Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/5hd7y1Hc3PM_QzlosG9fSTaaezA.roa
File: 5hd7y1Hc3PM_QzlosG9fSTaaezA.roa (raw, json)
Hash identifier: 66V9uVUB/5ZTDcilplgEkmK9B8hJsQeJvi2JKY2/VyE=
Subject key identifier: E6:17:7B:CB:51:DC:DC:F3:3F:43:39:68:B0:6F:5F:49:36:9A:7B:30
Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial: 01A139BE934F709A734D6995801E88863552
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/5hd7y1Hc3PM_QzlosG9fSTaaezA.roa
Signing time: Wed 14 Oct 2026 09:29:13 +0000
ROA not before: Wed 14 Oct 2026 09:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 192.231.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:be:93:4f:70:9a:73:4d:69:95:80:1e:88:86:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Validity
Not Before: Oct 14 09:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6177bcb51dcdcf33f433968b06f5f49369a7b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:64:50:52:21:a1:30:49:fe:d3:ef:f4:56:
bf:28:11:ae:78:b7:6c:0c:a3:5f:b4:4b:b6:db:6e:
f6:a2:55:dd:26:cd:b0:b0:90:5d:07:b6:7f:c4:f3:
62:22:a6:f1:61:6e:3a:5f:2b:7f:12:ff:de:4d:07:
29:cb:b1:c0:a7:22:35:51:2c:45:09:bf:2d:09:75:
5f:64:f5:81:2e:af:52:0a:5d:a2:33:b8:b0:dd:aa:
44:17:cd:78:e0:75:97:4b:10:08:c3:96:94:d4:1b:
64:e2:04:8c:f5:ef:7c:01:6e:64:08:f3:e2:14:d5:
b1:ea:fa:65:f0:24:6e:99:00:50:50:85:8f:5b:0e:
9d:59:b5:48:3f:fd:a5:ea:d0:86:78:4b:ea:35:e2:
f1:c9:ea:25:80:84:ed:46:6f:61:ab:51:19:85:f6:
18:e3:81:f1:47:f0:60:39:07:ae:3e:86:83:e6:18:
f9:82:c9:1b:d5:4e:b7:a0:34:c1:fb:ce:24:35:1f:
dd:54:9e:26:12:16:28:c5:3b:42:35:b1:68:2f:e1:
2d:03:eb:56:0f:41:5c:c2:38:ea:68:7a:16:90:ad:
e6:78:e6:6e:43:13:c0:d5:f1:d4:95:a7:3a:2a:ce:
fe:73:e4:ba:0e:da:9d:6a:fd:b4:50:7a:ff:c0:69:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:7B:CB:51:DC:DC:F3:3F:43:39:68:B0:6F:5F:49:36:9A:7B:30
X509v3 Authority Key Identifier:
keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/5hd7y1Hc3PM_QzlosG9fSTaaezA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.231.17.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8d:1b:67:48:16:2d:62:60:c5:fa:c3:b2:5d:2f:1f:b2:16:
00:89:db:f5:f6:88:40:38:f5:f4:fc:c9:35:10:92:03:4f:3e:
74:2f:29:cf:85:2f:d0:57:5b:d1:0c:5e:70:be:ec:af:68:79:
df:13:07:8a:1f:6c:d7:aa:91:e2:8f:6a:1a:ce:78:c4:7c:e2:
cd:03:44:ec:07:24:74:ee:0d:bd:79:60:c0:07:85:bd:de:bb:
d4:e4:63:e0:75:2a:c0:41:d1:8b:cf:04:8b:ee:a5:e6:85:55:
a9:a7:45:c3:af:96:8c:c5:55:98:45:0d:67:fa:78:5d:87:f5:
ad:c0:20:1e:cf:f9:c8:8b:77:78:ff:3b:52:78:59:98:5a:6f:
52:4c:19:c1:09:9b:d7:95:7b:51:10:aa:7d:d3:ec:de:52:db:
e0:d9:b5:de:7a:cf:ec:09:9b:f5:c2:e7:98:af:a8:f4:4d:ca:
d2:f4:25:f8:12:62:40:ea:7b:9c:8b:2e:42:a2:7f:4f:9f:d9:
92:23:99:7f:51:d6:85:18:c1:71:5c:1d:7c:ad:d5:49:a8:17:
ed:d1:fb:3a:b6:2f:25:e7:df:d3:db:d9:06:d5:e6:da:20:5a:
4c:f0:f7:42:5e:13:66:71:07:04:85:c3:68:9a:c5:0f:34:f6:
25:10:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 17:50:23 2026 by rpki-client