Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/gTjkmsxToYN0AtLwcjRCH2zWi0o.roa
File: gTjkmsxToYN0AtLwcjRCH2zWi0o.roa (raw, json)
Hash identifier: 4ZK61blIRdEFKBG4G94VCjN5FRAy3ckAv14+S+d+iMM=
Subject key identifier: 81:38:E4:9A:CC:53:A1:83:74:02:D2:F0:72:34:42:1F:6C:D6:8B:4A
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A16313D8F09A9143C514D0DA260EB81999
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/gTjkmsxToYN0AtLwcjRCH2zWi0o.roa
Signing time: Thu 22 Oct 2026 10:06:47 +0000
ROA not before: Thu 22 Oct 2026 10:06:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207970
IP address blocks: 5.181.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:13:d8:f0:9a:91:43:c5:14:d0:da:26:0e:b8:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 10:06:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8138e49acc53a1837402d2f07234421f6cd68b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:6f:7a:53:a8:57:07:f1:47:5e:1a:8c:82:
10:e0:59:33:3c:64:30:07:04:4d:80:b8:d8:52:f2:
db:fa:51:3c:05:65:9e:6c:85:16:58:98:40:ad:2d:
ae:01:9b:c9:c0:3e:b0:3c:0b:35:46:5c:f5:1e:dd:
84:41:78:13:2c:a4:1e:41:8a:42:cd:dc:3f:3a:9a:
41:7a:a6:28:13:6a:81:04:12:68:54:c3:77:ab:54:
72:b6:ca:45:24:ce:2e:cb:8c:1c:1f:2a:c0:f1:b7:
ea:70:fa:7f:45:bf:9a:5d:96:47:03:92:dc:f1:7d:
9d:13:c9:e4:6c:04:25:9a:65:f5:52:f9:3e:52:95:
bc:cc:95:25:7f:ae:86:b2:50:6b:e2:85:93:09:99:
4a:01:18:88:6c:68:e3:15:1a:4a:09:14:cb:e9:38:
5c:cd:b5:a5:dc:b4:3c:aa:06:73:65:44:92:4d:c2:
9a:3f:a6:da:12:82:19:45:4e:48:b7:a1:a0:ea:5a:
c4:7a:da:b6:7b:dd:54:85:5c:20:bf:39:9c:55:b1:
97:55:2d:55:99:5d:e6:87:41:29:2f:35:f0:d9:1c:
fe:43:2f:14:1a:95:6e:34:f0:5a:a5:54:0f:b8:fd:
73:f8:fa:7c:6c:70:1f:ec:87:cc:d8:64:00:77:93:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:38:E4:9A:CC:53:A1:83:74:02:D2:F0:72:34:42:1F:6C:D6:8B:4A
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/gTjkmsxToYN0AtLwcjRCH2zWi0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3c:f0:fa:b3:a6:b1:a8:73:4c:93:1d:ac:8b:6e:04:d4:e5:
ba:09:f9:db:db:3d:d3:9b:6f:bd:71:1e:53:d1:e6:91:c5:5f:
7f:7a:2c:77:96:8d:40:dd:e9:0d:10:7c:88:f8:9c:3a:3e:c4:
8c:6c:9d:22:fe:6c:bd:04:7d:3e:65:38:0b:91:54:02:fb:7d:
5e:7e:ae:4b:e0:46:91:1a:50:81:e9:bc:cd:95:b4:c5:db:c6:
07:ec:bb:c6:59:d1:3b:77:08:de:0d:ac:16:84:b7:b4:3c:ed:
01:7f:be:af:bc:da:ab:e7:fc:62:40:9b:e7:82:53:53:92:f6:
fa:70:b6:58:bc:88:bf:52:8e:26:e3:7d:66:77:4d:ce:49:c6:
74:c7:01:8d:03:79:85:3a:3d:2c:1a:ff:be:ff:0c:fb:83:5d:
43:b9:db:d0:76:db:02:81:b0:88:d8:fd:c5:13:9c:00:2e:bb:
dd:64:ed:89:bb:46:11:d5:97:36:71:eb:09:a0:26:05:3d:53:
ac:6c:46:b9:00:5f:8b:c3:c7:b7:2f:25:49:b2:9a:63:9c:50:
35:a5:61:62:b8:e2:1d:eb:c1:c8:12:60:17:4a:e7:2c:47:e6:
8c:c0:ad:60:31:b7:cf:1f:c8:4f:57:0f:69:71:e1:0e:8c:57:
69:44:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:15 2026 by rpki-client