Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/s9p2C__iZ2J7toPup5hH5iFxnWE.roa
File: s9p2C__iZ2J7toPup5hH5iFxnWE.roa (raw, json)
Hash identifier: Wwc9AFxmcmbtflqnqTZJb0CV5saV+p6mA6lZ1ZeqouY=
Subject key identifier: B3:DA:76:0B:FF:E2:67:62:7B:B6:83:EE:A7:98:47:E6:21:71:9D:61
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01A1533D267C8A3BA551EB4F23ADE781F3D9
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/s9p2C__iZ2J7toPup5hH5iFxnWE.roa
Signing time: Mon 19 Oct 2026 08:17:58 +0000
ROA not before: Mon 19 Oct 2026 08:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200436
IP address blocks: 5.42.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:3d:26:7c:8a:3b:a5:51:eb:4f:23:ad:e7:81:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Oct 19 08:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3da760bffe267627bb683eea79847e621719d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:24:f5:ad:6a:e6:6d:bd:fc:61:82:14:ab:
df:16:50:6c:b8:04:38:58:5e:a7:8c:cb:0c:63:94:
75:ca:d1:2f:7c:8a:3d:37:6b:7d:fe:67:eb:77:b8:
f2:28:5d:5e:b7:4b:74:10:58:cc:a1:3d:45:25:de:
8b:60:a7:ef:25:0c:dc:a9:e1:88:63:f1:dc:06:b4:
ea:5e:92:6d:c2:e7:d4:5c:2f:ee:ee:1e:61:e8:84:
24:8d:f7:05:c1:af:3f:e6:c0:46:c2:31:69:d7:3f:
3d:1d:37:02:67:c0:fb:bf:4a:cd:39:4c:d9:64:dd:
15:8c:06:f8:e8:61:bb:61:4a:c1:c5:d5:78:56:3f:
80:ec:b1:56:58:a9:8d:d0:69:d0:63:b2:fe:ff:69:
03:10:8a:db:ce:3b:bf:78:b1:2f:08:ab:ae:d0:ea:
e4:5e:f4:cf:a9:10:2d:e8:01:52:eb:ae:b9:37:f7:
3a:6c:c2:e9:b1:e5:bb:94:2a:44:b0:53:9e:8a:c8:
91:44:c8:f7:9e:c6:80:f2:1e:67:68:76:76:52:f9:
dd:81:0d:b1:0f:3d:d9:5f:6d:6f:c2:b6:8b:5c:3f:
b4:12:20:f3:a6:8d:5f:f5:96:57:5d:ff:33:d6:89:
61:a2:02:a2:f9:6f:52:96:4d:70:79:3b:2a:1d:6c:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:76:0B:FF:E2:67:62:7B:B6:83:EE:A7:98:47:E6:21:71:9D:61
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/s9p2C__iZ2J7toPup5hH5iFxnWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f0:e9:c7:e6:2c:7a:31:15:d0:de:71:c0:6f:22:d0:30:ad:
77:cc:93:3d:d7:94:23:a2:7b:21:bf:14:32:52:6c:e9:c3:79:
09:9e:2d:33:12:e8:20:fc:41:a5:de:6a:b7:e1:92:b4:dc:0b:
8e:85:55:9a:44:cf:6c:e2:90:0c:13:87:15:79:b1:71:6f:dd:
ca:7d:ee:4e:f6:dc:1b:8a:a2:2a:b3:43:19:9a:75:d8:94:63:
fe:cf:bc:bb:f9:06:d9:c6:33:1d:89:3f:05:0b:9e:fc:89:18:
cc:9a:27:c6:9f:53:69:72:5f:a4:71:f9:b0:b0:51:44:1d:40:
8b:e4:f7:6e:ec:80:f0:b0:75:40:04:de:95:50:33:12:d5:7e:
61:b7:f0:21:37:74:7f:6d:ae:31:12:fc:7d:ae:05:cc:f7:3c:
85:0f:83:dc:6f:5f:3d:44:32:12:6f:ca:ac:bb:20:d2:9b:c2:
9b:5f:c3:2b:a3:2a:af:9e:cd:fc:ff:b6:ae:0c:94:58:92:d2:
d9:1a:b4:ce:a5:fc:a7:73:51:12:23:37:f3:47:fd:57:c3:c0:
2f:e2:b0:1b:99:32:63:95:0f:ed:74:67:8b:86:e8:91:56:2d:
58:d6:90:69:eb:dc:cc:56:34:e5:2d:f7:ce:a1:f1:17:ab:06:
f3:35:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:34 2026 by rpki-client