Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/YXe5wNjqNFZ7O6xkfy_5zNNzVz8.roa
File: YXe5wNjqNFZ7O6xkfy_5zNNzVz8.roa (raw, json)
Hash identifier: o6nj136gAso0kU6LFwvJsqn3kQmtxaub8ghhctLOkoc=
Subject key identifier: 61:77:B9:C0:D8:EA:34:56:7B:3B:AC:64:7F:2F:F9:CC:D3:73:57:3F
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A1115B033A894264656AAE56907F32B402
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/YXe5wNjqNFZ7O6xkfy_5zNNzVz8.roa
Signing time: Tue 06 Oct 2026 13:15:39 +0000
ROA not before: Tue 06 Oct 2026 13:15:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57704
IP address blocks: 5.133.24.0/21 maxlen: 24
193.7.220.0/24 maxlen: 32
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:5b:03:3a:89:42:64:65:6a:ae:56:90:7f:32:b4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Oct 6 13:15:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6177b9c0d8ea34567b3bac647f2ff9ccd373573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:f7:7e:fa:8d:28:0f:78:73:ed:40:63:ad:
d4:f9:fc:b4:36:6a:93:8d:5b:03:33:54:b9:4b:f9:
73:47:48:fb:fc:b0:b9:9c:1b:15:96:42:3e:65:56:
39:92:55:cc:31:5f:61:2c:ab:09:6d:34:63:e2:f5:
4b:c8:c3:c2:27:73:03:2f:50:14:49:d2:de:ab:45:
f3:e6:74:74:20:63:21:cd:ba:d5:1a:8a:49:9f:c8:
57:52:79:97:85:f5:d4:83:cf:0b:06:27:49:2c:f6:
66:c4:ab:8e:1d:6e:73:08:ac:72:2c:7a:89:ba:48:
7d:ec:f2:8f:21:6b:5d:e0:ee:7c:5d:a7:cc:3a:79:
6d:c0:0f:c3:23:31:0c:8b:53:8d:90:20:9f:b8:ba:
ba:b1:2d:07:27:8f:da:c6:7b:a8:cc:79:77:96:3f:
26:bb:60:a8:bc:8f:92:6f:b1:5a:cb:ea:46:c8:69:
9b:be:81:68:f6:da:b6:b0:e2:62:2d:e9:d6:2f:43:
dc:43:4b:f9:10:54:4e:e7:f1:65:c1:14:93:a1:01:
85:9c:a3:e9:a9:62:f4:13:60:17:25:7c:ec:99:f2:
ed:b5:2d:12:88:a0:ce:89:8a:e5:c8:da:ec:a0:ad:
2d:ee:b3:73:51:99:07:0d:57:9d:50:93:70:36:be:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:B9:C0:D8:EA:34:56:7B:3B:AC:64:7F:2F:F9:CC:D3:73:57:3F
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/YXe5wNjqNFZ7O6xkfy_5zNNzVz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
14:da:43:78:cb:71:39:98:fb:e7:f7:19:24:b6:f0:a1:aa:3e:
55:0b:07:1d:ad:d0:6e:3d:36:94:2c:bf:df:c4:37:d2:70:e3:
e0:17:1c:97:4e:f2:e9:17:18:95:1d:1a:3e:61:a1:9a:d6:53:
a4:a7:e0:47:65:9b:be:63:90:27:a5:23:c0:57:bb:3d:9f:60:
27:96:a0:9e:bc:b9:73:2e:f1:67:c3:a3:a3:3f:70:5b:0f:ed:
69:d9:da:39:90:f7:84:41:67:9d:14:bd:34:ec:50:2d:66:00:
dc:fd:53:30:64:bc:85:43:8a:98:e0:c5:10:a2:d6:8a:fb:b2:
00:9e:e5:f8:cb:59:04:d5:58:2f:3f:e9:b5:2a:fe:5a:de:a7:
96:bb:7a:38:fc:26:e0:74:5c:95:ee:8f:1e:78:92:ab:36:a7:
c3:19:7a:1e:b7:7d:0e:3c:a1:29:f1:a4:5e:a6:b1:2f:06:2b:
ef:3e:e9:f1:23:97:a9:0f:fc:a8:f9:9d:30:d6:fb:4f:1e:94:
aa:5b:94:6d:34:76:fd:54:97:ef:4f:e8:34:14:c9:17:d1:cb:
93:fd:c4:e7:f6:0d:5c:6f:0e:80:aa:95:d9:ab:7c:da:cd:f2:
cf:bc:db:8e:76:ab:49:5e:90:a1:03:46:a0:71:99:d6:f2:0f:
f3:12:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:17 2026 by rpki-client