Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5qNf_MYv0lpoq3sNh3kDXb059rs.roa
File: 5qNf_MYv0lpoq3sNh3kDXb059rs.roa (raw, json)
Hash identifier: +sql1GaZpfUOxC6fO1AwUZgXzGMpcuv5auUbM7OIvCI=
Subject key identifier: E6:A3:5F:FC:C6:2F:D2:5A:68:AB:7B:0D:87:79:03:5D:BD:39:F6:BB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A1442F53549E113F6B6847DE778794433D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5qNf_MYv0lpoq3sNh3kDXb059rs.roa
Signing time: Fri 16 Oct 2026 10:08:34 +0000
ROA not before: Fri 16 Oct 2026 10:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209178
IP address blocks: 103.100.168.0/24 maxlen: 24
172.110.216.0/24 maxlen: 24
185.233.19.0/24 maxlen: 24
2a06:da40::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:2f:53:54:9e:11:3f:6b:68:47:de:77:87:94:43:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 16 10:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6a35ffcc62fd25a68ab7b0d8779035dbd39f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:ba:81:f9:c6:7a:88:3d:0c:15:26:3f:17:
c3:57:94:78:92:d0:24:4c:65:4e:60:db:a3:29:df:
72:8f:5a:a8:64:96:2e:f6:c8:76:0c:dd:ae:10:f3:
b6:f3:06:b2:d3:d8:7c:b9:dc:1d:51:16:17:8e:98:
10:1a:5b:15:e1:33:f3:55:54:42:f3:0b:43:48:62:
95:36:0d:51:cb:17:34:03:1b:43:d1:c9:5f:f5:e3:
30:11:f7:ba:0f:32:21:66:45:6c:70:63:90:e8:f9:
99:62:16:14:77:04:aa:85:06:df:13:7d:cc:b6:1b:
f9:30:2d:de:60:36:46:87:6b:a5:45:82:c7:6e:99:
2a:24:98:84:3a:b1:3b:b2:f3:9c:fc:ca:80:96:df:
af:ee:30:7e:be:b9:d3:f8:8c:74:14:25:36:cc:86:
95:71:db:b4:80:24:94:39:c8:3a:fe:8e:86:8b:87:
fb:5c:db:37:b1:93:59:65:d1:2e:5e:91:42:8b:89:
ae:ea:7b:14:a2:e0:be:35:c5:ef:03:83:52:67:8f:
cd:f7:1b:2f:90:95:e4:44:c0:d9:95:ee:19:54:7d:
52:17:16:6e:70:ad:47:d4:54:32:a3:7b:eb:73:7b:
f8:69:84:9b:51:ca:7c:8b:1e:cc:74:73:f7:6c:24:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:5F:FC:C6:2F:D2:5A:68:AB:7B:0D:87:79:03:5D:BD:39:F6:BB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5qNf_MYv0lpoq3sNh3kDXb059rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.168.0/24
172.110.216.0/24
185.233.19.0/24
IPv6:
2a06:da40::/40
Signature Algorithm: sha256WithRSAEncryption
26:f3:a7:a8:85:a6:d9:0e:99:f3:3b:6d:5c:74:e9:d1:c5:2a:
6f:9a:97:35:87:e9:8a:d8:d2:81:80:f5:ce:df:0a:56:25:fa:
78:f8:25:65:6f:d4:56:91:a5:1b:b5:7e:7d:80:95:51:c9:98:
f0:60:ba:55:4a:2f:df:2c:99:6c:2f:9a:ad:01:c9:23:8d:31:
0d:b0:79:ea:c1:a2:0a:59:70:f9:7f:36:f0:22:d8:cb:f8:c8:
bf:88:31:13:32:9c:f2:3c:2a:bd:13:7f:6b:40:98:df:6f:a6:
12:77:c2:99:b9:c9:0f:3a:10:d1:73:99:9f:90:81:ef:32:61:
35:c0:9f:d2:8f:1e:20:6f:51:8a:a1:f2:60:e2:fe:e4:0a:b3:
af:35:3f:cd:4d:5c:6f:cd:05:ed:88:53:08:67:ea:ae:a8:c9:
69:09:f9:ab:23:f8:77:bf:ff:8f:a5:99:ed:ed:03:53:21:87:
bf:16:5f:9d:2e:e4:5b:94:7d:df:b7:c4:22:66:d1:0b:de:ba:
c4:62:81:17:4f:94:1a:d9:92:6a:6e:b2:35:0a:c5:25:b8:94:
d6:1b:0f:2c:08:64:bb:bd:11:8f:31:47:43:bf:87:e8:9c:65:
cf:d1:0a:59:ed:a1:59:18:5a:40:de:6b:78:e8:43:3c:69:41:
51:ff:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:14 2026 by rpki-client