Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/mIll1gr3Ue7RCg_tyJdqaFF3zQI.roa
File: mIll1gr3Ue7RCg_tyJdqaFF3zQI.roa (raw, json)
Hash identifier: pPO9xCyivpdy9T2oWweClDIsmATtF0GJ55LWomFBG7c=
Subject key identifier: 98:89:65:D6:0A:F7:51:EE:D1:0A:0F:ED:C8:97:6A:68:51:77:CD:02
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 019F4755A745642B974021E7E85F0BA3EB13
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/mIll1gr3Ue7RCg_tyJdqaFF3zQI.roa
Signing time: Thu 09 Jul 2026 14:43:43 +0000
ROA not before: Thu 09 Jul 2026 14:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21413
IP address blocks: 5.61.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:55:a7:45:64:2b:97:40:21:e7:e8:5f:0b:a3:eb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Jul 9 14:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=988965d60af751eed10a0fedc8976a685177cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:a1:3b:47:91:68:ed:cb:f8:f2:fd:86:13:
07:df:07:0a:32:83:1f:f3:b2:c5:53:8f:b7:42:7f:
c4:84:5b:2b:9d:7c:4d:e9:23:ea:68:a8:32:c1:6f:
4f:09:25:31:16:ef:bf:d6:8b:06:d7:0f:9d:3f:18:
37:21:35:8b:8b:5a:8f:38:ce:7e:1a:76:13:8d:e8:
8c:17:32:29:e5:7c:d6:6b:3e:26:fe:19:c7:72:4b:
cb:79:d4:15:d4:71:d5:b5:e3:7f:5a:0c:93:c5:fb:
9f:32:f4:a3:53:f1:ba:fd:4e:11:29:a9:8c:62:84:
83:07:07:6c:32:11:6a:4d:55:a4:5d:77:bc:0b:93:
5e:e5:6a:a2:1b:7f:32:25:96:30:8c:db:84:29:6e:
0c:f0:5a:11:d4:be:74:84:1c:3b:58:7b:8b:3e:9c:
e9:ab:61:19:c7:44:88:eb:ba:96:b8:ab:d3:62:8b:
da:f5:e6:30:d6:d2:b4:6f:be:5b:ed:54:fb:31:ac:
af:90:6c:7e:e4:a1:b7:c9:18:d7:da:e4:94:a8:74:
6b:f8:16:82:35:52:18:8b:75:31:a7:e8:4d:c0:b4:
a9:3c:0b:1d:b7:dd:32:dd:02:51:47:4f:8e:77:6b:
be:e3:2d:bd:96:0a:42:f2:0b:01:d4:35:59:a7:21:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:65:D6:0A:F7:51:EE:D1:0A:0F:ED:C8:97:6A:68:51:77:CD:02
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/mIll1gr3Ue7RCg_tyJdqaFF3zQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.138.0/23
Signature Algorithm: sha256WithRSAEncryption
47:4e:a1:17:2b:99:2b:79:80:07:b4:6f:f1:77:52:80:49:a8:
4a:c1:22:89:e5:0b:ba:55:7d:43:5f:e5:e3:ca:08:ac:06:d9:
cd:84:a1:78:6d:59:c5:9f:e6:17:02:c5:59:a6:64:92:01:59:
07:d5:53:cf:6f:e1:99:b5:6b:af:60:32:e2:87:f0:33:14:ba:
b1:33:ea:5d:a5:7d:0e:6b:99:f2:c7:54:dc:26:a1:e5:05:70:
b6:4c:ac:c9:99:40:49:9a:4b:ba:2a:79:05:ff:4b:7e:a6:92:
6d:8e:81:13:5b:9d:54:99:2b:7c:d4:2e:15:e5:13:ed:ed:d5:
ed:2b:37:8c:03:50:ac:9e:32:35:b5:2b:b0:45:e3:22:60:83:
c9:d7:0d:f7:41:22:09:64:22:2e:16:b4:6c:7c:26:3a:5c:9b:
e4:48:4a:dd:35:2e:02:44:5b:d1:63:4f:7a:02:c6:7f:6b:4a:
5f:78:c8:a4:87:b2:ad:71:7f:5b:be:0e:2e:a4:a6:45:2a:d6:
8e:8a:22:ec:17:53:55:8e:a9:8b:92:bd:3e:df:83:48:6a:6b:
62:7e:3f:fc:10:49:18:7a:6f:ec:3d:77:41:f4:80:3a:f3:26:
14:76:81:50:fc:3c:18:78:12:a8:9a:7e:f7:2e:86:e8:7c:25:
85:b5:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:42 2026 by rpki-client