Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5jMSvIzVxMG_mcgrcdLoDAopQ-Y.roa
File: 5jMSvIzVxMG_mcgrcdLoDAopQ-Y.roa (raw, json)
Hash identifier: ffWcgZh6V7QIsYDMg4fCcBRK0UUSmYN6h8f7A+MavFY=
Subject key identifier: E6:33:12:BC:8C:D5:C4:C1:BF:99:C8:2B:71:D2:E8:0C:0A:29:43:E6
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A0EB41357CCBD55F6DE4270D9B58465AE5
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5jMSvIzVxMG_mcgrcdLoDAopQ-Y.roa
Signing time: Tue 29 Sep 2026 03:41:54 +0000
ROA not before: Tue 29 Sep 2026 03:41:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 9.151.240.0/21 maxlen: 21
9.232.16.0/21 maxlen: 21
9.232.28.0/22 maxlen: 22
9.232.72.0/22 maxlen: 22
9.232.128.0/19 maxlen: 19
9.233.120.0/21 maxlen: 21
135.132.0.0/19 maxlen: 24
135.132.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:41:35:7c:cb:d5:5f:6d:e4:27:0d:9b:58:46:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 29 03:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e63312bc8cd5c4c1bf99c82b71d2e80c0a2943e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:6d:47:d7:a9:27:85:52:74:0c:cd:b3:91:
e5:d9:8d:e4:e5:5e:a4:89:cb:e4:6c:d5:b2:a0:04:
95:80:a4:1c:16:86:d4:86:79:bb:67:ba:03:6c:a6:
f3:29:13:b2:17:66:cc:73:5f:5e:9a:ca:d8:a4:1a:
e1:88:84:02:77:c4:9d:f3:8f:de:fd:56:e4:4a:70:
bb:47:a2:f3:f2:ce:fd:9c:30:2d:c3:32:db:11:61:
44:11:a4:45:6f:6c:aa:ce:93:7e:05:c3:52:74:8e:
81:dc:eb:bb:e4:83:50:61:1f:d7:f7:81:2c:d3:f7:
0f:0f:bf:56:98:e5:6d:ab:48:7a:3a:3e:36:13:da:
f3:f0:61:bb:1c:f3:a4:d6:ee:e9:29:25:85:ea:d9:
7a:9b:05:f6:4d:d5:4b:9e:35:84:2a:64:5a:5d:66:
58:36:64:3f:34:b6:8c:0c:ef:7a:bb:2f:df:15:0e:
9f:3f:8b:67:91:d8:92:07:9b:a9:f2:58:e7:40:35:
93:2b:d7:9e:50:a9:46:27:38:81:eb:29:01:3f:04:
20:d7:80:f4:6b:4c:23:f9:0f:7c:1a:ae:c0:76:d1:
54:3d:3c:e0:65:d2:84:79:5f:07:31:64:c2:8a:42:
d5:6e:d8:f9:4d:34:49:de:b6:db:1e:41:6a:d8:84:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:33:12:BC:8C:D5:C4:C1:BF:99:C8:2B:71:D2:E8:0C:0A:29:43:E6
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/5jMSvIzVxMG_mcgrcdLoDAopQ-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.240.0/21
9.232.16.0/21
9.232.28.0/22
9.232.72.0/22
9.232.128.0/19
9.233.120.0/21
135.132.0.0/19
135.132.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:37:fb:86:05:6d:56:ad:38:8c:93:c8:53:c9:21:00:d8:e0:
8a:04:c8:08:13:3a:01:0b:08:34:34:41:b0:65:25:79:dc:44:
8a:60:15:cd:a7:dc:39:fb:da:ba:1c:e9:57:e3:ba:77:8e:f7:
98:0e:60:16:55:85:53:52:c4:b9:c9:d5:1e:68:d7:0f:54:6f:
69:f0:40:ee:65:af:fb:3e:ab:eb:73:4d:ae:63:07:cc:cd:6c:
bd:31:4e:17:78:20:59:41:2f:76:4f:b4:27:15:34:a1:a3:e9:
70:15:6b:ae:6a:a1:85:30:1f:9f:b4:ed:6b:65:2c:81:41:7a:
fa:9d:f1:db:b8:f0:e4:f4:db:5c:6e:f9:87:f6:a4:38:5f:ab:
01:c5:fc:7f:e1:91:b3:9e:a4:74:fe:f1:52:10:65:e5:4a:cb:
90:85:4b:83:71:18:c6:c6:70:3b:42:f3:70:f0:42:2f:52:01:
ca:3b:9e:5f:cd:14:45:c9:f2:19:77:a1:93:27:29:99:12:94:
1b:b5:89:ef:32:29:4e:82:38:68:fc:16:81:5c:f6:53:de:ea:
3b:c8:02:26:09:62:77:13:3e:b2:5e:38:70:e6:8e:b0:0c:6a:
cb:9f:50:bf:45:90:6d:5c:a6:9d:e5:43:1f:5c:42:42:b9:bf:
d1:8d:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:20:44 2026 by rpki-client