Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/5IBA90e0btpD-oUMxNJyjPTNMRo.roa
File: 5IBA90e0btpD-oUMxNJyjPTNMRo.roa (raw, json)
Hash identifier: CzjoqGPd0ng+inzIaw4MD6uqCBQT54w7Tg/W+lOitOc=
Subject key identifier: E4:80:40:F7:47:B4:6E:DA:43:FA:85:0C:C4:D2:72:8C:F4:CD:31:1A
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019F47F5E0E6921B4978B4C0C3045FFD9FEC
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/5IBA90e0btpD-oUMxNJyjPTNMRo.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a12:9880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:e6:92:1b:49:78:b4:c0:c3:04:5f:fd:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48040f747b46eda43fa850cc4d2728cf4cd311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:5b:42:75:56:90:1f:09:aa:cd:57:7d:6b:
a8:25:ff:bd:31:c2:a4:d3:42:d5:66:5e:f2:59:3b:
55:ca:c2:77:54:64:78:13:e6:a6:a4:e6:ff:81:3e:
d2:55:dc:29:cd:30:7e:a3:3e:d5:20:c6:08:44:38:
48:0e:f6:84:d3:ee:01:b0:f1:52:a0:2c:d9:08:0b:
c2:38:33:3d:10:b2:9a:a7:5d:19:e6:6e:5e:be:33:
3d:81:b4:95:6b:5c:11:55:c5:cf:ab:21:1a:38:e7:
17:db:e2:e5:90:6a:c1:c9:08:0e:89:8e:42:13:a5:
00:22:bc:59:a2:c1:b2:07:22:7d:68:61:b7:92:d4:
37:1b:ba:0f:b4:a8:3d:e0:6a:f6:65:1d:20:14:52:
3d:93:a3:d8:e0:ba:39:1e:f8:f4:0e:cb:ad:34:54:
d3:cb:2b:d3:d8:db:84:b7:ea:04:64:fa:a4:f8:b3:
c4:0a:ed:5c:7e:3f:0f:41:19:8f:ee:22:26:44:6f:
8d:2e:ac:e4:34:4b:36:b5:12:89:46:1d:a3:94:63:
d1:8f:d8:cc:74:0a:69:f2:ba:e2:fc:a1:b2:c1:c2:
76:e3:63:b9:c7:e4:5a:e2:09:e6:08:3b:0c:b7:81:
94:a5:09:dd:91:f5:62:65:5d:01:02:48:a8:c9:b4:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:40:F7:47:B4:6E:DA:43:FA:85:0C:C4:D2:72:8C:F4:CD:31:1A
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/5IBA90e0btpD-oUMxNJyjPTNMRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9880::/29
Signature Algorithm: sha256WithRSAEncryption
04:86:51:0b:dc:ea:dd:af:af:a1:a2:a9:49:c4:36:41:f8:03:
3e:a8:db:a6:c4:79:30:89:c1:eb:08:d4:6e:c4:07:ff:93:d1:
dc:2f:f9:69:26:86:1b:b3:26:ef:c2:3a:d2:e2:0f:e2:fa:04:
ac:39:d3:f1:56:86:fa:54:6b:b9:82:fe:44:ed:72:4c:64:9e:
b0:4e:dd:5d:3d:b3:6d:fe:16:59:c9:ee:1b:f4:80:4b:fb:62:
73:5d:87:5a:bb:c8:9a:23:f5:20:2f:b1:fd:e9:fd:e5:f8:ad:
b9:f3:43:00:7e:54:87:bc:b1:b2:54:c7:e8:b1:44:90:e6:d5:
25:8e:f6:64:f3:20:79:3c:20:01:c5:6b:6e:16:21:dd:a9:e3:
7e:36:9d:50:b9:04:65:4e:27:ca:2d:32:1d:b5:1c:1b:d3:ee:
fe:6e:84:97:23:39:e8:60:71:0a:9a:61:a2:ad:a0:0e:ef:8a:
51:fc:5e:f7:06:c9:e8:97:bf:e0:76:f0:f6:b1:37:ca:79:85:
f6:08:45:de:a0:39:99:9b:67:16:91:63:4c:7e:7c:c0:73:25:
34:27:25:e8:c6:81:23:ac:e8:97:c2:65:36:b5:71:2e:43:bb:
71:d0:65:af:97:f1:4a:25:36:98:63:99:8b:93:91:9a:5d:d9:
94:75:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:36:55 2026 by rpki-client