Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/LU5DykADhdmaI6jiMfYxf_vxtx4.roa
File: LU5DykADhdmaI6jiMfYxf_vxtx4.roa (raw, json)
Hash identifier: Z8K6bSrrEqFfvyiYUN0tY1liB3FHX0zzfjhwqDLx/qM=
Subject key identifier: 2D:4E:43:CA:40:03:85:D9:9A:23:A8:E2:31:F6:31:7F:FB:F1:B7:1E
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A0EE3EABCB7E164B717B6D38356FDBFBD6
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/LU5DykADhdmaI6jiMfYxf_vxtx4.roa
Signing time: Tue 29 Sep 2026 17:37:59 +0000
ROA not before: Tue 29 Sep 2026 17:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219441
IP address blocks: 5.10.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:3e:ab:cb:7e:16:4b:71:7b:6d:38:35:6f:db:fb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 29 17:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d4e43ca400385d99a23a8e231f6317ffbf1b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:32:5a:6c:1a:49:db:80:78:b4:69:37:d7:
61:52:5d:bb:32:98:50:5a:65:44:15:1a:84:ff:1c:
d6:8e:ec:92:8c:94:0c:a5:0a:30:34:21:00:b9:9c:
6a:f2:36:72:c0:d8:fb:e4:5d:b0:16:60:6f:50:c4:
ae:ac:b6:5f:84:01:e5:7d:f1:35:70:c4:ae:76:61:
e4:ae:81:1f:b3:12:4b:87:8f:e0:40:15:08:4a:6d:
fa:5f:2c:2f:69:c4:c8:54:b6:a4:1a:d3:ea:29:b8:
af:fb:3c:80:d9:1f:c2:c2:53:43:3a:ea:72:7d:8e:
ce:8b:70:b7:67:55:6e:0e:57:cf:f1:3e:5c:db:e9:
36:4d:1d:0a:bf:f6:85:aa:d7:fc:dc:64:73:d5:cc:
4f:bf:61:e3:5b:a2:af:45:48:62:72:8b:99:fc:74:
b2:56:28:d4:10:31:67:ab:e0:be:50:47:36:a7:f3:
9e:53:e3:f1:71:a5:12:9d:ba:cd:b0:6e:51:26:14:
00:7a:c0:4a:df:4e:b8:88:38:23:db:54:10:ae:98:
d6:99:ce:d8:c9:2c:0c:1f:57:3b:a7:72:6b:6a:6b:
92:fc:4f:27:24:9c:85:25:95:25:b7:bb:0b:80:e1:
a6:ec:48:f1:30:bf:e8:f1:0a:f0:ad:07:88:b6:60:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:43:CA:40:03:85:D9:9A:23:A8:E2:31:F6:31:7F:FB:F1:B7:1E
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/LU5DykADhdmaI6jiMfYxf_vxtx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.210.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1e:d2:88:8a:db:51:53:b3:ad:42:7c:ec:51:73:21:5c:74:
a9:02:3c:20:8e:19:ac:de:c5:cb:90:5d:df:ea:09:9b:ca:95:
81:ac:df:b8:f4:82:ed:d1:85:39:78:0c:d6:a8:de:d6:af:4c:
ed:41:27:4e:89:2f:76:71:57:bf:5d:91:0d:20:cc:64:0f:a9:
d6:5a:bc:e8:f1:a2:76:94:78:48:85:6e:68:37:7a:c2:4f:95:
5d:32:41:c3:04:ca:07:ae:d2:80:67:f9:14:0d:cb:cc:38:5c:
3a:db:67:60:d2:30:53:f8:5f:f0:3e:ea:44:d9:c8:dc:93:5a:
78:84:d8:a7:1e:11:e8:10:5a:bb:c6:ec:f2:fc:59:72:b0:68:
fb:8e:c5:9a:42:14:6d:9e:6b:52:8d:51:7e:a6:a5:50:f0:85:
01:e2:60:4d:70:49:77:b4:af:8f:da:6a:b4:d7:5d:a6:50:6e:
87:0e:73:1a:68:d6:99:34:b5:23:6d:a9:f8:a9:c4:5f:76:a7:
fa:20:53:fb:cd:ac:e9:24:7f:6c:9a:1c:05:07:0c:cb:52:86:
d3:88:8a:14:c8:48:b3:3e:c2:c9:39:0b:bc:0e:7a:98:dc:4e:
5b:5a:91:52:5b:75:46:f9:d2:2b:96:f7:a7:b3:dc:77:73:ca:
fb:ea:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:57 2026 by rpki-client