Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/nV9LKFQOb8Hp142OMT0f6AJdVEk.roa
File: nV9LKFQOb8Hp142OMT0f6AJdVEk.roa (raw, json)
Hash identifier: KRIFtNkWuM4kbcZ05QZ+Sv7d0yGN8E/gvpyTo0kQYZU=
Subject key identifier: 9D:5F:4B:28:54:0E:6F:C1:E9:D7:8D:8E:31:3D:1F:E8:02:5D:54:49
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 01A11C3521401DD379DC54CCFD7CE6B674A2
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/nV9LKFQOb8Hp142OMT0f6AJdVEk.roa
Signing time: Thu 08 Oct 2026 15:50:06 +0000
ROA not before: Thu 08 Oct 2026 15:50:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56718
IP address blocks: 5.252.36.0/22 maxlen: 24
5.252.37.0/24 maxlen: 24
5.252.38.0/23 maxlen: 24
192.166.137.0/24 maxlen: 24
192.166.138.0/23 maxlen: 23
2a0f:cac0::/49 maxlen: 49
2a0f:cac0:0:8000::/49 maxlen: 49
2a0f:cac0:6::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:35:21:40:1d:d3:79:dc:54:cc:fd:7c:e6:b6:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Oct 8 15:50:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d5f4b28540e6fc1e9d78d8e313d1fe8025d5449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:1c:15:ac:f6:0d:96:0a:64:3f:b7:30:75:
32:72:26:96:ac:00:76:7b:b5:e6:55:d5:e1:04:51:
68:f4:8f:c5:2e:cc:f2:95:89:c5:bd:f2:95:11:6e:
55:a9:4d:7c:a3:59:25:1b:c5:e2:9f:45:37:f5:e9:
11:92:81:cf:3c:19:1f:5f:48:5a:21:44:0c:2a:6c:
19:24:97:4e:b4:fe:0d:33:dd:8e:ea:39:31:a1:24:
e6:bc:57:01:e1:f0:a7:5f:2b:a8:cf:c8:e4:8e:f1:
27:ec:71:5d:6b:2a:9d:71:7b:b1:d8:12:3d:c9:c4:
05:78:1a:5d:c6:30:18:26:fd:e9:7f:3c:e0:70:d3:
aa:68:ac:25:4c:01:ca:b2:50:bb:21:38:82:04:94:
0c:04:9f:7d:c2:a9:c3:44:cc:e1:81:0f:e5:36:90:
ab:93:b1:1e:f1:a2:1a:f5:83:2a:cd:cf:74:a3:9b:
90:a3:69:03:6d:bc:98:20:0c:e1:f5:a7:48:ef:c1:
e8:a7:38:08:10:64:25:5f:eb:63:7a:78:45:99:60:
3e:c6:ac:80:65:9b:87:f0:95:a3:89:83:40:c2:5d:
ea:e9:1d:78:77:66:bd:26:64:32:0d:03:5c:4d:e0:
90:52:eb:8d:0f:d7:d3:47:4b:fd:ba:b7:48:13:bf:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:4B:28:54:0E:6F:C1:E9:D7:8D:8E:31:3D:1F:E8:02:5D:54:49
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/nV9LKFQOb8Hp142OMT0f6AJdVEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.36.0/22
192.166.137.0-192.166.139.255
IPv6:
2a0f:cac0::/48
2a0f:cac0:6::/47
Signature Algorithm: sha256WithRSAEncryption
12:5c:98:30:ee:66:1e:da:e6:ba:f1:54:38:27:d3:46:50:bf:
f8:81:ff:7d:6d:f6:18:3b:fa:16:0b:76:47:41:7f:e4:44:1b:
1c:43:c2:c0:54:a5:a6:9b:a4:5e:13:40:16:a8:7c:9e:51:5c:
14:99:55:d7:78:33:0c:c8:e7:fc:84:7b:8e:99:af:4a:fa:c8:
a6:a6:9a:bb:ee:16:f5:68:4b:0d:0a:20:eb:16:a8:a4:c8:07:
4a:2e:22:81:c9:0c:c0:98:98:03:1c:dd:51:d9:72:e2:50:46:
4f:20:2f:c4:9a:31:dd:45:87:fd:b5:20:b7:ae:6c:46:fb:e5:
d4:1c:75:13:df:ac:29:18:f0:a6:48:c8:ec:5f:a6:92:31:b3:
01:ed:19:5b:ca:80:05:3b:d3:6a:ec:77:11:84:e7:ff:4a:94:
4c:97:8d:e8:cf:07:de:f8:0d:63:85:8e:b5:a3:a5:fe:44:c3:
e4:0e:0d:39:49:ae:6b:22:62:d4:72:f1:4f:96:09:ce:37:65:
0f:74:5e:ea:1f:96:28:12:fb:33:4c:74:39:e3:c5:44:8e:63:
f0:92:37:29:20:e6:04:94:a0:a8:50:9d:a6:2c:ea:17:a4:b9:
8b:f3:d6:22:50:0c:fb:99:5a:8a:22:5a:54:cf:cb:37:fe:f6:
c6:ec:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:49:40 2026 by rpki-client