Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/lZEX5TKEx5hCkasDPbRjOyHPXGI.roa
File: lZEX5TKEx5hCkasDPbRjOyHPXGI.roa (raw, json)
Hash identifier: tjb5iXKbv01rpTz7gJYnJJIH0J2+gq3FvhNX1/NC5Xs=
Subject key identifier: 95:91:17:E5:32:84:C7:98:42:91:AB:03:3D:B4:63:3B:21:CF:5C:62
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01A06864059993C41BB0E419FAD25FEDA6A6
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/lZEX5TKEx5hCkasDPbRjOyHPXGI.roa
Signing time: Thu 03 Sep 2026 17:49:40 +0000
ROA not before: Thu 03 Sep 2026 17:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219305
IP address blocks: 95.170.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:64:05:99:93:c4:1b:b0:e4:19:fa:d2:5f:ed:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Sep 3 17:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=959117e53284c7984291ab033db4633b21cf5c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:21:2d:ed:8e:56:88:2e:46:c8:7f:ea:d3:
80:ef:81:fc:5e:65:06:94:a0:c8:df:80:29:91:45:
a0:d7:d9:cd:8d:8b:b1:00:03:b0:68:d6:06:69:23:
9d:b6:e0:c2:1e:cd:e6:56:1e:e0:c2:05:ee:61:52:
67:c0:a0:d9:0c:93:2c:3b:65:57:f2:98:4d:63:0b:
db:84:67:c3:78:83:c5:83:18:cd:f6:9f:bc:f8:72:
7b:a5:da:b8:fb:94:1b:0c:77:76:a1:58:a3:21:30:
e5:7c:2e:7e:f9:f5:61:b5:1f:d3:df:67:ea:c7:2d:
74:7f:00:c1:b8:1e:1e:f1:c3:fe:d9:10:a1:10:29:
30:15:c5:26:5b:e1:35:3e:d2:07:c4:1f:0c:87:f9:
97:55:79:62:35:10:89:d9:68:2d:51:1c:4d:e2:8a:
15:6a:6b:34:65:38:f9:18:fc:66:21:e6:ae:c1:b4:
f5:40:8f:73:51:c5:18:da:95:e4:d5:91:63:46:9b:
b1:b9:d2:21:78:0f:ec:bb:06:d9:b2:18:f7:61:8b:
fd:c7:84:d0:a0:fc:66:c1:1e:01:44:85:23:3a:d8:
35:ff:55:dc:a9:be:63:2d:69:31:58:bc:d9:22:89:
14:35:fb:95:55:d1:3e:f0:c0:d8:51:2c:22:72:2d:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:17:E5:32:84:C7:98:42:91:AB:03:3D:B4:63:3B:21:CF:5C:62
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/lZEX5TKEx5hCkasDPbRjOyHPXGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.127.0/24
Signature Algorithm: sha256WithRSAEncryption
53:04:40:9f:a8:c0:eb:63:b8:4d:b6:9a:bb:7e:b2:ce:59:ac:
90:34:94:5f:98:6c:46:2c:b0:ef:0d:9d:09:40:bb:f2:8e:d9:
2f:8d:de:f0:82:53:12:e0:3b:06:76:d6:de:4f:a0:47:8f:77:
b8:50:2b:c0:70:70:ad:83:da:b4:de:98:dc:69:4b:01:8c:41:
2e:27:9d:bb:63:36:b4:56:4a:93:e3:ea:0b:e8:45:94:a4:fe:
b6:93:fe:f8:b1:b3:21:8c:80:c4:6b:06:c3:1f:57:4c:a4:2a:
d6:1b:46:5f:b3:a8:4a:28:da:a2:1c:0b:b6:b0:b4:bc:4c:d5:
10:87:0f:46:65:28:48:36:77:59:b2:a1:7c:cc:ec:ae:5f:10:
06:80:79:1a:fe:57:8f:75:3c:ab:18:8b:d5:71:02:3c:af:4f:
2c:50:4f:f4:42:ce:00:63:59:36:94:f4:ab:fb:f4:15:5d:b0:
45:b6:88:db:11:82:9b:7e:0a:b8:c8:56:bd:23:5a:cd:5c:38:
ff:f6:63:b9:e4:ca:b1:78:72:b5:22:ef:20:3d:05:32:f9:ea:
36:80:47:8b:44:d5:d3:b3:5a:bc:c1:59:7f:4c:5e:5c:aa:6c:
a6:9c:18:b8:98:e1:ee:ee:fb:3d:93:c6:36:a2:17:f8:08:01:
ef:e5:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:23:45 2026 by rpki-client