Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/TO04RJHmQyWwy-ntPu8QYP1Zbmk.roa
File: TO04RJHmQyWwy-ntPu8QYP1Zbmk.roa (raw, json)
Hash identifier: j5n8EovTq64FKkRbirnSvNu60GTZOM4BvTUt/RxkPGI=
Subject key identifier: 4C:ED:38:44:91:E6:43:25:B0:CB:E9:ED:3E:EF:10:60:FD:59:6E:69
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01A15378A9CAD1FBBCE0CA54AC35FBF523CA
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/TO04RJHmQyWwy-ntPu8QYP1Zbmk.roa
Signing time: Mon 19 Oct 2026 09:22:58 +0000
ROA not before: Mon 19 Oct 2026 09:22:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:5f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 18:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:78:a9:ca:d1:fb:bc:e0:ca:54:ac:35:fb:f5:23:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Oct 19 09:22:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ced384491e64325b0cbe9ed3eef1060fd596e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:86:16:35:71:a2:7f:df:d0:fe:dc:5e:14:
f3:e4:24:b0:d2:ad:c3:a2:6a:89:e6:5b:75:2b:7d:
33:ab:37:68:64:e6:a7:dd:61:e8:c8:a5:5b:51:de:
fa:19:cd:40:8e:66:a0:e6:e0:71:a8:3c:af:96:7c:
89:65:9c:34:ee:fc:2c:34:d4:3d:95:8c:65:f1:ea:
1b:3c:63:f8:90:a7:06:1e:24:60:78:bd:c3:ef:93:
ed:b4:98:a1:7f:6d:57:d4:6e:d1:21:89:27:a5:76:
1f:67:b3:8e:96:3a:92:df:9f:a5:19:66:b1:d2:1a:
9c:ce:f0:c6:b4:4a:72:b5:1e:f1:df:b2:ce:12:16:
15:c7:b2:74:73:71:3e:4c:82:a8:c9:1c:e7:2f:14:
40:f2:9d:af:83:89:3e:83:02:95:9e:b2:84:2e:9d:
8b:e0:fa:9b:a6:3d:3b:95:41:96:53:e2:56:45:32:
08:63:52:20:4c:e3:53:f9:b2:24:67:24:04:16:f0:
81:ff:b9:3a:81:d5:d1:a7:b1:d5:75:c8:cc:6b:0d:
3a:6b:64:fa:18:26:6e:d0:f1:d0:88:dd:66:97:0f:
7e:93:5d:eb:56:de:60:a0:1d:8d:45:d6:d9:60:bc:
5d:f0:9c:4a:08:08:a4:a0:c9:c6:40:0a:6d:8d:46:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:38:44:91:E6:43:25:B0:CB:E9:ED:3E:EF:10:60:FD:59:6E:69
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/TO04RJHmQyWwy-ntPu8QYP1Zbmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
da:ba:1e:89:d5:08:70:2d:a0:6a:7a:cd:f8:a3:72:e7:80:fb:
7d:c1:b1:6d:2d:6a:a0:1c:2b:d3:ce:6d:f4:a9:65:e1:b7:18:
c0:12:77:f9:38:04:25:3b:ff:4e:21:6f:2f:a5:8d:06:c3:5b:
c2:59:b0:f5:52:11:88:83:40:e7:71:1d:b3:53:dd:14:99:bc:
9c:17:24:5d:c4:a9:c8:89:2a:67:b2:69:35:c0:d8:95:14:a1:
d3:3a:59:dd:2a:b0:f7:a2:95:67:9f:8d:6f:1a:fd:d9:77:f5:
43:df:1b:6c:4d:e3:ae:cb:fb:cc:1d:84:b3:32:b6:e0:f7:1f:
96:7f:46:72:45:71:65:99:4a:0b:a6:3f:2c:86:ef:6c:ad:f1:
db:ff:29:09:27:c0:52:80:f4:80:5c:41:23:52:8e:4c:c9:01:
b0:21:66:79:ab:a8:08:60:7e:c0:dd:a2:59:bb:87:e0:24:83:
cc:6e:72:f1:e8:0e:25:72:17:f4:f7:e7:15:f3:2c:f0:91:bf:
cc:0f:78:13:31:8f:48:08:cb:ad:70:10:dd:2e:f6:35:37:20:
75:a3:e9:19:b7:50:e4:f8:01:d7:bd:98:40:b2:25:ad:0b:e5:
25:b1:7f:d6:fb:d0:7d:f0:7e:ae:03:e6:c1:01:5c:1c:9c:2d:
3b:2c:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:56 2026 by rpki-client