Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/bM71cryNLqDLi-ELPu481fSpeBA.roa
File: bM71cryNLqDLi-ELPu481fSpeBA.roa (raw, json)
Hash identifier: 3Xz3nEMwoJWizfCQTyZZHoKYJqJtKSQZLvpMJUW4vW8=
Subject key identifier: 6C:CE:F5:72:BC:8D:2E:A0:CB:8B:E1:0B:3E:EE:3C:D5:F4:A9:78:10
Certificate issuer: /CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Certificate serial: 019FFEFAA8298CA35BB20B1D7F33994BF5D5
Authority key identifier: C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/bM71cryNLqDLi-ELPu481fSpeBA.roa
Signing time: Fri 14 Aug 2026 06:34:27 +0000
ROA not before: Fri 14 Aug 2026 06:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48096
IP address blocks: 5.101.72.0/24 maxlen: 24
5.101.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:fa:a8:29:8c:a3:5b:b2:0b:1d:7f:33:99:4b:f5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Validity
Not Before: Aug 14 06:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ccef572bc8d2ea0cb8be10b3eee3cd5f4a97810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:63:b4:bd:0a:c1:e3:4e:a4:ab:bf:52:5a:
cd:b0:b2:ec:15:30:fe:db:b9:45:18:0d:61:ec:5c:
08:3e:3c:23:40:31:68:2b:30:cb:50:05:a6:c6:cf:
c6:e9:57:46:ea:29:85:96:36:17:5c:6b:bd:cf:38:
37:3c:b3:9e:79:5b:51:b1:1c:f4:6b:21:f2:91:cf:
2f:c7:8c:eb:ee:6f:b9:2b:39:36:74:8b:ce:d2:4c:
dd:f6:5c:44:7e:dd:3d:b1:b8:f7:f4:f5:6e:74:d5:
8e:8d:5b:56:bc:36:a8:56:c0:d5:dd:40:cb:75:00:
aa:ea:8b:7d:53:14:91:00:7c:5e:6f:3a:ba:ec:da:
22:a2:df:fb:ac:f1:c7:ec:34:f1:58:56:ea:9d:a2:
01:4e:8a:c8:98:c4:73:63:2a:12:a5:94:c6:fd:ad:
94:82:f6:b7:63:b3:8d:fe:2e:f3:64:eb:9e:9c:3e:
06:4a:4e:78:19:82:97:c9:5c:1e:e4:5a:1f:46:bf:
0b:56:55:63:95:ce:0c:71:1e:3a:53:29:2d:36:bc:
23:93:83:a0:fd:6d:03:fb:84:2e:84:14:36:a7:2c:
72:ae:18:1d:b2:fb:cc:9e:6d:2c:e0:43:9d:da:cf:
be:1d:95:0f:eb:c9:6d:42:10:1b:2a:f7:10:72:7a:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:F5:72:BC:8D:2E:A0:CB:8B:E1:0B:3E:EE:3C:D5:F4:A9:78:10
X509v3 Authority Key Identifier:
keyid:C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/bM71cryNLqDLi-ELPu481fSpeBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.72.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:6d:76:4e:aa:3e:19:a8:d1:d1:1e:bd:fb:dc:7d:f9:f0:6a:
b4:14:35:6f:9a:05:9d:93:02:a0:b2:57:6f:c7:85:a7:02:ca:
fb:26:b7:17:88:4a:ba:a7:e2:67:02:5f:48:96:17:55:76:94:
a9:f7:14:ec:ef:00:c3:b2:6d:7d:b6:70:0b:63:00:4f:80:2d:
04:40:02:78:84:17:bc:4f:ca:cc:b1:b8:b0:5d:d7:8a:31:8c:
57:c3:3d:9c:17:0c:a3:6c:40:a6:1c:a7:c1:e3:78:74:6c:b2:
fb:ff:80:a5:75:71:41:38:58:be:e9:f8:3d:b7:a7:43:0e:bf:
81:b8:3a:36:8f:48:51:e1:0f:9b:ea:e9:c1:e1:d7:68:ed:96:
9c:72:36:44:27:e6:9b:27:62:c9:9e:ca:da:5a:2b:6a:39:8a:
7f:c6:0d:10:f6:35:de:1f:cc:b6:ec:27:5c:54:d1:64:c4:90:
b3:67:b5:ef:ae:1d:a6:14:bb:d7:c3:df:a5:91:16:ca:c3:84:
10:9f:c7:e3:73:06:55:ef:ab:02:3c:3d:18:c2:12:e7:8f:b6:
81:3e:9c:04:53:44:89:78:42:01:41:58:60:bf:ee:06:58:4f:
fb:c2:67:1f:3e:13:df:cb:66:84:c8:9c:64:36:a0:8b:93:00:
40:7d:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:17 2026 by rpki-client