Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bW4fZtzKzqdebS9mwab0I7h9ocA.roa
File: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (raw, json)
Hash identifier: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=
Subject key identifier: 6D:6E:1F:66:DC:CA:CE:A7:5E:6D:2F:66:C1:A6:F4:23:B8:7D:A1:C0
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019CFC70167F89B7EA12FCEBADEDDA603C0F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bW4fZtzKzqdebS9mwab0I7h9ocA.roa
Signing time: Tue 17 Mar 2026 15:35:30 +0000
ROA not before: Tue 17 Mar 2026 15:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200344
IP address blocks: 5.180.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:70:16:7f:89:b7:ea:12:fc:eb:ad:ed:da:60:3c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 17 15:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6e1f66dccacea75e6d2f66c1a6f423b87da1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:41:bb:06:ad:76:0b:d7:22:d9:fe:0b:7a:
5a:d3:00:a8:4e:dd:e4:66:d0:0f:b6:e8:a3:a9:f0:
4c:9b:7e:0e:eb:47:0a:14:f4:bc:95:bf:e2:9e:82:
b2:94:1e:6f:69:29:8a:88:5f:c9:92:46:99:42:41:
74:0b:4b:f0:99:ba:10:24:94:0d:18:61:3f:a2:53:
ca:fe:54:21:02:a2:73:0c:00:3f:24:b6:da:1a:9b:
84:93:61:12:07:2b:b9:e0:2f:c4:17:06:0e:df:cc:
cf:5f:35:3e:00:62:ef:04:d3:28:ba:63:c0:23:71:
47:91:61:73:0a:6b:cc:b1:f4:2a:af:f4:43:7d:67:
6c:a1:9d:9a:ec:90:52:8b:19:42:23:3e:63:86:ef:
2d:b1:52:12:c6:06:94:8a:ec:aa:a7:a7:9c:ae:55:
23:03:96:ee:67:41:51:da:92:e9:9e:b7:5f:57:e1:
79:8a:47:b1:42:a5:7c:1c:73:96:df:08:ec:5f:72:
2e:ee:f5:cd:ea:ee:d8:46:4d:e6:4b:ab:00:49:8a:
29:82:63:d2:b8:46:54:bc:91:f1:58:1f:7f:3f:e7:
fc:7a:6b:b1:57:00:d8:6d:86:cd:90:d7:cd:db:f7:
82:cd:90:c6:ce:d2:e2:d1:75:f5:bd:2e:06:49:32:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6E:1F:66:DC:CA:CE:A7:5E:6D:2F:66:C1:A6:F4:23:B8:7D:A1:C0
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bW4fZtzKzqdebS9mwab0I7h9ocA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
Signature Algorithm: sha256WithRSAEncryption
76:25:50:37:9f:08:86:f7:07:d3:96:94:e4:a5:93:9c:05:ba:
9e:94:07:24:77:f4:65:2e:7c:7e:fa:da:56:89:59:e7:02:79:
9f:77:a1:68:6f:8e:b3:36:8c:5a:c0:ce:53:c8:32:f8:34:d1:
5b:8d:09:09:d6:35:49:ad:f6:fe:74:54:26:b4:66:95:4c:a9:
7d:18:b7:b9:c4:99:14:e2:bb:fa:db:66:cc:40:2e:df:a3:cd:
65:79:92:59:38:87:af:5f:10:c3:71:e2:52:38:3c:cd:a1:99:
6f:ac:81:1f:2d:a0:cb:f8:54:08:16:f9:11:b5:b5:8c:c0:e8:
80:10:2f:49:d7:58:a2:ca:a1:f4:e1:c3:a4:5a:17:92:a5:89:
d6:09:63:11:ee:a0:53:16:66:86:34:ef:3a:17:ff:94:85:e4:
34:20:b9:47:f8:15:a4:33:31:d6:9a:22:f7:95:16:91:ea:95:
38:e7:14:82:c1:5e:2a:9d:92:ca:79:76:e5:84:c7:61:3b:af:
a7:65:a3:ae:bc:a4:60:05:6f:9d:e4:18:4c:1c:81:05:94:a9:
6e:8a:f6:f4:2d:79:06:45:0e:f7:ad:67:de:a8:4b:cd:d5:6e:
d0:2b:a7:df:00:26:c2:15:14:c5:7f:1f:50:9e:26:ca:ae:04:
a7:2b:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:58 2026 by rpki-client