Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/14kLYnj4aVpiPiDnem1AuCPaMts.roa
File: 14kLYnj4aVpiPiDnem1AuCPaMts.roa (raw, json)
Hash identifier: A5QynsOqd1sKefSS3NYn4v9gNeLs73Df7noVWjRyTzo=
Subject key identifier: D7:89:0B:62:78:F8:69:5A:62:3E:20:E7:7A:6D:40:B8:23:DA:32:DB
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A018E2013ACAA90317F1F1D0FC961F388B
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/14kLYnj4aVpiPiDnem1AuCPaMts.roa
Signing time: Wed 19 Aug 2026 07:17:39 +0000
ROA not before: Wed 19 Aug 2026 07:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 5.10.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:e2:01:3a:ca:a9:03:17:f1:f1:d0:fc:96:1f:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Aug 19 07:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7890b6278f8695a623e20e77a6d40b823da32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:5d:0b:ea:5f:9c:ee:3b:5d:4d:8c:a4:c2:
e0:f8:04:2c:02:b5:98:7e:c2:a5:1e:05:fa:d8:19:
12:72:d1:0e:16:27:87:10:2b:50:b7:a5:9c:ca:95:
ab:e8:cf:7f:8d:4d:bb:50:c1:fa:7c:f0:75:21:f1:
1e:9c:ee:ce:38:10:9c:fa:ad:ea:b5:9d:8b:e1:e7:
02:fa:51:3e:b4:cd:53:73:3a:43:86:1e:25:93:ce:
0b:ca:9e:0e:87:ca:ad:33:67:03:e8:4b:13:51:30:
08:9c:78:aa:f4:03:39:bd:fe:ce:e9:5c:b2:eb:fb:
8b:ec:08:88:d2:6f:d8:9f:8d:ec:ee:b7:04:13:7e:
e5:67:23:25:ce:08:1a:5c:d3:21:a6:05:8f:70:56:
c0:e3:3a:29:56:60:71:a4:b4:9e:37:9d:65:ec:5b:
8b:86:51:ac:cb:e4:1f:e1:5c:0e:47:ad:46:3b:c7:
e5:51:21:fe:b5:69:10:82:23:56:3f:57:20:75:1a:
fd:f2:01:17:10:f3:de:c8:c9:89:c4:2f:9c:8c:8f:
dc:d3:d0:ec:7a:71:82:da:68:a3:d8:27:12:c1:4a:
cf:79:e4:70:91:46:68:33:ff:89:25:51:e6:47:ee:
08:1e:95:aa:2e:1f:5e:a2:69:0e:cc:2e:57:45:45:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:0B:62:78:F8:69:5A:62:3E:20:E7:7A:6D:40:B8:23:DA:32:DB
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/14kLYnj4aVpiPiDnem1AuCPaMts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:31:c1:74:3a:95:ed:95:68:d8:ed:2d:3b:07:8a:e3:a9:2a:
f7:98:6c:cc:20:e8:83:ff:2d:c1:ba:6f:6d:20:f8:0e:ce:1b:
df:6f:fe:7d:c4:cc:c4:c2:65:2d:5b:cd:29:57:4e:eb:9b:4b:
29:46:0f:e1:7f:70:9a:4a:fb:f1:68:0b:c1:50:43:04:32:e9:
b1:5e:e8:1c:40:59:5b:a5:db:27:a0:ce:95:4f:9b:75:4b:a2:
28:e1:6c:b4:37:fd:54:cd:f0:91:c9:5c:a6:3a:72:33:9e:1e:
d8:62:74:7f:57:8d:77:14:76:96:7d:ca:8c:b2:1b:ea:41:a1:
59:ad:f9:88:59:38:7e:1b:64:10:6a:04:24:a0:76:ce:27:a0:
6d:66:83:bb:26:76:e5:65:c9:9e:7d:b3:51:01:a6:f1:c6:e8:
af:0b:9b:f6:36:8f:d4:1f:ef:1a:dc:01:5a:ef:f8:45:e1:fb:
a6:ac:a1:30:b8:a9:55:e3:54:67:50:37:61:07:52:cc:85:5f:
af:10:76:a4:f1:19:69:32:0c:7f:d4:b3:4f:c6:e2:6c:92:af:
dc:6d:85:63:d4:d6:7a:c7:2c:0e:a5:c6:7a:58:d3:38:bb:51:
96:c0:c9:8e:c6:10:00:b5:38:41:54:4b:84:a6:14:24:1a:f3:
82:ba:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:11 2026 by rpki-client