Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/5TYhGp_kIGX1aC5SowRSds_cO7g.roa
File: 5TYhGp_kIGX1aC5SowRSds_cO7g.roa (raw, json)
Hash identifier: r0v8wy6PUphoahBNOqyXh6UQXpTAKY3QGCRRPROhVEU=
Subject key identifier: E5:36:21:1A:9F:E4:20:65:F5:68:2E:52:A3:04:52:76:CF:DC:3B:B8
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A16ABC94491F59B91EF267374794B66821
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/5TYhGp_kIGX1aC5SowRSds_cO7g.roa
Signing time: Fri 23 Oct 2026 21:48:25 +0000
ROA not before: Fri 23 Oct 2026 21:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 45.143.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:bc:94:49:1f:59:b9:1e:f2:67:37:47:94:b6:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Oct 23 21:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e536211a9fe42065f5682e52a3045276cfdc3bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:15:a8:b0:a0:66:a1:d0:40:08:33:f7:26:
06:cc:19:26:71:52:e8:1e:c2:9d:e2:ad:e3:30:49:
0e:8a:30:8d:d5:31:61:48:df:21:b1:fd:e8:a5:97:
4f:64:e0:d0:88:bb:8c:4d:74:69:87:50:a1:f4:aa:
35:56:8f:fa:04:34:67:2f:2a:50:9b:de:56:d2:f9:
62:5f:8f:19:ea:19:8e:43:0c:35:7c:26:c7:9a:0b:
5a:10:54:2d:85:a1:14:02:60:da:3e:cf:7e:39:1e:
e2:fa:00:b0:6d:42:f3:3e:74:0c:7a:1f:bf:d6:3a:
03:11:97:16:db:a3:84:4a:3e:4a:47:e5:44:6c:38:
9a:45:23:fa:86:a4:bd:5d:cb:bc:88:e7:9a:6d:23:
25:cf:a4:16:4e:98:63:6c:78:18:b2:62:e3:d8:26:
41:ea:65:cc:8d:0a:8f:83:b7:06:f5:40:c8:12:4a:
f3:4a:28:a1:4b:f0:a5:5e:06:36:6b:a6:79:44:07:
be:3e:a2:cc:e8:9d:07:db:f9:ae:33:53:e4:50:fa:
cc:9c:7a:9f:70:44:87:cc:40:cf:54:87:e0:09:90:
df:9c:d1:2f:db:2e:a7:32:f2:a6:9e:7f:2e:eb:f3:
44:50:ba:e4:93:99:a5:eb:a0:8c:d4:3f:23:65:7b:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:36:21:1A:9F:E4:20:65:F5:68:2E:52:A3:04:52:76:CF:DC:3B:B8
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/5TYhGp_kIGX1aC5SowRSds_cO7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.8.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bf:83:21:bb:a2:a3:cb:aa:c0:e3:03:4a:5c:5a:e5:3a:65:
f9:f3:86:2c:30:ac:4c:a9:ee:b7:6d:85:03:6b:d6:4b:5a:04:
a0:ab:a1:d3:f4:24:c7:be:73:10:2a:75:c9:1f:c8:c0:c8:ce:
49:01:09:60:fb:c7:f7:23:0a:00:a4:6f:ea:e3:9d:a4:97:d5:
c2:25:c7:1b:96:6a:79:49:dc:78:fc:3d:a5:0c:22:b4:d3:58:
66:80:8a:ae:37:87:42:77:d8:27:52:31:32:21:7c:59:52:d3:
3a:57:30:77:c2:d5:33:3a:e2:bd:18:cd:6d:fe:bf:6d:c7:73:
82:c4:f7:a0:06:84:40:9b:6e:66:b8:31:0f:83:d7:d4:52:6f:
ad:93:a5:7d:ee:9e:2d:2f:b7:21:dd:c8:a6:01:53:80:36:16:
42:09:39:eb:0f:3c:b1:91:e8:ad:95:3b:a8:72:1e:8b:9e:ea:
ae:c0:e5:30:e8:19:11:b6:db:8a:f9:c8:0b:d5:d5:05:5a:da:
e7:17:69:50:19:96:c7:20:dd:26:29:2a:f4:c5:54:e8:dd:e8:
ab:97:e1:de:e3:1d:e9:1e:e6:41:4d:91:82:1f:fa:f4:da:28:
31:a3:48:27:80:17:f8:0a:da:4f:08:3c:83:5e:41:da:67:32:
21:ba:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:19 2026 by rpki-client