Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/5irBP5QIZMl5UesT8s0p3kTFvOE.roa
File: 5irBP5QIZMl5UesT8s0p3kTFvOE.roa (raw, json)
Hash identifier: 3HROYvuam5wiNCJecdOldgiQiLNrYcQYchqNFNGxfFo=
Subject key identifier: E6:2A:C1:3F:94:08:64:C9:79:51:EB:13:F2:CD:29:DE:44:C5:BC:E1
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F3E30A83DB40B0194F5BEA5C28051DA36
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/5irBP5QIZMl5UesT8s0p3kTFvOE.roa
Signing time: Tue 07 Jul 2026 20:06:43 +0000
ROA not before: Tue 07 Jul 2026 20:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 109.122.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:30:a8:3d:b4:0b:01:94:f5:be:a5:c2:80:51:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 7 20:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e62ac13f940864c97951eb13f2cd29de44c5bce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:21:85:4c:c1:b8:00:5c:31:85:97:e0:ea:
a3:9c:43:58:8d:4a:f8:c4:eb:4d:35:6b:52:b3:2d:
6a:05:2f:b0:ee:c3:a6:8e:9a:8d:f9:75:3a:ee:4d:
f2:ff:f0:a8:c2:41:a6:90:3a:1c:0a:fc:55:1b:4e:
a2:52:4f:0b:57:a8:90:b6:c4:19:83:d1:2f:51:7e:
c3:5d:ad:9e:df:21:85:7a:fa:92:f1:f3:8d:2d:21:
f0:db:b3:45:d3:58:dd:4d:43:5d:d0:bc:f1:e6:97:
0a:43:07:d1:fc:9f:e7:f6:30:e0:73:bd:43:80:f6:
7b:07:11:72:c4:5f:ad:53:ae:46:18:91:dc:2a:7e:
4b:04:4c:93:fa:14:57:5b:a7:ef:fe:9b:0d:0b:42:
82:7e:20:a4:a5:d8:6c:39:83:1b:ad:cb:38:69:c0:
a8:de:1d:0f:b6:c0:a6:a8:2d:85:52:3e:69:b8:dd:
e1:07:06:71:43:88:21:e0:19:67:e2:53:22:d5:27:
b5:95:21:44:f0:c7:b4:1a:85:5a:5c:36:76:dc:1c:
e4:a7:b5:dd:bd:18:3b:2e:18:52:a8:82:f1:ac:1e:
0f:99:3e:6e:80:40:fd:49:29:5a:b0:34:31:31:62:
ae:b2:b7:c7:4a:87:9b:df:b7:9d:ff:90:52:f6:a3:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:C1:3F:94:08:64:C9:79:51:EB:13:F2:CD:29:DE:44:C5:BC:E1
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/5irBP5QIZMl5UesT8s0p3kTFvOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b5:ce:e3:71:70:6a:85:d7:b8:fa:fa:c8:64:fe:32:54:8b:
36:df:cd:1d:5b:26:62:c3:cf:e9:df:a7:89:3e:df:3e:40:93:
13:ac:5a:56:0a:bc:10:a1:a6:32:49:05:f9:bf:3f:a7:f0:88:
e0:41:a3:af:c9:77:c1:ec:a7:e8:35:a4:9b:9c:b5:0d:e4:fd:
5b:7d:5d:ef:55:a2:9b:e0:7b:6a:eb:18:5f:bf:e8:3a:3f:37:
e1:13:f1:71:d9:3a:12:25:6c:fb:4a:b7:cf:20:33:52:ee:ee:
3f:77:5e:b0:65:74:b1:bf:1d:92:46:97:97:f8:c5:1e:43:0f:
59:ec:0c:05:39:b0:a6:6b:e1:99:4c:8e:db:53:e0:63:b4:c1:
53:64:4e:71:02:64:7e:df:50:b2:6a:d9:4d:00:f3:8b:61:70:
27:7d:e6:9e:c6:57:c6:d5:3d:49:9b:1d:5d:7a:4d:9c:ed:05:
24:ce:35:cb:b4:34:19:28:05:f2:03:8f:bf:04:12:c0:7d:5b:
a0:35:b0:11:68:47:ba:1e:07:41:db:b4:a6:c1:27:d8:84:55:
33:36:0b:ce:9c:8a:b2:e7:b6:f7:e8:5d:8b:40:3d:ae:dd:ac:
03:85:18:bc:bf:e6:5a:86:20:49:cd:90:1b:19:e7:43:7e:72:
8c:44:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:43 2026 by rpki-client