Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/ckHumiPtaA1pLrkOSl_urtWm-cU.roa
File: ckHumiPtaA1pLrkOSl_urtWm-cU.roa (raw, json)
Hash identifier: /O2IP9L9HmQqcupCKYJNNumlRGg5WMCM9joY5De3VeY=
Subject key identifier: 72:41:EE:9A:23:ED:68:0D:69:2E:B9:0E:4A:5F:EE:AE:D5:A6:F9:C5
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 01A0F53E5BD1B37D04086D75D0BAE9E25D16
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/ckHumiPtaA1pLrkOSl_urtWm-cU.roa
Signing time: Thu 01 Oct 2026 02:14:59 +0000
ROA not before: Thu 01 Oct 2026 02:14:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18066
IP address blocks: 5.157.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:3e:5b:d1:b3:7d:04:08:6d:75:d0:ba:e9:e2:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Oct 1 02:14:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7241ee9a23ed680d692eb90e4a5feeaed5a6f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:88:83:b5:c8:3a:26:cc:47:a4:1b:57:13:
3f:bc:7c:cd:59:54:4b:29:7a:0a:5d:f0:b0:13:05:
ac:b0:a5:e1:f6:09:3a:23:f1:5b:b1:d2:77:57:9f:
26:7f:b9:00:a5:1e:a2:38:2a:d7:d2:54:b3:0a:2a:
09:8e:a3:ae:ae:36:a7:6e:fe:9c:1b:9f:be:57:30:
f2:cd:c8:fb:99:15:7b:29:04:d2:c6:3c:87:28:82:
f3:99:82:04:05:7e:d9:9a:24:85:c1:b9:d8:44:22:
93:68:43:97:a7:96:90:9d:94:25:b3:68:85:86:5e:
e1:d9:62:8d:0f:87:82:1d:d9:24:92:0f:ad:c8:e0:
71:62:cd:6d:13:17:31:61:09:e0:bd:f6:f0:6b:13:
9b:21:dc:62:80:ee:11:18:65:5e:37:e2:47:de:5b:
64:f8:81:af:15:79:f2:45:08:62:d4:ad:2f:b3:44:
9f:bc:a6:bc:68:b4:f7:6d:ad:f7:21:07:05:bd:f6:
8d:f5:f9:4c:bf:51:e3:c5:f4:09:db:fa:6b:75:2f:
70:bc:bf:7c:13:33:c1:e4:5e:bb:7d:c1:42:46:a7:
14:cb:58:dd:bd:55:fa:ba:0a:bd:05:e3:8c:12:98:
73:ca:fb:ae:dc:b6:53:a5:04:f2:89:d4:f1:77:b2:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:41:EE:9A:23:ED:68:0D:69:2E:B9:0E:4A:5F:EE:AE:D5:A6:F9:C5
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/ckHumiPtaA1pLrkOSl_urtWm-cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.88.0/24
Signature Algorithm: sha256WithRSAEncryption
38:86:39:4a:1c:bd:6c:70:72:81:ef:35:c1:24:1d:08:36:e9:
e8:bc:64:40:90:f3:d0:68:85:8e:cc:d3:d0:9b:07:a3:ed:33:
87:02:86:a7:78:9f:15:a1:fe:88:19:97:14:06:ec:18:d7:f4:
7b:ac:12:69:7d:3e:0f:01:f2:d2:e2:5b:19:e3:3b:c7:4c:a0:
a7:8c:48:d5:1b:80:72:8e:0b:47:69:af:0f:9e:0c:43:5a:56:
54:9a:dc:87:c5:36:69:a7:71:8f:58:76:53:bb:8e:3c:52:2d:
6d:95:b3:b2:59:66:4b:22:b9:ba:ea:bd:c7:48:4d:fb:2f:82:
76:21:dd:cd:ff:63:d1:53:c6:89:c5:21:24:fa:f2:06:62:a8:
87:30:8b:d5:23:4e:3a:6d:96:04:00:94:3c:eb:e8:7d:e1:bd:
26:cb:36:83:c5:9f:6a:8e:1e:25:04:09:ac:3c:16:53:35:94:
c5:c9:ba:bb:b9:27:88:d1:64:d4:95:dc:15:a4:5e:12:72:53:
cf:3e:7c:4f:2a:15:24:66:62:34:56:0e:e7:63:e7:0d:96:15:
b5:2f:bd:1b:4a:ea:84:bd:15:83:14:d4:5c:2c:5d:e0:36:60:
aa:6a:b8:9a:92:7d:59:b5:ff:4a:67:dc:7e:73:f1:37:9c:dc:
8c:9c:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:56:53 2026 by rpki-client