Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa
File: 5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa (raw, json)
Hash identifier: LfQjs5A5ZwTBP33RPHEo3Y4xjeF10rJHbd8wCZMoub0=
Subject key identifier: E4:A5:87:46:93:5F:CA:6C:D4:43:60:77:11:AD:9C:43:2C:89:19:C6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0ED2CECFA4D9EF21C85A6A1A6CB1A5DD3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa
Signing time: Tue 29 Sep 2026 12:38:59 +0000
ROA not before: Tue 29 Sep 2026 12:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272547
IP address blocks: 109.111.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:2c:ec:fa:4d:9e:f2:1c:85:a6:a1:a6:cb:1a:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 29 12:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4a58746935fca6cd443607711ad9c432c8919c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:f6:9d:aa:6e:56:66:8d:bf:32:46:6b:d1:
18:25:37:27:cc:92:cc:4b:2c:31:89:e9:84:d3:78:
e3:c8:6a:c0:3a:b1:dc:a3:6a:5f:36:3d:97:24:68:
c3:bb:f6:7a:5b:53:df:7e:5d:28:f3:29:21:28:d3:
39:54:39:aa:f3:6b:30:08:0d:8e:02:14:31:92:97:
48:bb:ec:23:9c:49:1e:f1:15:74:95:1a:a8:50:ae:
fa:dc:4d:9e:0c:7c:21:28:74:99:32:e5:64:83:a3:
12:4d:09:43:e7:44:1b:15:62:7b:fd:bf:43:3d:10:
27:af:63:a8:c8:5a:e5:25:37:2e:2b:dc:d9:27:e6:
1a:ed:d3:03:64:fb:26:b5:61:e4:1f:fc:3d:81:0a:
b3:16:25:fa:a5:32:87:99:e6:0e:03:1d:da:91:67:
5f:0a:69:38:a1:65:e3:a3:40:76:77:b9:60:63:19:
a7:d3:ee:2a:d3:47:7a:9d:a5:25:9f:b9:56:c4:50:
d6:59:0c:be:45:d5:f9:08:06:23:47:ec:b7:a5:24:
90:3e:d9:48:35:b9:b8:02:a9:c4:00:54:80:9f:03:
67:a6:17:7e:13:34:33:94:14:ef:aa:e7:a4:3d:59:
a5:4d:08:f2:6b:60:50:7b:64:b2:90:6a:7e:9c:3e:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:87:46:93:5F:CA:6C:D4:43:60:77:11:AD:9C:43:2C:89:19:C6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5KWHRpNfymzUQ2B3Ea2cQyyJGcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.44.0/22
Signature Algorithm: sha256WithRSAEncryption
49:90:0e:dc:93:f4:fa:ab:3a:92:db:88:41:82:a2:23:26:6f:
10:52:47:d2:ea:cb:3b:5b:ab:f6:41:ef:26:71:6b:ca:71:21:
01:8e:f4:e9:22:53:8f:86:5e:03:e0:01:e6:d3:31:2b:b7:f1:
a6:68:c2:a3:fb:8f:44:8f:aa:08:3b:89:42:af:15:8d:ae:a0:
25:88:b5:74:c8:b0:b9:f7:cf:b2:48:b7:cd:14:4f:78:76:0a:
61:ff:c7:fe:1b:af:76:f6:d5:ea:c7:cd:83:80:a2:ae:21:0f:
3b:22:38:14:39:8e:e8:92:55:d0:fe:38:1c:63:b4:c8:fb:59:
2b:1c:6d:e6:0a:86:23:6d:06:3c:6d:b9:c2:99:9f:2d:95:3e:
7e:aa:29:9c:c3:93:9b:4e:b4:14:51:0c:be:d3:ce:e8:b5:cf:
3f:34:d7:73:37:21:b2:f0:85:a1:e8:95:44:f7:4d:c0:65:ae:
45:bd:24:d7:09:47:ae:03:7a:6f:42:a7:10:f0:a5:95:2e:e4:
9e:2f:d0:cd:90:bc:8e:43:cb:a8:fc:d9:c0:e7:26:51:78:6e:
84:05:ab:21:11:56:90:5e:04:1b:8e:6f:20:e2:09:83:72:5d:
08:2e:e0:f1:f5:bb:95:2c:a8:b9:12:72:b5:d2:70:14:e2:cd:
e7:48:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:25 2026 by rpki-client