Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/rqm1V5tbsI8BVPLwQqMpU9HsTvM.roa
File: rqm1V5tbsI8BVPLwQqMpU9HsTvM.roa (raw, json)
Hash identifier: kK5Lre4ke8T7RVSthZIaXfJkjjEm07UzsHJnItRj210=
Subject key identifier: AE:A9:B5:57:9B:5B:B0:8F:01:54:F2:F0:42:A3:29:53:D1:EC:4E:F3
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01A0E14425019647DB4B740E6288863BD7B1
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/rqm1V5tbsI8BVPLwQqMpU9HsTvM.roa
Signing time: Sun 27 Sep 2026 05:08:54 +0000
ROA not before: Sun 27 Sep 2026 05:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 5.159.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:44:25:01:96:47:db:4b:74:0e:62:88:86:3b:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Sep 27 05:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aea9b5579b5bb08f0154f2f042a32953d1ec4ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:ae:19:98:cf:d2:cd:17:bf:34:a2:74:09:
2d:a6:14:24:ea:00:b8:28:f5:55:0b:9f:d0:2e:ce:
ae:e6:09:c7:4b:e5:91:2c:6e:73:56:03:13:83:ef:
10:22:9b:7e:da:a9:8d:a9:65:a9:a3:26:5a:13:bb:
cc:86:79:36:62:a4:84:8e:92:fa:69:d7:6e:a8:cb:
fb:f9:68:c2:8a:f2:65:3a:ac:67:2c:6d:ba:ef:15:
ee:e0:dc:ef:46:cc:b0:02:bf:11:c3:c3:c1:2d:99:
b9:8e:f4:62:f3:cc:38:b2:38:f0:97:d9:62:59:9c:
89:9b:93:93:16:dc:ae:7b:8e:6a:e8:97:dc:e0:95:
5b:d8:7f:92:7b:bd:11:b7:27:60:9c:ec:9f:0f:3d:
59:fc:9d:08:36:15:03:cf:17:d8:c5:0f:df:f0:73:
4d:df:f4:fb:c8:14:f3:e8:9b:3f:d6:e4:22:29:b4:
0a:35:08:74:5c:db:8b:d8:12:f7:6a:2c:27:fb:ba:
19:a0:06:e9:c0:6d:eb:5a:43:c3:86:69:28:e6:4e:
0f:ab:0f:f6:97:77:c8:72:06:8d:3d:4b:fa:da:2b:
92:bf:ad:f2:10:65:6f:ae:46:ca:69:48:7b:e6:fd:
d5:b8:40:04:8c:61:98:0d:3a:ff:7f:5c:74:84:c6:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:B5:57:9B:5B:B0:8F:01:54:F2:F0:42:A3:29:53:D1:EC:4E:F3
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/rqm1V5tbsI8BVPLwQqMpU9HsTvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.54.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e9:dc:7c:7a:3a:a4:7f:a3:11:84:54:aa:bd:b3:44:3f:d9:
28:1f:87:57:35:ce:3e:55:32:1e:50:bb:f8:08:ba:7a:64:7d:
62:37:0d:2b:00:e4:10:37:4a:78:9d:29:26:58:1d:6c:4f:7a:
b4:66:da:46:08:63:e1:a3:d1:82:b2:f9:65:99:ab:b3:a1:4d:
6d:99:3d:75:5a:53:c0:1f:a5:11:eb:2f:8c:8c:7b:f7:8d:27:
67:b5:0e:19:41:2d:96:39:eb:24:05:4e:bc:ac:34:6d:97:93:
87:74:2d:35:ac:77:81:a5:c3:05:07:49:fa:31:ca:ff:7f:f4:
08:5e:c4:a1:a9:bd:c8:c9:0b:d4:72:57:52:9f:8d:44:da:39:
04:79:eb:d7:19:80:aa:3b:52:54:ea:41:1f:dd:80:ec:4b:0a:
ef:b3:12:fa:d2:1b:2c:69:0f:0b:33:d0:bc:bc:64:64:1c:a1:
94:d5:7b:35:d1:03:6b:21:b1:1a:7d:97:4d:47:63:c3:5d:2e:
be:b3:3f:ff:78:17:d6:08:87:47:77:24:c3:bf:52:53:00:1a:
33:25:a1:12:37:d6:40:03:f1:c7:1e:44:3e:51:1e:9d:90:e9:
75:c6:56:e6:8c:3f:78:c3:27:62:8d:35:9b:70:0b:17:10:75:
3a:54:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:48:51 2026 by rpki-client