Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/5Usz36CmKbFtCm4B1BqoYq4inVk.roa
File: 5Usz36CmKbFtCm4B1BqoYq4inVk.roa (raw, json)
Hash identifier: bK/JE++LlwMTK/apyLk8d0x70UMhmYLDd4W7NbjjySw=
Subject key identifier: E5:4B:33:DF:A0:A6:29:B1:6D:0A:6E:01:D4:1A:A8:62:AE:22:9D:59
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A15D6FB1F1A270B793AD03A1D9869B10FD
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/5Usz36CmKbFtCm4B1BqoYq4inVk.roa
Signing time: Wed 21 Oct 2026 07:49:23 +0000
ROA not before: Wed 21 Oct 2026 07:49:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 134.168.2.0/23 maxlen: 24
134.168.5.0/24 maxlen: 24
134.168.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:6f:b1:f1:a2:70:b7:93:ad:03:a1:d9:86:9b:10:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Oct 21 07:49:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e54b33dfa0a629b16d0a6e01d41aa862ae229d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:c6:88:d0:1d:ca:59:e0:a9:ee:b8:0f:b0:
b0:20:7a:cc:e5:ad:60:7c:8e:86:7a:d0:1d:cd:40:
01:3b:d5:7c:af:49:7f:9b:76:41:5e:2a:f5:71:f9:
b1:70:a8:43:86:48:27:88:ae:cc:c8:fa:8f:fd:66:
83:df:63:4f:30:1e:78:3b:3f:c0:07:79:76:b6:db:
21:36:2a:a1:86:67:55:2b:8c:16:db:ed:e9:53:bb:
63:a4:ba:0e:c2:92:52:d8:d4:8c:ab:04:3d:a2:b6:
23:95:57:ef:31:82:ad:88:1a:81:84:6b:77:3f:81:
f8:5e:a8:82:fa:f5:d6:81:54:4d:94:b9:5b:4a:4d:
6b:b3:89:3b:fa:88:53:2d:c9:0f:28:13:6b:19:61:
4b:39:1d:5a:db:06:d1:0e:05:0a:fc:29:d7:83:01:
ca:a2:a3:9e:e6:0e:ff:e4:63:21:0b:c6:2c:7e:04:
bf:dc:21:bd:37:1f:66:00:6c:4c:96:e7:f8:54:9a:
ca:6f:18:a3:a2:46:09:55:5d:c7:40:43:93:12:5e:
88:30:46:e6:74:da:6d:cb:d8:8a:4f:8e:0e:fe:97:
92:94:5a:c6:21:e0:ff:8a:a9:55:f4:9e:6b:b2:82:
34:cd:86:1f:0f:3a:2e:b1:2d:c9:5b:18:61:ea:ad:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:33:DF:A0:A6:29:B1:6D:0A:6E:01:D4:1A:A8:62:AE:22:9D:59
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/5Usz36CmKbFtCm4B1BqoYq4inVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.2.0/23
134.168.5.0-134.168.6.255
Signature Algorithm: sha256WithRSAEncryption
39:e6:f7:a9:bb:6f:7c:55:6d:3a:8e:ff:2a:81:fa:d4:46:7a:
9b:ed:61:6d:79:ec:7e:2a:fb:3d:64:47:4c:ff:f7:e0:75:12:
cd:66:70:bc:78:65:e6:fc:30:8b:a8:87:0e:9f:dc:0a:f3:41:
d9:f4:a8:fc:d0:7c:ab:e3:6c:fc:eb:39:3c:11:46:58:24:d0:
ff:b3:b4:12:26:a8:61:e6:0a:86:61:aa:bf:a1:a9:f9:4b:64:
8b:ae:c0:30:8a:46:d0:60:38:be:be:8b:10:07:72:bb:86:8f:
3e:bd:9a:8a:0d:b7:32:44:3f:ac:f7:5b:a2:72:a4:9b:2d:7f:
8a:bf:00:6d:49:c1:e2:ab:79:7a:c7:d0:92:88:46:2f:70:93:
bb:3e:69:d6:2f:12:8f:50:16:0e:6d:da:21:67:af:71:dd:33:
84:00:38:9e:7d:ed:d3:59:38:00:61:42:f0:1f:5c:73:39:c6:
bb:82:41:b5:e1:67:0f:a8:f7:48:34:12:f0:d4:1f:3b:51:a4:
f4:7c:ac:00:36:ff:8d:4e:61:6b:92:1b:60:fe:bb:aa:93:e8:
b6:13:53:0c:08:25:16:4a:30:de:15:38:ec:01:8c:7d:1a:67:
8a:23:4e:19:28:b5:75:c7:62:ca:b1:66:12:46:43:be:87:18:
a7:f6:d4:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:20 2026 by rpki-client