Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pViHmwqQeVqQnj5hkym3ThYCYhU.roa
File: pViHmwqQeVqQnj5hkym3ThYCYhU.roa (raw, json)
Hash identifier: rbWNEzeG5z5UiJBRWTWbbSTYvlpCEEASp5X1FRCLxnc=
Subject key identifier: A5:58:87:9B:0A:90:79:5A:90:9E:3E:61:93:29:B7:4E:16:02:62:15
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A0331D678CE2F2F1EB56AB5E5003E742D3
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pViHmwqQeVqQnj5hkym3ThYCYhU.roa
Signing time: Mon 24 Aug 2026 09:32:40 +0000
ROA not before: Mon 24 Aug 2026 09:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 153.79.174.0/24 maxlen: 24
207.89.22.0/24 maxlen: 24
207.89.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:1d:67:8c:e2:f2:f1:eb:56:ab:5e:50:03:e7:42:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 24 09:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a558879b0a90795a909e3e619329b74e16026215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:5b:1c:11:88:76:1b:0b:9f:a9:28:d6:e2:
e4:93:f1:42:6e:93:40:d2:2f:fa:5d:a2:6d:99:bd:
cc:c2:23:6b:fd:2a:fb:83:e3:53:d2:8e:03:6f:01:
e6:20:f4:60:5a:a7:3f:ca:3e:28:80:75:8d:10:1e:
0f:14:d8:22:49:0e:8a:79:56:5c:1f:25:9b:a8:04:
14:69:56:0e:51:fc:f3:13:50:42:08:45:fa:34:14:
43:22:0d:39:f6:4f:f3:aa:92:26:e1:7d:7a:b0:d0:
a4:fb:20:cf:fd:59:11:71:69:a2:b1:df:fd:97:73:
85:12:ec:90:d8:ae:51:eb:e4:8d:69:3b:4e:f1:f8:
f3:1b:b0:64:7e:00:b0:39:f3:8b:2e:b3:54:f7:8b:
00:eb:0f:8a:0d:ae:63:e3:0b:66:44:f5:cf:60:e6:
78:7b:e6:f1:3a:eb:01:14:a2:68:8d:64:ba:df:85:
24:32:58:da:a1:5f:f5:a9:52:7a:b4:7d:ec:24:ae:
c0:3b:f6:26:97:23:0a:dd:6a:ae:aa:f7:6e:88:73:
ca:c9:f7:3c:68:d8:3a:cb:4e:52:28:79:12:e3:47:
af:1a:33:86:8f:38:0d:2f:a8:ab:1e:41:3a:fe:15:
4b:8a:ba:53:cd:27:23:12:db:80:64:79:d8:22:c9:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:87:9B:0A:90:79:5A:90:9E:3E:61:93:29:B7:4E:16:02:62:15
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pViHmwqQeVqQnj5hkym3ThYCYhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.79.174.0/24
207.89.22.0/23
Signature Algorithm: sha256WithRSAEncryption
36:26:75:5f:1b:b6:5c:0e:9a:72:dd:b5:d1:11:85:fa:41:6a:
61:c2:d2:9e:83:2b:dc:2f:d6:dc:b0:bb:50:88:ee:b7:d4:fc:
fa:22:79:fb:8f:a8:3a:cd:3c:cf:65:42:f8:e7:75:36:40:ef:
5f:a6:b3:61:1e:78:7c:82:3e:9c:fa:2e:83:65:cf:61:f4:12:
5d:ae:56:75:ca:3f:0c:16:67:fc:c0:60:19:04:89:e7:7d:a4:
62:d8:e8:f6:d7:9e:b2:f4:7c:a0:a6:ea:98:3c:b2:8d:ac:27:
c8:13:17:a8:c3:91:3a:c9:b7:80:da:4a:8f:78:9b:eb:db:40:
7d:51:50:8b:7d:b1:a2:85:cd:ec:d6:1e:68:d3:a8:b0:4b:a2:
89:21:3d:06:6f:26:38:f8:50:d2:e6:06:7e:9b:e9:5c:a1:11:
9d:c6:b1:75:23:cc:45:96:62:4a:64:67:13:2c:6f:eb:10:16:
e6:b7:b0:4b:d7:4f:7c:37:7a:1c:64:37:40:a9:73:e7:4a:c6:
72:60:ee:c6:f5:a6:ea:fd:4b:9b:8d:4b:b5:4c:ae:2e:ef:29:
4d:4b:25:c3:a1:47:03:ad:5f:46:23:b3:17:26:9a:3b:0d:c4:
e2:10:25:65:cc:9c:59:11:4d:c6:f7:3c:d8:b1:1e:92:2e:fd:
00:14:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:47 2026 by rpki-client