Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/dLXnzXVc2iejBTP2ZtvyjP_Cq84.roa
File: dLXnzXVc2iejBTP2ZtvyjP_Cq84.roa (raw, json)
Hash identifier: M0XCHC2U4o4AUsCp7Mvu60q+VwNhxcUfjXa4jrHVsiA=
Subject key identifier: 74:B5:E7:CD:75:5C:DA:27:A3:05:33:F6:66:DB:F2:8C:FF:C2:AB:CE
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 01A167EA0BC05ED8911D48E07E860B7E9E1E
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/dLXnzXVc2iejBTP2ZtvyjP_Cq84.roa
Signing time: Fri 23 Oct 2026 08:39:14 +0000
ROA not before: Fri 23 Oct 2026 08:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 5.83.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:ea:0b:c0:5e:d8:91:1d:48:e0:7e:86:0b:7e:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Oct 23 08:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b5e7cd755cda27a30533f666dbf28cffc2abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:29:73:a0:20:34:41:bc:af:19:35:31:d8:
ef:e4:12:b1:0b:17:a6:a6:48:6c:75:28:c3:bb:47:
18:86:e5:a5:d6:f4:b7:41:ec:8d:dc:80:d6:0a:4a:
93:b0:5f:4d:8d:87:d6:c3:86:f2:e8:8a:dd:ae:6b:
9a:8b:de:b6:9d:3a:63:ec:56:95:ee:ea:d4:c1:74:
61:2e:23:86:a3:f2:35:9c:5a:ed:6d:b8:ea:8c:e8:
5a:41:70:81:a5:66:b8:52:8c:4d:d8:19:81:58:ac:
46:4a:40:66:7f:09:1a:7d:4a:8a:14:10:79:f7:61:
52:51:9f:bc:6e:bc:e0:9a:ed:85:33:5b:31:82:40:
24:24:4d:88:d0:ab:f4:23:e2:9c:9d:bc:a0:a6:f8:
cd:8c:fb:03:a7:50:0f:32:fc:05:d4:ba:54:65:9a:
a2:86:74:d2:d1:6a:44:98:53:75:6d:dc:d5:a8:c8:
fc:77:84:f6:27:c2:e7:4a:d9:ee:a7:85:32:e6:c0:
6c:bc:e4:3b:81:e6:84:6e:31:9a:d8:a6:b6:a9:90:
58:7b:89:48:b2:ef:d4:1e:10:8c:9b:56:a0:81:5c:
05:ca:c6:f7:9f:61:5e:30:26:4c:dd:4a:93:eb:94:
4d:6d:bd:42:9c:b8:d2:44:f8:4d:01:fe:29:cb:f6:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B5:E7:CD:75:5C:DA:27:A3:05:33:F6:66:DB:F2:8C:FF:C2:AB:CE
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/dLXnzXVc2iejBTP2ZtvyjP_Cq84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.16.0/21
Signature Algorithm: sha256WithRSAEncryption
84:71:90:7c:a9:70:59:6c:e2:5c:9e:d4:0b:bb:71:59:f6:e8:
1e:67:4f:84:84:de:c4:3c:2a:58:14:b7:ac:9a:9a:ba:b2:61:
ea:88:28:70:38:4a:ee:a7:79:53:47:1e:4e:53:63:c4:3a:a9:
5e:cb:81:ab:16:5e:b6:2e:fb:18:f4:c7:41:12:21:22:13:ab:
40:2a:4b:a1:8c:d5:3b:d5:fe:bc:4f:81:56:22:6c:a4:30:e3:
a3:e4:2e:2a:79:3e:c2:fe:31:30:9e:c8:5b:fc:ce:bb:a7:a0:
42:4c:f4:7e:33:5d:4e:77:66:ba:a2:a3:c7:98:3a:be:91:c0:
8b:3d:15:c4:a0:bd:af:6c:ab:29:fa:62:f5:14:77:b7:e1:80:
b0:10:58:79:cc:fa:94:fc:7e:44:87:8d:29:f8:48:10:6f:68:
8a:e6:c8:28:c1:bf:0a:16:77:32:18:a1:a0:5d:9a:ad:36:20:
a9:a6:5b:1f:3b:87:2b:89:96:0b:c4:9a:20:c6:af:20:c0:e4:
fa:fb:4a:a5:59:d2:e4:6b:9e:f6:72:79:3c:c0:6e:31:1e:23:
41:15:3b:5e:5f:a1:b2:2a:52:7b:fa:b7:b1:78:55:fb:5f:c5:
af:68:aa:0d:be:63:c3:d5:6b:71:91:b5:55:97:1b:cb:2d:7f:
c9:cf:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 21:33:21 2026 by rpki-client