Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/d5nyqlSVH4SWh5TpjevmRsau4NM.roa
File: d5nyqlSVH4SWh5TpjevmRsau4NM.roa (raw, json)
Hash identifier: ZkMM1X6qtjeThy5STSciSDZEaE0EIU0uMKAaMVoG3bM=
Subject key identifier: 77:99:F2:AA:54:95:1F:84:96:87:94:E9:8D:EB:E6:46:C6:AE:E0:D3
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019FE5ADA998D1769984D41C0BC83903FCE3
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/d5nyqlSVH4SWh5TpjevmRsau4NM.roa
Signing time: Sun 09 Aug 2026 08:39:51 +0000
ROA not before: Sun 09 Aug 2026 08:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.108.0/24 maxlen: 24
185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:ad:a9:98:d1:76:99:84:d4:1c:0b:c8:39:03:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 9 08:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7799f2aa54951f84968794e98debe646c6aee0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:4f:d1:b0:f5:00:19:e0:08:c0:06:bc:e4:
ed:7a:08:b3:ed:ef:8c:24:5a:bc:ce:3a:cf:9f:49:
8f:be:99:55:98:3f:47:20:01:d1:71:a5:07:8f:c9:
67:4e:6e:23:3a:8f:4d:de:25:a0:2d:24:70:36:b1:
17:a7:b1:dc:b4:b1:90:a4:2d:78:c3:5b:df:12:21:
c1:45:c6:c4:63:55:37:28:50:c1:9f:a0:cd:69:3e:
7e:a1:6f:96:f8:fb:b5:f3:d8:6d:98:b6:96:83:0f:
0d:a5:25:3a:bc:78:34:02:9b:d5:52:4a:43:ef:ba:
69:5c:ca:4d:9a:76:68:b6:6d:46:2e:2a:18:6f:19:
f4:09:a7:71:b0:30:7c:7c:42:e0:14:6b:7b:e5:bf:
2d:d3:c3:2f:10:8f:f7:b5:6b:fa:b6:30:33:28:c7:
fc:05:bf:31:53:70:7b:e2:4d:2a:89:d8:c5:ec:b9:
b5:1e:40:2c:d0:e4:07:94:bb:71:73:16:24:95:4d:
2e:6d:e1:36:05:43:3f:d4:42:9b:0e:14:39:5a:e4:
d0:8a:6f:74:65:6d:99:1a:55:14:45:4c:25:39:79:
bd:4c:03:9c:9b:69:ae:ad:f5:c8:c8:36:c8:03:73:
91:09:09:51:63:19:11:2f:81:37:f2:55:2f:ae:1e:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:F2:AA:54:95:1F:84:96:87:94:E9:8D:EB:E6:46:C6:AE:E0:D3
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/d5nyqlSVH4SWh5TpjevmRsau4NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.108.0/24
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
8d:d5:37:e9:46:f0:5f:68:e3:03:de:58:c6:c9:28:cf:ea:7c:
cb:ac:09:d8:fe:2e:ec:d6:2e:45:90:bb:ff:88:8c:b8:75:26:
5b:72:96:78:3e:0a:29:17:d5:0f:6d:f2:30:2d:59:89:f4:b2:
19:c9:6d:a0:19:1a:4e:b9:aa:c4:ea:65:44:6a:db:bb:8d:a2:
47:ba:58:96:1c:07:6d:63:67:bb:d6:c7:93:fc:55:3d:43:0c:
32:33:22:57:0a:b8:5e:30:48:1b:30:5f:eb:13:f1:c9:dd:d9:
ef:d7:7e:f7:69:60:6a:01:8d:60:6e:e8:75:52:4f:2b:67:5a:
71:f8:b0:1a:d0:39:cb:c9:40:fd:3e:ed:d9:c7:b0:df:9f:d8:
64:90:1a:26:4c:86:6b:a9:a6:71:99:e7:e2:ea:8b:91:e4:12:
6d:0b:65:e8:c5:78:56:7e:50:33:b7:4e:a9:81:2f:87:e7:ae:
ec:83:69:5e:a3:4c:12:40:51:28:d8:d7:25:06:02:39:f9:d3:
8a:66:bd:20:6e:d7:b3:02:ac:43:c4:5c:37:e9:6f:f7:59:5d:
9a:82:3d:47:76:f6:af:af:b6:49:18:1d:99:cf:50:88:61:a7:
ee:c1:69:3d:74:68:88:90:75:96:b2:64:9d:21:83:e0:70:56:
3f:36:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:10:01 2026 by rpki-client