Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IPLGv0US97sSy2so8ybZW-F94GU.roa
File: IPLGv0US97sSy2so8ybZW-F94GU.roa (raw, json)
Hash identifier: FxRxqqR98ewhv60P9Joq8XQAeUir1CuoS/ZVeTaCiq8=
Subject key identifier: 20:F2:C6:BF:45:12:F7:BB:12:CB:6B:28:F3:26:D9:5B:E1:7D:E0:65
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A0F0D7571B9333F136A19BBA5D43847D22
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IPLGv0US97sSy2so8ybZW-F94GU.roa
Signing time: Wed 30 Sep 2026 05:43:59 +0000
ROA not before: Wed 30 Sep 2026 05:43:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 5.144.183.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:d7:57:1b:93:33:f1:36:a1:9b:ba:5d:43:84:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Sep 30 05:43:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20f2c6bf4512f7bb12cb6b28f326d95be17de065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:77:df:f5:cb:8d:25:f7:34:90:f0:cb:2c:
71:3f:a7:af:ee:59:ef:df:26:8d:59:0b:0a:3b:9d:
46:61:30:11:62:ee:ec:41:73:c9:1c:b5:4b:9c:cb:
c9:40:c5:66:86:69:d6:a9:19:71:fc:59:90:28:01:
3c:d2:ea:5a:df:22:3b:1a:1d:89:7a:f2:06:33:f0:
29:41:29:18:a3:e9:9b:5a:a7:15:60:64:aa:0e:7e:
d7:96:9e:5f:7c:81:db:97:bb:f3:a1:ea:34:a8:68:
32:d2:0d:1d:c2:24:ee:02:65:34:1c:df:c9:99:ee:
c1:1a:39:62:7c:2c:d3:43:9e:97:b7:b6:dd:88:3b:
73:af:4a:4c:67:b8:35:54:a4:aa:29:a1:59:4e:96:
91:bf:12:3e:57:ed:a9:f4:7a:17:44:9d:83:d7:b1:
4b:de:5f:30:47:37:c2:cd:ab:41:01:05:c6:fc:2c:
4e:15:3b:19:09:96:41:d4:42:57:50:83:cd:f5:48:
dc:95:ab:43:95:32:a0:25:77:fd:d9:d9:76:3a:85:
bd:de:70:66:2c:b9:8f:06:4e:ea:b2:91:b3:2a:57:
51:af:7d:e4:2e:20:e5:e3:63:0c:cd:35:da:8a:06:
1e:8f:65:06:4b:34:2a:ca:c8:35:da:ca:d1:37:37:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:C6:BF:45:12:F7:BB:12:CB:6B:28:F3:26:D9:5B:E1:7D:E0:65
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IPLGv0US97sSy2so8ybZW-F94GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.183.0/24
5.178.106.0/24
5.178.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:45:66:7e:b2:95:4f:e7:73:01:e2:10:d2:54:01:49:c2:f8:
5a:1d:82:66:89:47:28:ee:ee:7c:3a:28:ca:43:8b:ae:57:5f:
62:50:be:e0:a8:d6:30:c3:59:cb:58:44:37:42:28:4e:75:68:
20:98:f2:1a:c1:61:61:ae:7b:a4:0d:5c:b3:ee:d3:e2:37:33:
92:4f:94:c7:a6:4a:b3:6c:3d:04:68:c6:20:97:4e:5c:0d:20:
64:98:e1:10:da:04:a0:45:5e:8e:2f:1e:98:74:39:11:13:7f:
01:6b:a9:56:14:b3:90:1c:87:cc:60:65:8b:7b:5c:6a:f2:c4:
f9:2c:fd:90:46:03:99:5e:b4:79:cd:6b:d8:1d:ad:23:d5:19:
7a:c1:cd:5d:ae:52:da:9c:bd:b1:dd:02:69:1f:8a:18:cc:b6:
c0:73:6d:8e:f7:af:ed:25:85:7e:a1:3b:35:f9:8e:bd:62:98:
f6:8f:15:ee:a8:49:ab:ec:7e:1e:b1:e8:68:83:a3:12:64:e2:
91:b9:85:7f:b5:77:34:23:16:c1:e2:0d:de:e3:89:b7:37:b2:
e9:76:86:84:64:b2:fa:45:5d:8c:e9:e3:74:4e:b7:70:e8:05:
33:ea:fd:99:f6:54:23:ad:23:2e:21:22:ad:40:24:71:ab:91:
7f:14:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:54:15 2026 by rpki-client