Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/5bYYwTu5I90wDobRd2VzCTr5zz4.roa
File: 5bYYwTu5I90wDobRd2VzCTr5zz4.roa (raw, json)
Hash identifier: IZsMKAaIZFpVJ3BtSdbVWjKTOC+izlQblksF+19m9fQ=
Subject key identifier: E5:B6:18:C1:3B:B9:23:DD:30:0E:86:D1:77:65:73:09:3A:F9:CF:3E
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 01A0D485350B493FE5DDD0B9F26999728FA2
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/5bYYwTu5I90wDobRd2VzCTr5zz4.roa
Signing time: Thu 24 Sep 2026 17:44:54 +0000
ROA not before: Thu 24 Sep 2026 17:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210833
IP address blocks: 2001:67c:828::/48 maxlen: 48
2a05:d4c0::/32 maxlen: 48
2a05:d4c0:fffe::/48 maxlen: 48
2a05:d4c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:85:35:0b:49:3f:e5:dd:d0:b9:f2:69:99:72:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Sep 24 17:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b618c13bb923dd300e86d1776573093af9cf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:7d:98:1d:a7:f6:7c:ff:cc:e5:a2:3c:06:
91:7a:cc:d5:6c:8d:1a:2d:c4:3d:30:61:36:57:59:
1d:58:f6:77:7b:87:c0:fc:85:c7:4c:49:f5:35:bd:
c0:20:2f:b2:01:37:3d:ad:2a:e1:5f:4f:d2:af:59:
cc:12:70:1f:10:6f:c1:bd:76:19:ea:e4:fa:b1:dd:
98:53:b9:7a:16:62:f3:98:b8:5a:b5:f3:bc:17:02:
14:fe:8a:6f:70:a1:28:45:78:1d:de:96:c3:e1:5a:
35:1c:72:67:ae:ed:1c:76:73:e0:eb:8f:c2:eb:18:
ee:a8:3b:dc:22:b9:a8:9d:0b:ce:5f:c9:fd:86:94:
0a:b4:52:7e:7b:54:12:c5:dd:6c:4e:b4:23:1d:88:
45:70:62:e3:29:e4:23:75:94:44:17:ad:89:c0:e9:
71:f1:8c:6d:f1:19:9c:f8:e4:12:55:58:b9:4e:41:
38:b4:44:00:30:49:89:dc:1d:e7:01:c3:35:1a:41:
b3:76:37:00:33:a2:99:67:76:4b:ec:91:27:0c:81:
2a:85:d6:a6:c7:56:93:74:4e:21:a9:99:31:ed:50:
f7:92:2a:4b:26:1f:24:bb:ef:7d:e8:d0:e5:28:63:
4c:73:2c:d5:0b:7f:56:4c:be:56:c1:b0:89:b6:34:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:18:C1:3B:B9:23:DD:30:0E:86:D1:77:65:73:09:3A:F9:CF:3E
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/5bYYwTu5I90wDobRd2VzCTr5zz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:828::/48
2a05:d4c0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:0c:92:9e:1c:dc:17:eb:ce:c5:a9:3d:42:4b:75:81:4d:06:
a2:d6:f6:41:84:44:bb:ab:9d:d0:66:9c:3b:76:bb:ce:f7:f9:
66:ad:32:ba:51:6f:d4:6d:40:d6:ff:a6:34:ef:b4:21:08:98:
60:30:5f:12:e5:a1:3e:0f:cf:d9:c0:2c:26:81:a1:cf:5d:3c:
49:83:70:05:24:76:e1:5e:f8:9f:c4:f3:f1:f5:94:a2:75:69:
cd:b9:2b:40:24:75:37:8f:23:b4:09:4e:5e:0a:c3:35:d7:9d:
45:4a:3a:31:f4:fe:63:43:80:8b:e6:bd:11:c1:9a:57:95:74:
38:d7:da:04:ec:c1:31:2f:3a:ff:fb:bd:2a:0e:64:4a:ba:5b:
be:88:a7:ef:f5:30:28:e6:a8:f4:73:fb:75:1d:f8:09:5e:e2:
73:41:1b:52:d0:ee:1f:43:c9:42:b3:91:e0:e2:25:cd:03:dc:
4b:ef:db:8c:d4:8c:d8:de:74:1a:fb:47:2c:e7:18:7d:a1:68:
bb:cc:c3:c1:4d:2a:fd:e2:a1:2e:72:d3:a5:e5:e6:d4:1b:97:
5f:d5:c1:8b:38:10:ed:98:cc:94:7e:45:f1:ef:5c:23:cf:fd:
7e:50:0c:e5:14:75:dd:9c:1e:da:b5:1d:85:cb:4d:3c:c8:e7:
52:8a:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:49:25 2026 by rpki-client