Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/LprOMsFHxLJAX14qr6rzPd2S3hE.roa
File: LprOMsFHxLJAX14qr6rzPd2S3hE.roa (raw, json)
Hash identifier: GSVG8AjnGSJXwoz4NSFSCXryTjDxqTpMmM1vFNTvuyI=
Subject key identifier: 2E:9A:CE:32:C1:47:C4:B2:40:5F:5E:2A:AF:AA:F3:3D:DD:92:DE:11
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A08B3BCF683A7E60C6292B50720D9EFE66
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/LprOMsFHxLJAX14qr6rzPd2S3hE.roa
Signing time: Thu 10 Sep 2026 12:12:27 +0000
ROA not before: Thu 10 Sep 2026 12:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207057
IP address blocks: 5.10.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:3b:cf:68:3a:7e:60:c6:29:2b:50:72:0d:9e:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 10 12:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e9ace32c147c4b2405f5e2aafaaf33ddd92de11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:ec:c1:a4:03:54:35:1a:f2:a8:ea:f4:41:
15:5f:76:44:06:5d:cd:30:1d:79:ff:18:e7:0a:68:
bd:77:fa:8f:70:0b:e3:ee:99:27:23:80:1b:d2:61:
49:9d:72:2f:9f:89:89:55:ef:0f:17:a8:9a:c7:6e:
63:ef:69:ea:db:16:0a:96:de:2d:6b:76:c8:30:26:
09:49:fb:84:22:de:8d:1c:7b:ee:c6:a6:2d:57:27:
3d:0b:90:0e:83:dc:81:cd:81:74:5f:d2:cc:dc:18:
f7:36:af:54:41:ca:21:f3:3a:a2:93:d5:e3:08:c8:
9e:64:26:b3:42:9c:ce:8a:27:e1:ab:41:c5:70:dd:
87:8f:6b:40:7b:fc:e0:61:bb:21:13:88:0e:35:50:
13:2f:b6:47:2e:f9:8d:fc:ed:83:63:17:33:a9:ee:
2a:30:6f:e6:1f:6e:f5:1a:b3:f9:11:0b:91:3f:c5:
26:1c:2b:89:c4:19:d7:09:1a:b3:2b:a4:ac:90:7a:
45:b5:32:01:73:70:eb:48:a5:bb:d0:93:ce:07:91:
b7:17:1a:38:a0:a9:f2:91:7d:96:e8:ac:45:5d:a5:
67:60:8e:e3:2d:b0:18:c2:cf:f3:92:db:49:d6:db:
87:13:2f:2f:84:96:54:91:85:1e:bc:33:1c:11:3b:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:CE:32:C1:47:C4:B2:40:5F:5E:2A:AF:AA:F3:3D:DD:92:DE:11
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/LprOMsFHxLJAX14qr6rzPd2S3hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.217.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4e:67:1b:11:88:42:27:34:40:2d:ff:f1:75:34:dc:76:fc:
cf:ad:1c:09:6c:66:2b:d1:e1:4c:83:35:c7:1e:88:a8:ea:31:
70:6d:fc:f2:50:ad:81:7a:9a:7c:44:84:fe:d2:b0:b3:58:2e:
6e:f9:92:fa:ec:5f:ec:03:78:31:c7:37:de:c1:2c:ee:b1:da:
36:c1:3c:40:de:0b:4b:bd:41:5a:5c:b3:48:cf:1b:10:b2:20:
c9:eb:ff:fa:99:2c:e5:c0:db:81:56:25:34:15:87:fc:c2:ef:
1b:e2:d9:d3:71:7f:24:5d:2d:35:00:fc:7c:26:da:66:81:b5:
f4:67:e2:ff:89:15:db:e2:d0:6f:cf:03:85:e0:cd:ff:0f:44:
bc:4b:66:03:51:7a:14:b1:10:17:5d:77:21:47:40:da:22:29:
a7:c1:c6:91:e7:29:0c:57:9e:cd:ac:02:da:23:6e:4a:a3:fa:
27:b8:c4:43:95:bc:ac:e6:1d:d3:80:83:ad:6e:dd:67:54:e4:
b4:1f:52:08:65:e5:36:7b:c8:c2:e9:da:04:c6:fc:bc:40:ea:
8c:d5:5a:ae:1e:f0:80:68:ce:db:05:29:14:9d:99:af:16:4f:
1e:7a:a0:43:b7:53:84:45:bb:32:ff:6a:57:c6:b2:16:04:ec:
9c:f1:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:46 2026 by rpki-client