Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1D9k8_zt5tU5xEXxx_nTvNFR14E.roa
File: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (raw, json)
Hash identifier: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=
Subject key identifier: D4:3F:64:F3:FC:ED:E6:D5:39:C4:45:F1:C7:F9:D3:BC:D1:51:D7:81
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019F08609ACAEE3EF2816D7F284112C878F2
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1D9k8_zt5tU5xEXxx_nTvNFR14E.roa
Signing time: Sat 27 Jun 2026 09:19:36 +0000
ROA not before: Sat 27 Jun 2026 09:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 5.157.21.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:60:9a:ca:ee:3e:f2:81:6d:7f:28:41:12:c8:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jun 27 09:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d43f64f3fcede6d539c445f1c7f9d3bcd151d781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:36:72:85:40:01:31:75:49:2f:29:13:dd:
6b:33:e0:e6:5e:d4:94:44:57:04:0b:ef:ce:65:82:
f3:d3:27:83:36:8b:ac:c9:a9:9e:f8:ef:56:52:3b:
bf:c6:a6:8c:f7:b2:74:ee:ae:1b:12:26:96:6e:24:
ff:b4:00:07:45:1d:31:c1:a4:94:cc:91:90:a7:ed:
55:b1:93:f7:39:85:ea:c6:24:f9:54:bf:b8:b8:b0:
b3:74:bf:43:00:c3:50:1e:9d:b7:97:d3:10:47:83:
4e:9e:2d:5d:ce:3b:1e:05:fb:9f:96:80:57:a7:fd:
34:4a:1a:4f:13:ea:63:b7:19:a9:f0:3f:69:19:8b:
aa:76:0b:72:6d:8c:84:23:7c:a3:79:3e:eb:44:94:
da:d5:09:30:ca:41:59:10:42:82:12:db:b5:71:d4:
04:4b:51:36:8c:bf:3d:82:0a:2e:cf:14:aa:a8:dd:
36:1c:74:6a:55:f8:4f:78:06:93:e7:88:c7:2d:dc:
d2:77:fa:46:50:47:68:96:f0:87:be:1d:d2:ca:39:
c8:b4:79:37:83:e0:e1:a4:a0:d1:e8:f8:69:9b:82:
1a:c7:e8:e1:58:a1:6c:99:e9:7e:85:4e:33:62:53:
f8:f0:c4:f5:43:0e:ab:5b:be:e6:d8:6a:b1:14:38:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:64:F3:FC:ED:E6:D5:39:C4:45:F1:C7:F9:D3:BC:D1:51:D7:81
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1D9k8_zt5tU5xEXxx_nTvNFR14E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.21.0/24
104.160.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:66:8b:e2:54:b3:00:da:f5:33:29:7d:76:bf:96:4a:e7:b7:
b0:d2:1b:2f:80:a7:85:f7:15:f1:16:df:74:80:57:ed:ec:02:
ce:45:bd:90:45:7c:47:05:c1:00:59:66:28:ba:31:7f:f2:09:
f4:63:88:f2:e9:f9:ad:4a:69:4f:17:7c:96:21:a0:2e:0a:32:
74:00:64:6e:21:c2:81:57:f7:9f:e2:53:03:c9:52:7a:a2:6c:
a3:8f:53:f6:ff:2d:4c:33:5e:1c:61:ef:74:8b:5a:75:f9:94:
64:fe:b6:aa:97:ec:e3:dc:56:48:8b:35:b1:78:fd:de:89:ed:
99:92:a5:de:8d:c9:5a:be:62:6d:63:26:b4:89:e0:79:e7:1f:
a4:4e:17:eb:4d:9c:cd:b6:34:ce:7c:e2:8d:55:67:72:a4:f6:
19:08:63:95:9c:3d:79:38:73:d2:22:b8:ca:80:ba:6f:56:87:
c9:d6:2e:92:58:18:07:2a:90:46:ce:b1:97:cc:90:0a:26:e6:
9d:4c:c5:2b:25:d9:6b:e7:d3:14:3c:b7:62:48:3a:6b:e8:e5:
92:9e:fd:ff:7f:82:7a:6a:1e:5a:15:71:7c:46:1a:59:fa:45:
f2:e5:3f:a3:86:6e:42:6e:e6:ec:df:04:d4:71:24:bc:9d:9a:
f2:3e:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:34 2026 by rpki-client