Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5nMyH6eHCRI6YLJ8ZAgYS7gwcIo.roa
File: 5nMyH6eHCRI6YLJ8ZAgYS7gwcIo.roa (raw, json)
Hash identifier: +euiOjFFpKJFbELq/6SxajyGiP37VxSbPsohLJsz03s=
Subject key identifier: E6:73:32:1F:A7:87:09:12:3A:60:B2:7C:64:08:18:4B:B8:30:70:8A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A159C830953319F963FE5D8718432E0A9C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5nMyH6eHCRI6YLJ8ZAgYS7gwcIo.roa
Signing time: Tue 20 Oct 2026 14:47:34 +0000
ROA not before: Tue 20 Oct 2026 14:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218345
IP address blocks: 78.135.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:c8:30:95:33:19:f9:63:fe:5d:87:18:43:2e:0a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 20 14:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e673321fa78709123a60b27c6408184bb830708a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:bc:ae:37:e1:65:ec:10:9d:dd:77:eb:be:
83:99:2e:d9:f2:d5:e5:30:67:a0:5f:aa:21:2b:db:
72:a5:df:e1:0e:30:6a:01:4f:2e:7f:db:5c:b1:73:
8c:cf:84:4b:d4:79:6e:92:f0:b5:07:af:f9:46:69:
b3:59:62:11:3a:79:49:9d:e7:9b:80:78:57:c8:59:
3e:f5:2b:63:02:76:83:f8:5e:b7:53:10:21:72:4e:
40:89:92:68:a1:c8:68:71:fa:b5:f9:dd:3b:44:3a:
e3:de:bd:cf:16:95:4f:58:ab:f7:fc:9f:6d:2d:c3:
14:ad:c0:3e:cd:10:31:3c:c9:e4:47:95:87:d9:05:
8e:b9:fc:bb:12:3b:8b:fa:2e:21:f9:86:01:0d:8e:
1c:6b:82:92:b5:5b:a6:6b:b6:7e:de:30:44:50:e7:
28:25:6e:f3:33:21:6a:92:e1:44:8c:78:4f:ea:25:
1d:d3:9a:3b:62:ad:44:99:d2:ae:26:52:eb:8b:a3:
b7:ae:1f:6e:0a:8c:8d:30:49:d4:15:b8:27:c3:03:
02:d8:b9:0b:76:48:b2:85:15:40:5b:9b:d1:fc:25:
e9:aa:08:e5:fe:00:97:89:c5:15:97:b3:4f:c5:be:
7e:08:bb:a1:97:26:ef:e1:6b:99:dd:50:23:0f:50:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:32:1F:A7:87:09:12:3A:60:B2:7C:64:08:18:4B:B8:30:70:8A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5nMyH6eHCRI6YLJ8ZAgYS7gwcIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
00:80:ac:3f:5f:d0:af:21:e3:8e:d9:38:96:49:e5:53:1f:4c:
45:6f:0a:cb:c7:f9:fe:3e:b0:aa:f2:40:8f:56:a0:bf:bc:81:
0c:36:5a:23:74:4e:67:b9:63:cb:e7:9f:ed:f2:9a:e2:2d:f1:
31:72:ef:9c:d5:6e:bb:da:26:65:f3:6b:16:b1:88:4c:b1:c8:
d1:fa:9b:3c:18:f8:03:c3:89:1c:25:f5:c5:ec:3e:47:10:16:
c5:b7:99:32:0f:9a:23:75:f8:b6:80:a3:96:c7:c6:cb:63:5d:
4c:1f:2f:f6:8c:fa:da:f0:d5:4c:96:66:9a:eb:da:e1:01:58:
ef:7e:a2:3e:6d:6f:a1:7d:2c:52:2c:4d:d9:35:e9:d2:96:b2:
d1:ff:50:00:92:8f:e3:7c:64:e0:66:0a:3a:7c:d8:dc:10:54:
94:c3:b3:08:a6:51:85:65:1a:74:2d:a2:25:75:f4:17:ae:db:
e0:4f:f9:19:d3:a1:26:89:e6:be:13:59:1c:d6:a0:5f:1c:a2:
c6:a3:0e:a4:ea:a7:c5:4b:b8:6e:b5:04:7f:c5:68:ab:86:35:
18:b3:ea:47:2e:d3:cf:fc:76:ce:95:c4:27:45:d2:e2:b8:20:
86:58:1f:a2:4e:2e:cc:c5:67:50:b0:27:7a:7e:a0:79:a4:96:
74:3e:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:20 2026 by rpki-client