Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/lYGef5eh_dPL_5pXc_sMbwZ1MIk.roa
File: lYGef5eh_dPL_5pXc_sMbwZ1MIk.roa (raw, json)
Hash identifier: RMc34q6yeYcexeqlJrTdbO+FMCTrI7XF87B3QzcXP3g=
Subject key identifier: 95:81:9E:7F:97:A1:FD:D3:CB:FF:9A:57:73:FB:0C:6F:06:75:30:89
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019F6F8DAEA9AD7A0E9F2B0F4142E3F163C2
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/lYGef5eh_dPL_5pXc_sMbwZ1MIk.roa
Signing time: Fri 17 Jul 2026 10:09:43 +0000
ROA not before: Fri 17 Jul 2026 10:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 5.10.216.0/24 maxlen: 24
185.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:8d:ae:a9:ad:7a:0e:9f:2b:0f:41:42:e3:f1:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jul 17 10:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95819e7f97a1fdd3cbff9a5773fb0c6f06753089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:10:16:97:97:1f:69:69:29:22:a7:94:ae:
f9:16:2d:b0:9f:a8:c6:65:a3:07:8f:82:c7:2d:39:
9d:95:c0:3e:7c:6d:69:84:e4:14:40:ab:42:c9:60:
f6:7c:ba:88:42:93:a4:f4:cc:7a:67:a9:7c:50:92:
00:6d:af:60:c4:f9:fc:06:a6:4a:ee:60:58:f2:77:
88:83:55:6d:26:c3:06:69:90:4d:9d:a4:7b:7f:98:
38:13:cc:18:f5:71:8f:5e:f6:da:20:45:b2:d9:46:
4f:a1:c3:93:3c:28:4b:5d:0d:2c:48:d2:80:f3:ae:
2b:c2:1b:07:26:d8:96:37:46:47:23:c4:6f:09:c0:
2e:a9:8c:42:ce:f5:f5:6d:20:4d:c2:0a:28:af:99:
6e:4a:d5:36:9c:5c:42:a5:a8:15:85:d6:52:6e:f7:
4e:11:40:42:1d:aa:85:5e:41:6e:44:81:c2:d0:85:
77:22:58:35:ee:7b:90:ac:33:4e:54:17:3f:a0:5e:
bf:64:b4:8a:88:2a:19:1f:67:6a:8e:40:50:8b:d0:
f0:af:8f:8e:2e:e1:97:b1:89:00:fd:b0:61:9d:1c:
f1:e2:1b:93:4e:fd:86:13:94:5c:02:b1:33:08:b0:
76:67:da:33:7d:75:d2:16:0f:d3:79:d4:83:d4:f8:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:9E:7F:97:A1:FD:D3:CB:FF:9A:57:73:FB:0C:6F:06:75:30:89
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/lYGef5eh_dPL_5pXc_sMbwZ1MIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
185.23.237.0/24
Signature Algorithm: sha256WithRSAEncryption
49:24:1b:05:8f:a3:2c:c3:6d:e3:c6:3b:e3:6e:d4:02:6c:bb:
91:e5:86:f5:46:05:d4:ed:b3:a9:76:7d:0d:19:bd:9c:e5:e6:
02:84:ac:2b:e6:62:ff:92:b7:b1:21:c8:d6:59:5d:9d:c2:18:
87:9d:5c:b9:55:24:18:35:d6:fd:55:b1:74:dd:7a:0f:49:e6:
e7:cf:af:23:da:f3:8f:f7:c8:9d:2b:84:aa:4b:b7:1f:70:fa:
8b:d3:be:40:7e:5e:44:af:2e:1b:46:6a:cc:2d:34:33:87:e4:
54:c8:1d:24:f3:6b:85:cc:da:7f:a8:6b:db:b7:19:08:ed:8b:
21:a2:b1:38:2b:d0:65:95:05:0d:c6:a8:60:e8:90:1b:ef:ad:
7f:b6:14:b8:bf:b7:38:87:af:d7:30:d7:32:7b:6a:43:eb:ef:
43:93:c0:64:6c:5b:6e:a7:03:c3:2c:14:c4:e6:87:a4:48:d1:
a9:61:e0:88:90:23:09:0f:2f:de:a1:20:55:bc:96:c7:16:48:
ff:7d:a5:7a:ef:b7:be:8c:d3:5c:9d:05:fd:8a:6b:5b:0e:e6:
c8:11:fd:50:51:da:3c:74:a5:7f:ba:cc:ce:ae:91:f0:ce:1c:
35:5a:0e:20:c9:3a:8d:4a:6c:c2:00:e3:54:7b:6c:3b:07:81:
fb:70:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client