Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa
File: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (raw, json)
Hash identifier: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=
Subject key identifier: E4:68:94:1E:FB:D1:BC:C9:60:DE:14:B9:DE:3A:3D:1B:92:AB:F6:D5
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019D3F02703425CAF451DA3F2CE5393021B0
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa
Signing time: Mon 30 Mar 2026 13:50:17 +0000
ROA not before: Mon 30 Mar 2026 13:50:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138643
IP address blocks: 45.134.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:02:70:34:25:ca:f4:51:da:3f:2c:e5:39:30:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Mar 30 13:50:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e468941efbd1bcc960de14b9de3a3d1b92abf6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:18:a8:d9:22:13:06:6a:39:84:b6:8d:03:
ed:15:3d:6d:8e:ad:a8:04:89:13:9e:01:a5:f0:53:
6b:b5:43:e5:3c:bc:e6:65:d7:60:6f:5a:82:38:d8:
5b:91:75:a1:2d:26:c1:77:62:8a:57:a8:5d:bb:cb:
76:d2:4a:ee:66:10:d4:b9:7d:db:e6:71:2f:5f:eb:
01:39:f6:ac:f5:5b:82:1c:08:4d:a3:35:23:bb:5b:
d1:d9:e0:7c:ef:6f:22:11:e3:e6:80:31:e9:97:a2:
c8:37:64:84:62:5c:74:fa:d7:b4:e2:f7:d3:bb:ad:
6b:10:1d:0a:ca:78:7c:68:3d:dd:3c:3d:a3:a8:77:
0e:dc:b4:f3:da:04:af:4e:43:d8:b3:f4:5a:2a:32:
81:8f:f2:16:51:e0:fe:41:b1:e3:f1:e8:d1:17:d0:
f5:6b:b6:15:9c:87:a9:ea:9f:00:d4:f8:63:70:ce:
60:65:e1:13:c4:14:53:c4:dc:49:d7:02:85:ff:55:
b4:99:4d:7a:0a:12:9e:08:fe:9f:c2:c4:6a:29:76:
f7:09:77:6c:d8:f3:ad:e0:17:64:f9:97:f8:1a:10:
57:58:d0:2f:79:9d:23:79:33:8c:c2:43:0a:43:05:
a1:d3:03:6c:07:ae:9b:a1:3e:10:a1:e5:f3:9d:96:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:94:1E:FB:D1:BC:C9:60:DE:14:B9:DE:3A:3D:1B:92:AB:F6:D5
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.98.0/24
Signature Algorithm: sha256WithRSAEncryption
86:67:e1:83:cb:16:02:42:b5:70:69:4d:a1:e7:45:be:2f:e1:
af:73:4f:f5:34:8d:b8:f9:03:57:06:60:99:db:9b:26:35:b0:
bc:9c:34:7d:f6:6b:2f:50:a0:59:b8:f8:eb:e6:b1:30:a4:66:
6b:b4:11:35:3b:d9:ff:a0:80:da:3b:29:1f:cc:a0:1c:5c:74:
03:c4:23:ae:95:6a:35:9a:69:14:cf:47:39:ec:67:33:93:89:
6d:b5:88:54:80:75:cb:53:47:8f:2c:0c:f0:1b:2f:51:72:ee:
95:6a:d5:33:cb:d4:cc:5b:de:7c:06:ad:7f:3d:0a:18:a3:ac:
46:1d:59:86:98:f8:42:8b:cb:05:64:aa:62:6e:65:22:fc:22:
56:48:1f:fc:e7:36:ed:7d:a7:74:07:e9:21:54:7b:6c:99:ea:
76:a0:b6:67:01:ba:09:d4:eb:89:7e:16:2a:9c:9e:00:0a:85:
bf:cf:26:82:89:b6:78:71:bd:18:20:08:66:98:d3:88:d1:5e:
22:66:bc:1f:77:82:d0:ca:a7:0d:14:b3:d4:70:bd:64:c6:8b:
34:34:7a:c5:2d:c5:d5:51:96:53:88:b1:9a:43:84:5e:e2:1a:
91:ce:79:e4:d5:1d:53:74:9d:00:4e:1a:19:dc:52:b5:22:a6:
3f:c9:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:46:55 2026 by rpki-client