Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V1j0HTnoZZDbGH71KKy-ejUnfHY.roa
File: V1j0HTnoZZDbGH71KKy-ejUnfHY.roa (raw, json)
Hash identifier: 1xQN/uAywdlJf6v146CU+AnqtT1uNCh8PEWdThjMm5w=
Subject key identifier: 57:58:F4:1D:39:E8:65:90:DB:18:7E:F5:28:AC:BE:7A:35:27:7C:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A06F04811E9D8D3B8DF11A8E9B33A8A3F6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V1j0HTnoZZDbGH71KKy-ejUnfHY.roa
Signing time: Sat 05 Sep 2026 00:42:41 +0000
ROA not before: Sat 05 Sep 2026 00:42:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.253.67.0/24 maxlen: 24
93.123.114.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:04:81:1e:9d:8d:3b:8d:f1:1a:8e:9b:33:a8:a3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 00:42:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5758f41d39e86590db187ef528acbe7a35277c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:4d:16:9e:25:7a:4f:11:24:9d:8c:bc:28:
7c:10:4f:0d:ef:f8:f8:89:6c:ff:00:10:cc:3a:30:
ff:da:d2:15:27:89:d1:58:fb:85:30:24:c6:04:dd:
96:c5:03:5d:9c:fe:3f:d3:2e:a9:d8:2d:ac:e1:50:
24:18:90:a0:d6:3c:f1:e3:da:dd:89:fb:8d:49:70:
3d:7f:ad:35:81:ee:e3:78:ae:eb:02:a1:70:3d:55:
a4:e8:01:34:0b:ab:dc:f8:c3:e6:ff:cb:37:b7:a0:
37:b7:60:86:ae:fb:68:06:d2:06:cc:58:06:42:98:
b9:cf:9c:99:2d:ae:b8:67:34:c1:1b:18:a0:17:14:
83:45:05:59:32:0d:df:06:20:89:10:00:c8:9e:1c:
fa:86:eb:f1:fa:20:d2:39:bc:03:17:c1:4c:c2:0a:
f9:38:9f:56:56:fc:24:05:d3:e3:3e:30:4c:70:39:
0e:c3:d2:0c:87:7f:3a:a1:19:e8:11:fb:4b:4a:ed:
75:20:0d:09:38:57:fe:a8:be:c6:6c:1f:72:b1:6c:
58:5d:fa:2c:9a:82:49:38:95:5c:ab:d9:97:8b:01:
9f:04:20:c0:f3:1f:31:59:2f:7c:57:fb:d4:8b:09:
4b:c3:17:39:bf:e9:9e:d3:88:1d:6c:9f:91:fe:2d:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:F4:1D:39:E8:65:90:DB:18:7E:F5:28:AC:BE:7A:35:27:7C:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V1j0HTnoZZDbGH71KKy-ejUnfHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
93.123.114.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
35:67:50:f6:25:f7:2a:71:d9:81:d3:f0:a9:d5:a6:fd:03:2e:
87:3a:19:47:89:ec:17:01:d2:6c:5a:da:1d:aa:d8:07:ea:7f:
9e:df:44:f9:fb:15:b3:ee:52:ea:75:c3:f0:01:ae:6d:aa:48:
a6:12:f4:ef:cb:fa:33:a6:06:0e:21:80:28:f6:d6:78:0f:34:
3a:7b:61:5e:e6:ff:62:a1:ad:30:e1:e9:51:46:ae:cc:e6:a5:
53:85:fe:3d:18:fa:01:2d:15:86:cd:53:9f:89:71:dd:bc:f6:
e0:4b:2f:16:03:f5:0b:d0:2a:fb:95:6d:2e:0d:84:5a:78:be:
f7:a0:b5:18:8c:06:6a:9d:a8:8c:a9:7e:10:01:39:78:5f:18:
75:00:38:f3:22:46:b6:f9:ad:a8:09:20:e6:d9:57:f1:3e:86:
9b:28:b7:5e:f7:cb:f7:ea:c8:58:c8:57:3e:65:14:8d:79:bf:
9e:f6:b5:36:6e:6f:65:6e:8b:14:6b:7f:cc:ce:f3:19:2a:03:
f9:58:75:91:90:a8:2b:11:d0:a5:43:db:b1:d5:ad:d5:b8:0a:
b4:65:38:11:11:d7:76:f4:d4:64:46:33:b9:75:f8:30:d2:a3:
d8:f2:b9:83:4d:de:2b:63:81:55:b5:f6:ac:6a:38:f8:0b:f9:
d8:42:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:43 2026 by rpki-client