Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/cU0PtialT7blBe0g9qAA9y45m3s.roa
File: cU0PtialT7blBe0g9qAA9y45m3s.roa (raw, json)
Hash identifier: qQwsFpRRdUCSG6sBnp8cTf5HUrsZ8Vc8DYuoZkHY9Hk=
Subject key identifier: 71:4D:0F:B6:26:A5:4F:B6:E5:05:ED:20:F6:A0:00:F7:2E:39:9B:7B
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01A13025B179B49B7D916640464A5829CB11
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/cU0PtialT7blBe0g9qAA9y45m3s.roa
Signing time: Mon 12 Oct 2026 12:45:38 +0000
ROA not before: Mon 12 Oct 2026 12:45:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50801
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
141.98.47.0/24 maxlen: 24
194.120.126.0/24 maxlen: 24
2a07:6f40::/29 maxlen: 48
2a0d:2140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:25:b1:79:b4:9b:7d:91:66:40:46:4a:58:29:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Oct 12 12:45:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=714d0fb626a54fb6e505ed20f6a000f72e399b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:fc:ee:6f:85:c0:f9:d9:3b:34:25:ee:58:
12:d9:fd:e7:99:23:f4:3e:d0:da:f1:a5:77:ab:b9:
ee:55:88:d1:68:68:4a:d6:28:3c:4e:d5:3e:f5:fd:
1c:e8:00:b2:cb:2d:c8:b3:19:3e:ba:2c:c5:d4:fa:
5c:41:ba:c7:69:b2:df:c7:3b:4c:8e:39:7c:67:6d:
f0:6d:5f:8c:1a:89:b6:88:c5:9f:fc:eb:45:88:db:
99:19:75:44:e6:31:02:70:9b:69:31:c1:d1:eb:9c:
b7:9e:c5:ec:5b:ca:7c:0e:e5:80:43:e2:1c:91:c1:
aa:91:c1:37:bc:4b:53:a3:e5:47:93:60:73:74:a6:
9a:41:08:94:2d:1a:bb:4a:cf:bd:d2:17:b9:7e:51:
dd:84:8a:2b:9e:f4:87:b2:2c:92:6d:6f:e8:7b:63:
da:78:2f:3a:35:de:01:90:a9:38:79:48:49:75:42:
6a:fe:64:e9:ba:14:6f:33:bc:62:69:bb:9d:8d:41:
fe:49:a8:78:7c:9f:60:d2:fa:7e:c6:b4:22:5d:ac:
6a:54:e4:cb:93:cb:c4:79:22:2e:a8:ec:e8:cd:e0:
b7:30:4f:bc:10:82:94:4f:8b:31:4d:c3:be:c8:19:
4f:2f:88:fb:02:f8:00:39:5d:cd:c7:d4:d0:3f:36:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:0F:B6:26:A5:4F:B6:E5:05:ED:20:F6:A0:00:F7:2E:39:9B:7B
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/cU0PtialT7blBe0g9qAA9y45m3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
141.98.47.0/24
194.120.126.0/24
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
c7:b3:58:a8:4d:28:06:40:ad:a8:dd:ca:b4:97:8d:98:29:9c:
b5:fd:a0:bb:0e:4c:88:53:d2:81:bf:7c:18:f0:a2:60:33:11:
34:dc:37:8f:55:2e:ea:c4:eb:86:06:5d:72:c8:ea:8e:e3:64:
77:80:fd:c2:a8:ba:2f:ab:e0:81:c1:93:6f:44:8a:2b:ca:da:
95:64:4b:d9:1a:90:0b:3f:78:02:a2:89:58:af:55:0f:6c:5a:
43:8f:a9:09:c3:b4:a8:09:b2:ca:f4:24:5e:3c:b8:5b:85:e9:
98:e7:11:04:84:fe:35:51:ae:f3:ef:c1:51:f8:41:c8:42:f5:
00:4e:8e:f1:8c:c3:ed:04:6d:87:69:25:9f:4e:39:31:c6:bf:
71:73:ed:cd:cb:5c:d2:52:15:bf:aa:ba:7d:61:c4:1e:0e:a3:
c8:f0:8f:72:8b:98:c6:57:b1:6a:b3:00:d9:6e:36:2c:b4:1c:
a1:5b:3d:11:74:03:43:21:39:39:cc:ae:42:f3:22:07:4a:24:
e4:76:fe:5b:41:a0:29:5e:60:47:a8:36:0e:90:8f:53:20:70:
a3:bc:dc:3e:e3:93:b2:c7:ba:c6:1f:73:da:c5:7a:7e:76:80:
0f:5d:81:30:04:fb:3d:14:fa:15:a3:d6:b1:61:ee:4a:59:10:
04:36:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:46 2026 by rpki-client