Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/g5-d0sIhCjya5BkPK_BBZelwOTI.roa
File: g5-d0sIhCjya5BkPK_BBZelwOTI.roa (raw, json)
Hash identifier: tWfANUUDLfQiLqsZM78kdlFpbJmN6uw/gW8mi/94DKs=
Subject key identifier: 83:9F:9D:D2:C2:21:0A:3C:9A:E4:19:0F:2B:F0:41:65:E9:70:39:32
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01A191F07E20D484A777B754DBF681C079B9
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/g5-d0sIhCjya5BkPK_BBZelwOTI.roa
Signing time: Sat 31 Oct 2026 12:30:19 +0000
ROA not before: Sat 31 Oct 2026 12:30:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.144.154.0/24 maxlen: 24
5.144.155.0/24 maxlen: 24
78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.100.0/23 maxlen: 23
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:f0:7e:20:d4:84:a7:77:b7:54:db:f6:81:c0:79:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Oct 31 12:30:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=839f9dd2c2210a3c9ae4190f2bf04165e9703932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:ad:7b:11:00:bf:75:62:b5:66:d9:a6:98:
4c:2d:35:05:47:38:e7:18:1f:9a:0b:f0:02:7c:8f:
c1:eb:90:c8:24:aa:fc:a2:0a:21:cc:77:13:c2:1a:
cb:5d:da:23:72:59:6d:55:03:fa:fa:a4:60:b5:0e:
11:6e:14:50:df:61:d3:f9:88:be:0c:ec:b7:b8:7d:
bf:53:95:de:9b:0a:e7:62:e7:9a:35:4c:07:51:c4:
96:f2:30:96:f9:93:9c:48:7f:49:fb:43:a9:1d:a7:
ba:08:3b:e4:0b:43:a7:95:be:75:24:a9:fb:64:8a:
82:78:91:3e:80:ee:f8:9d:05:33:01:3f:11:3a:ae:
8c:82:7a:7f:47:10:10:67:d7:40:e8:16:fc:61:19:
85:af:26:e6:d3:8c:72:c2:cb:fe:5f:76:f3:6f:d0:
34:69:a8:0f:b5:c8:5d:24:2e:a0:c2:62:bf:e3:cf:
e3:a9:64:84:8a:c1:74:64:02:e4:1c:c9:d1:bf:50:
de:58:6f:f2:4e:59:62:d8:2e:9d:12:64:f7:91:38:
d5:93:29:6a:70:4f:84:2e:1b:86:88:92:f1:3d:e7:
2e:02:41:d4:27:86:84:19:4a:25:3e:0c:78:93:5e:
f8:13:89:2b:99:ff:d6:f9:1f:68:d9:66:16:eb:c5:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:9D:D2:C2:21:0A:3C:9A:E4:19:0F:2B:F0:41:65:E9:70:39:32
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/g5-d0sIhCjya5BkPK_BBZelwOTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.154.0/23
78.143.252.0/23
79.135.100.0/22
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:26:91:62:4d:51:df:25:01:26:d7:d0:3d:a4:e9:a6:3a:91:
23:a2:5d:c8:d5:21:41:6b:cd:3d:e7:91:a5:50:d7:33:2d:5c:
38:1e:23:79:8e:de:0a:bb:54:19:d3:dc:b2:3e:02:1e:24:76:
b6:2e:07:65:2d:8f:2c:01:0a:8c:a6:14:7e:42:26:1c:ba:1a:
b1:aa:32:98:d6:7f:ef:fa:e3:52:93:d3:f0:fa:c8:65:56:f4:
9d:e8:cf:75:43:83:f9:d4:80:ba:5c:3d:cb:63:23:42:cd:40:
68:c5:a7:f5:b8:c2:91:7c:2d:f5:ec:b8:c4:2c:4a:bb:2a:d4:
1a:c7:6c:af:4a:f9:af:58:13:df:3b:c3:7a:32:aa:bf:5e:80:
c2:37:74:ba:f0:f4:5f:d0:c1:52:12:42:f3:f2:00:b2:d9:33:
ab:aa:38:20:35:11:6f:4a:ef:99:4b:27:3e:fa:bf:7c:42:1d:
fd:27:0d:1d:1c:fa:5b:99:b7:7b:d7:88:33:1b:f4:f7:f4:a3:
9a:39:59:59:76:98:35:40:24:7e:e3:3d:be:4d:ef:1d:1a:e7:
96:d8:c3:c5:76:8b:57:fd:e3:ab:4d:99:59:50:6d:c7:27:40:
14:9c:27:e0:51:fd:26:5e:c1:56:4c:67:9c:ee:94:31:44:a8:
23:42:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:14 2026 by rpki-client