Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa
File: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (raw, json)
Hash identifier: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=
Subject key identifier: AC:59:51:91:91:19:77:96:75:25:23:1B:0B:EF:31:48:B8:D3:8C:A5
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019F08609AFE514007BF5C1A99E9973708E2
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa
Signing time: Sat 27 Jun 2026 09:19:36 +0000
ROA not before: Sat 27 Jun 2026 09:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 5.157.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:60:9a:fe:51:40:07:bf:5c:1a:99:e9:97:37:08:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jun 27 09:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac595191911977967525231b0bef3148b8d38ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:54:dc:2f:fd:6c:20:03:06:a2:f7:26:8e:
47:d8:d4:e4:ad:c5:b4:5c:b4:13:cc:0e:fb:38:5e:
4a:68:b4:fa:91:65:a6:57:20:90:d0:c3:3b:da:ca:
1c:c9:8a:f7:9e:df:33:e9:d0:7c:db:c2:f4:5d:cf:
81:80:b6:bf:1f:aa:ab:6e:14:e2:82:7b:0e:ae:92:
28:37:d9:06:f8:a3:4d:ec:92:45:0c:d7:5f:05:9f:
e3:92:51:c1:9c:68:66:fe:7d:d3:8a:3d:25:b1:5d:
ae:a6:00:5f:b8:f4:a6:9d:32:17:9b:7d:7c:4d:8e:
9c:34:ee:84:c5:72:29:df:6e:bc:5f:e7:f2:4b:e6:
fc:75:b9:c4:ba:c2:b8:db:c7:1b:a8:a6:31:87:13:
fa:8e:93:f6:2f:97:d3:41:e0:64:ff:40:f0:fe:e7:
dd:ac:f2:b2:e8:8c:d6:ca:58:f7:d5:b4:a4:d7:1c:
99:d6:d3:d6:a0:60:72:bc:5c:10:f2:14:3e:f1:57:
35:5e:6d:89:ed:29:78:00:f2:d8:3d:da:e0:f1:61:
c8:a4:0b:6e:97:ab:7b:f8:b3:ae:c0:e9:37:61:ce:
6f:8f:54:87:79:55:a7:94:aa:72:b5:cb:7d:be:67:
7c:8b:af:15:3d:30:98:b4:a6:a6:68:5f:6d:ae:1d:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:51:91:91:19:77:96:75:25:23:1B:0B:EF:31:48:B8:D3:8C:A5
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.21.0/24
Signature Algorithm: sha256WithRSAEncryption
50:41:24:27:70:e7:79:9a:ea:5a:0e:2c:17:80:08:24:ee:3f:
fb:9b:e7:95:3e:5d:6a:27:27:80:0f:47:0a:fd:38:e6:2a:0c:
ae:2d:7b:94:f5:30:20:63:ae:34:ee:c0:2f:b1:41:57:d8:60:
c9:30:73:f3:a0:41:ce:73:ca:73:9d:65:cd:53:89:d5:3a:75:
dc:31:25:a3:9a:ed:cf:8c:2e:77:4a:08:7b:c0:27:ab:ea:2c:
0f:a2:3b:c7:d8:d2:4f:81:b2:3c:9f:8e:80:14:06:5b:08:d8:
44:b8:cf:be:2c:a1:73:d2:bc:34:95:eb:b3:7a:dd:60:6f:f5:
d6:32:84:31:46:e5:55:fe:19:3f:87:1a:9f:c7:44:0d:28:b1:
0e:aa:e4:45:35:cb:cd:69:4f:7f:78:7e:9c:50:06:29:98:6a:
7f:de:c7:e0:df:3a:b9:3a:64:70:73:e7:3a:bc:fa:a7:09:87:
ee:cb:36:91:ec:48:b8:d4:1b:3f:7f:86:f2:72:56:09:d1:17:
f1:39:87:1b:4c:e4:5c:ee:c6:8f:22:6c:a0:48:e3:6b:62:fa:
9c:d7:cb:91:06:fd:82:1b:b5:5f:fc:58:96:6a:e2:ae:01:47:
83:f9:5e:df:de:0c:1c:c0:c4:11:31:cd:6c:1e:60:a5:17:4f:
40:c2:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:47 2026 by rpki-client