Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/__RKJThW-JAZDXQEsSjH0JnAT-0.roa
File: __RKJThW-JAZDXQEsSjH0JnAT-0.roa (raw, json)
Hash identifier: jD6BWs8qodh6Z33fpikrUzOnsc/V5bmi/qeu6Y1foow=
Subject key identifier: FF:F4:4A:25:38:56:F8:90:19:0D:74:04:B1:28:C7:D0:99:C0:4F:ED
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A05D1EFE09D95654DB21B4F9EF8D4A7599
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/__RKJThW-JAZDXQEsSjH0JnAT-0.roa
Signing time: Tue 01 Sep 2026 13:18:27 +0000
ROA not before: Tue 01 Sep 2026 13:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 5.172.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1e:fe:09:d9:56:54:db:21:b4:f9:ef:8d:4a:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 1 13:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff44a253856f890190d7404b128c7d099c04fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:6c:79:86:6c:09:e4:87:2e:27:09:9d:ac:
75:6d:73:f4:15:ad:c6:fc:f7:73:e1:bb:b4:2a:95:
d7:aa:b3:23:b5:63:a2:0d:8d:a4:eb:18:ce:d1:57:
72:3e:51:19:d4:3d:9c:14:0e:00:56:f1:b1:cd:b5:
8d:85:19:ee:4a:67:31:f3:ee:17:30:c0:c3:86:45:
b3:a8:07:a1:52:92:b7:f2:91:e3:ea:ac:07:0d:b2:
ba:95:1c:88:72:24:18:76:71:69:bc:27:6e:8d:ad:
ff:4d:71:7d:6b:73:ea:ef:90:f6:04:94:f1:e3:19:
9f:cf:dc:6d:f3:42:e7:46:dd:c4:9d:c2:5c:77:cc:
b8:bd:01:51:d5:b9:13:da:b1:c9:7e:bc:4a:55:a2:
21:d3:c9:16:b4:4e:8e:9a:b6:2d:46:af:43:f9:ef:
14:12:6c:ec:54:76:5f:75:e8:b8:f8:24:c5:10:07:
a8:89:6b:cf:24:83:e7:91:8e:e7:2e:a0:5b:59:ec:
79:cc:0a:94:d3:59:6e:d4:c3:1c:a5:e3:e2:2a:3a:
48:71:1a:a1:d6:54:3a:0c:0c:20:f3:00:d6:1f:da:
c2:e1:76:dc:73:cf:f9:a1:41:05:43:c6:e4:c8:f2:
d2:2e:90:a5:6c:4a:7d:07:8a:44:c3:bf:d2:48:a9:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:4A:25:38:56:F8:90:19:0D:74:04:B1:28:C7:D0:99:C0:4F:ED
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/__RKJThW-JAZDXQEsSjH0JnAT-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:46:ec:74:f7:7a:34:41:27:c9:31:2e:5c:45:e5:cd:31:bf:
d2:e0:07:7a:87:b8:3c:99:99:df:35:1b:0d:ff:2d:00:52:0a:
aa:c9:b8:cd:ac:00:5c:5d:86:58:ed:a2:be:af:e3:ca:f9:9d:
66:28:e3:04:5b:21:4b:18:0f:91:ef:9c:91:a1:82:2b:41:5c:
e9:0e:51:4a:6e:c2:18:55:99:29:63:52:f6:19:15:f0:84:56:
ac:bd:64:90:6d:55:d0:7c:a2:ce:ea:f8:9e:9e:cb:c4:3d:f7:
ef:b9:fc:09:f2:c4:00:7f:33:f7:ac:00:e6:ab:c0:2e:00:49:
7e:71:80:c3:42:b5:12:5f:74:11:23:36:7d:f6:98:03:ee:27:
01:10:77:4c:a2:56:28:a4:fc:ba:44:28:32:e7:4f:c1:5b:d6:
f6:99:6e:4a:fd:6e:67:c3:bf:fd:1d:bb:42:80:c5:da:ad:81:
58:00:f3:b9:b0:48:cf:c8:9c:97:90:5c:ff:1c:2c:4e:cd:49:
e0:ae:19:66:6a:a2:10:89:66:3e:4f:1a:25:8b:5f:7b:2f:8c:
0d:1f:86:d1:43:21:ba:b8:1e:eb:c3:74:78:19:a9:b6:ae:2a:
95:8b:56:8c:b2:d3:0b:5d:4c:04:0e:86:30:08:69:bc:a4:e7:
da:5c:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 05:23:31 2026 by rpki-client