c2:4c:07:25:75:1a:47:68:73:22:79:0d:79:
d1:f5:d7:b2:22:6d:0f:70:47:40:0e:34:80:85:69:a6:f5:0f:
ef:60:0f:24:35:ef:91:7e:6d:c7:e6:20:56:67:81:a3:97:c5:
2d:7f:f6:2d:83:63:7d:39:d7:25:dc:d2:c8:43:1a:94:d8:5d:
cd:eb:bc:32:c2:5c:26:f7:3a:71:91:59:b3:81:83:cf:b4:6e:
d3:b4:03:48:e6:06:cf:b4:e6:75:f3:3e:9f:f6:a2:73:e6:cf:
a0:5a:f8:9c:27:d8:7d:02:3c:4f:65:27:ac:7d:54:45:d5:20:
57:a7:31:b0:0e:97:ba:18:5c:33:02:2d:02:2e:7e:ca:82:fd:
ba:85:46:2a:ec:b5:89:5b:5d:c5:59:27:60:65:c5:15:50:a6:
b7:2e:21:a1:55:5d:d2:24:1b:9e:1e:3b:aa:b0:4f:ef:c0:f2:
80:d3:8f:7c:5c:31:1d:91:76:94:aa:ae:f5:16:a4:6a:1a:dc:
15:d8:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:36 2026 by rpki-client