Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-XngkP5haIHqbktLy87RFdxx1rk.roa
File: 1-XngkP5haIHqbktLy87RFdxx1rk.roa (raw, json)
Hash identifier: LV17yeiuJVzGBhXw7Ya0se60kaAOifl4A5FS9hfQtJ0=
Subject key identifier: F9:79:E0:90:FE:61:68:81:EA:6E:4B:4B:CB:CE:D1:15:DC:71:D6:B9
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A018B5E096BF8BFF402A9227473164177A
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-XngkP5haIHqbktLy87RFdxx1rk.roa
Signing time: Wed 19 Aug 2026 06:29:27 +0000
ROA not before: Wed 19 Aug 2026 06:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 5.178.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:b5:e0:96:bf:8b:ff:40:2a:92:27:47:31:64:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 19 06:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f979e090fe616881ea6e4b4bcbced115dc71d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:35:43:d3:b8:32:de:71:64:a0:2e:44:30:6f:
e6:39:6a:ae:8e:c2:56:19:32:2a:45:97:80:a4:77:
0c:cf:b8:1a:90:e7:e2:c0:5e:c5:59:1b:4c:bb:61:
be:57:8f:32:fd:c7:bb:fa:f1:47:1e:c7:2f:d6:24:
0c:64:57:a7:df:41:5a:39:4d:6e:df:4b:8d:4e:11:
06:c9:c4:06:bc:e1:dc:f5:08:8b:cb:70:ac:4c:ef:
d4:28:0d:8c:90:53:23:ce:8a:b5:9c:99:a2:00:a9:
03:00:8d:bf:bb:c8:db:17:7f:2d:c2:2b:58:d2:7f:
f2:15:a9:b4:11:50:64:f7:1f:42:64:7d:85:96:fe:
71:4e:bd:f2:13:f9:d2:3a:73:51:c6:ca:78:4a:ce:
e0:1f:b1:7e:c7:73:be:4d:25:2d:33:fe:e3:d2:ab:
6e:95:20:49:df:80:57:d6:83:f6:5b:cc:4d:44:b3:
e0:ef:26:7b:71:32:29:45:f8:79:a8:2e:5d:c9:d7:
8c:a0:53:ff:a2:f5:c0:f1:b9:a6:94:7a:a3:51:ba:
d5:b6:f3:56:f9:4e:28:04:a1:bf:c2:94:23:60:21:
9a:1a:b9:8b:45:37:ac:2e:4f:4a:da:75:41:b0:21:
d5:bf:69:e2:f5:0e:b0:e2:fb:22:6b:ed:79:c2:28:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:E0:90:FE:61:68:81:EA:6E:4B:4B:CB:CE:D1:15:DC:71:D6:B9
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-XngkP5haIHqbktLy87RFdxx1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.108.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7a:13:a2:cc:41:eb:6f:56:3b:2c:e8:f1:ab:f0:70:9d:9a:
68:97:5d:c3:f3:44:01:9a:c5:00:87:7e:1b:96:a2:51:ea:28:
67:fe:67:b1:00:16:4c:19:59:2f:c9:1e:ab:dd:1a:eb:eb:16:
54:54:46:9a:1b:33:25:de:8d:6e:9d:a5:6a:a5:4e:46:a2:b7:
03:cf:ce:67:da:59:8a:62:d9:c3:82:d9:5b:ef:40:5b:c4:2b:
ee:23:0f:af:fa:6a:92:eb:ba:cf:60:1c:85:ec:ff:1c:0e:22:
3b:e9:4e:4f:a8:a6:02:f5:ce:a3:df:54:1c:25:9e:01:f0:5a:
6f:36:00:45:42:de:23:7f:cd:2f:e6:ee:26:18:3c:b6:fb:1e:
74:8c:b5:15:e2:49:60:d7:c7:57:8b:c8:95:ea:16:94:d2:45:
67:d2:1b:77:f0:77:f7:4d:d7:eb:a2:dd:86:13:54:dc:71:37:
8f:ee:ac:18:af:0c:27:99:b4:59:57:14:09:6c:e9:9d:e7:b4:
39:3c:91:60:93:81:69:b9:de:62:11:62:dc:13:a2:dc:4b:e2:
1a:d7:00:d8:aa:a1:7b:96:b0:dc:15:42:b0:0c:4c:14:95:00:
32:23:e1:5a:13:3a:b0:03:49:15:17:10:14:b0:06:00:88:0a:
8c:af:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:51:51 2026 by rpki-client