Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/moHUwa5TUE9Rz_3l4JuK_Hop4LY.roa
File: moHUwa5TUE9Rz_3l4JuK_Hop4LY.roa (raw, json)
Hash identifier: Y2lrXAI9ZJ6+QUULn7qfLqkQaRC1K29BaYgS1Vfp+S0=
Subject key identifier: 9A:81:D4:C1:AE:53:50:4F:51:CF:FD:E5:E0:9B:8A:FC:7A:29:E0:B6
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1441ED834521C6506A821BAB79F3D340F
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/moHUwa5TUE9Rz_3l4JuK_Hop4LY.roa
Signing time: Fri 16 Oct 2026 09:50:34 +0000
ROA not before: Fri 16 Oct 2026 09:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56630
IP address blocks: 187.7.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:1e:d8:34:52:1c:65:06:a8:21:ba:b7:9f:3d:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 16 09:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a81d4c1ae53504f51cffde5e09b8afc7a29e0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:62:61:b1:bf:13:48:88:04:c5:75:cf:2b:
6b:bf:cb:e0:b0:5f:a6:53:6d:80:2a:bc:52:f9:a7:
ef:b9:e6:6b:30:ee:64:81:ee:b0:c8:13:dc:73:9c:
10:c0:96:d3:e6:e2:c0:66:bb:a8:ec:f9:fb:f6:ef:
4d:95:be:97:2f:0e:90:3c:1b:3e:88:b1:99:c9:fe:
13:0c:f9:d7:a5:0c:70:14:e8:c4:ee:35:dc:3c:7f:
52:56:e5:2a:3f:66:61:c1:92:57:73:db:0f:ab:36:
e2:c1:17:8e:70:d3:9f:81:54:d9:a9:4a:53:c7:69:
95:fd:c6:9d:cb:23:2e:c7:3f:40:29:44:f0:72:3c:
92:68:f6:95:79:bd:07:73:a3:8b:40:18:7b:51:a7:
3d:ec:c2:96:18:66:70:0d:f1:2a:8b:29:ea:91:2b:
95:cf:4d:9a:a3:4b:2c:a8:c9:12:df:a6:7a:38:a8:
1e:af:9e:d0:d6:27:28:e8:8f:25:b8:4d:e9:a5:38:
63:a8:86:cd:eb:ed:1d:eb:5c:e5:53:44:f2:89:06:
e7:56:7c:9b:4b:be:60:40:40:3f:ab:12:04:83:77:
b6:d1:52:c5:db:4b:72:39:0c:28:96:de:32:3c:16:
f4:d3:7e:99:3d:28:c6:61:98:f2:d6:67:89:87:22:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:81:D4:C1:AE:53:50:4F:51:CF:FD:E5:E0:9B:8A:FC:7A:29:E0:B6
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/moHUwa5TUE9Rz_3l4JuK_Hop4LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.204.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e9:b4:9d:3f:0d:08:09:16:29:2b:62:1d:f7:5c:97:7d:67:
9f:99:ca:3a:b1:1b:87:76:72:8b:ce:49:80:fa:63:60:8d:20:
8e:66:64:06:58:bf:19:36:da:57:fb:b8:9b:e7:7c:69:f3:2f:
8d:e6:65:70:cb:73:de:b3:43:21:ae:a0:a3:b6:5a:fb:58:95:
4a:4e:f1:12:0f:b0:f6:5b:7d:12:7d:e6:42:40:da:5a:22:bf:
27:18:78:ea:55:a2:a9:c0:ae:63:3e:09:fd:0e:b9:14:5d:3c:
f6:38:c3:d9:a1:4a:1e:b5:f9:c5:e2:d1:de:74:b8:12:8e:04:
0e:97:6c:f9:3e:92:83:ac:5b:ea:97:03:c7:fd:c2:ba:52:48:
82:38:d2:ae:86:ce:c2:c7:f2:33:2d:b0:96:9c:49:f9:af:bb:
4e:a4:46:db:45:36:bc:6d:e8:34:ad:21:3f:63:a9:7b:d6:82:
d7:95:34:46:1d:3a:82:fa:66:8d:2f:d4:27:d9:33:fb:be:6f:
90:d1:0a:0b:29:c7:ee:1a:77:71:73:0a:ca:bd:a3:6d:8f:f7:
63:9d:28:ff:2d:93:c8:64:fc:13:58:f9:1d:a8:f5:b7:ea:2e:
49:54:cb:3e:86:ba:4b:ac:b0:6d:07:46:d7:a3:02:54:4f:32:
83:ab:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:46 2026 by rpki-client