Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/oyIeeHZzBDg5gpcw_VKUzxzuALk.roa
File: oyIeeHZzBDg5gpcw_VKUzxzuALk.roa (raw, json)
Hash identifier: EFi/co8P7aBkdWUASibG9aUWTQ7ayon36dQUSxjwsN0=
Subject key identifier: A3:22:1E:78:76:73:04:38:39:82:97:30:FD:52:94:CF:1C:EE:00:B9
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019F148964B54D6354869D326ECE94FC386F
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/oyIeeHZzBDg5gpcw_VKUzxzuALk.roa
Signing time: Mon 29 Jun 2026 17:59:36 +0000
ROA not before: Mon 29 Jun 2026 17:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219322
IP address blocks: 5.134.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:89:64:b5:4d:63:54:86:9d:32:6e:ce:94:fc:38:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jun 29 17:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3221e787673043839829730fd5294cf1cee00b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:46:1e:22:66:34:02:4a:3d:8b:49:23:ad:
1c:6f:80:e9:92:b3:b2:0d:fb:41:06:57:5b:72:67:
98:ab:6d:b3:a2:7f:7a:d3:39:bc:8b:77:be:be:67:
a1:df:e2:4e:fd:10:4c:24:f1:e1:e9:04:20:5c:5b:
d2:d7:19:3c:0b:16:01:bd:87:25:c1:b1:a1:e1:45:
f3:a2:a0:b6:2d:7c:d3:80:25:03:32:fd:b9:8b:00:
03:e8:2f:09:c8:aa:7a:8d:22:74:d1:46:4b:b5:c3:
4d:e5:e7:d1:3d:2c:c5:c8:dd:fc:59:d4:8f:23:2e:
6d:4a:d8:09:1b:72:5e:31:a4:01:b1:0f:ea:24:6b:
59:56:fa:19:73:3c:91:aa:4e:5f:76:45:bd:0e:80:
14:5f:33:b1:f3:f5:d1:33:0e:26:79:3b:bd:5c:42:
b6:8d:93:ed:a5:ec:98:d8:34:74:94:19:ec:9e:37:
c1:75:bc:a9:0b:cf:80:55:79:bc:3a:ef:68:2c:0a:
93:14:fb:91:c2:f3:70:30:f7:d6:45:44:87:ec:23:
9b:c6:fb:0c:75:f9:9a:89:0f:d7:ec:f6:40:d8:04:
cd:de:e1:ce:51:65:7b:80:17:c5:31:d2:c2:cc:99:
91:24:4e:14:aa:8b:67:1f:35:1f:5f:6d:6b:dc:2b:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:1E:78:76:73:04:38:39:82:97:30:FD:52:94:CF:1C:EE:00:B9
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/oyIeeHZzBDg5gpcw_VKUzxzuALk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.80.0/24
Signature Algorithm: sha256WithRSAEncryption
54:47:8e:db:48:58:8c:0c:6f:2d:87:50:90:ce:b1:12:10:6e:
8f:1d:f5:cb:24:3b:7d:61:c6:1c:de:97:d9:33:80:67:08:f0:
68:6e:03:87:3e:ea:ef:57:08:d1:4f:26:a6:b7:7d:32:33:ed:
e6:7b:7a:55:53:ff:61:8b:30:56:12:e5:84:b1:03:2e:01:ca:
ce:14:f3:70:f8:c3:c5:08:c3:ca:af:6d:0c:c9:d1:a0:cc:34:
0b:5e:3a:e0:1f:09:6d:43:cd:83:a0:a1:f3:e1:ce:4c:6b:5d:
84:c3:dc:5f:ff:cf:69:6f:d9:17:e4:58:32:e3:51:59:02:8a:
45:42:86:50:cd:7a:51:e8:b4:bd:15:c7:a1:12:bf:d2:da:16:
22:54:de:f7:5e:88:9e:d7:b8:c6:cc:a2:1f:ea:7c:33:d5:7e:
c2:9d:04:e6:fd:ff:74:7b:2d:c8:26:e8:56:15:44:b6:f2:6f:
30:79:b0:11:fe:ae:27:f9:39:23:f6:e4:12:1a:2a:31:9b:12:
26:02:16:df:da:96:20:f6:f0:86:a2:aa:e6:cb:8e:3b:98:9f:
24:a5:fd:d3:13:a7:2c:97:30:0e:d6:23:fe:7c:e5:2c:3d:09:
04:13:d7:1f:89:9b:a2:77:49:30:f0:73:96:4a:70:74:81:1c:
6b:fe:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:37:10 2026 by rpki-client