Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/K5IqS4P79U0rKvWInjWR5wEFe2Q.roa
File: K5IqS4P79U0rKvWInjWR5wEFe2Q.roa (raw, json)
Hash identifier: 9q13mYvOIEN+e4PDt27Up4NO4FxU8lAzXOS+dNjdg84=
Subject key identifier: 2B:92:2A:4B:83:FB:F5:4D:2B:2A:F5:88:9E:35:91:E7:01:05:7B:64
Certificate issuer: /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial: 019F2368EC2890FFB91B6C328BEF1A7501FB
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/K5IqS4P79U0rKvWInjWR5wEFe2Q.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.154.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:28:90:ff:b9:1b:6c:32:8b:ef:1a:75:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b922a4b83fbf54d2b2af5889e3591e701057b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:de:b5:6f:97:8d:56:46:7d:0f:73:c6:3b:
aa:da:0d:49:7a:5f:f0:21:45:51:06:ae:ca:97:f9:
7d:b5:a2:3f:75:67:14:a4:e2:d1:97:38:4b:9f:c1:
20:26:c6:47:f3:32:11:77:05:91:75:7d:c0:b5:e7:
e8:4c:10:4c:16:04:f5:2a:33:b0:6c:df:c6:52:e8:
af:74:e0:6d:60:ea:87:44:5e:6a:c3:10:3a:5f:46:
59:99:bf:ce:ce:e8:29:e5:a0:e2:d1:5b:f4:18:03:
79:b2:22:8b:71:8e:8c:d0:ee:70:ad:cf:d3:76:14:
97:7f:60:8a:cc:13:77:c2:75:e4:e9:10:12:01:88:
ad:e3:da:67:16:04:6a:a5:55:38:fb:89:af:26:82:
3f:e0:4c:a5:d5:3c:93:e6:ea:45:bb:5a:07:d6:59:
4c:1c:86:fa:70:dd:7b:e4:e1:96:17:04:26:c1:02:
7f:8b:51:7b:04:6c:76:4d:f6:06:7a:e0:74:ce:8e:
e4:11:6a:06:93:5c:08:7d:d0:41:90:f5:8f:67:37:
43:6c:07:5d:18:3d:9f:04:80:e2:f0:3c:1c:be:f8:
7b:3a:fd:cb:6b:dc:cc:42:69:22:cc:f7:9c:95:e0:
57:c5:d5:c7:3a:30:b6:62:15:fd:1f:8d:13:fd:d6:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:2A:4B:83:FB:F5:4D:2B:2A:F5:88:9E:35:91:E7:01:05:7B:64
X509v3 Authority Key Identifier:
keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/K5IqS4P79U0rKvWInjWR5wEFe2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.152.0/22
Signature Algorithm: sha256WithRSAEncryption
78:59:a1:7c:cf:6a:e5:bd:dc:90:d0:3b:a7:10:1c:79:16:24:
9e:bc:8d:51:d8:b9:62:d4:cd:f1:d7:9c:cc:ad:21:02:fc:41:
f4:f3:bf:28:92:30:86:43:f1:95:a0:fd:63:3c:b0:54:a6:a7:
e4:4d:16:da:f5:a2:8a:99:f5:cd:41:3e:34:6b:0e:d7:ec:02:
99:10:e1:1e:f2:e4:68:ab:9c:3b:fe:29:11:9d:ab:91:29:7d:
a3:88:a2:80:df:00:2e:2e:e9:c4:fa:0c:be:09:a0:8e:53:9f:
60:4b:4f:3a:fe:5d:8c:6f:80:f2:4c:a7:55:d2:f2:7e:ec:fb:
39:af:94:63:b1:03:52:76:97:a8:1a:96:a7:10:a2:dc:65:d8:
0e:82:58:d0:74:b5:a1:04:3d:3a:58:5f:9e:42:62:19:f8:ad:
71:1f:3c:11:82:c5:72:2e:a8:2b:59:0e:58:86:a2:8e:f3:ff:
95:2b:b1:63:83:65:cd:c5:a9:c9:a7:e5:72:51:63:60:11:a6:
8b:36:f1:bb:4d:22:dd:36:69:2a:d5:3e:83:c1:51:9a:54:33:
5f:0f:76:4a:0d:af:4f:15:7b:02:c8:e5:44:8b:85:20:37:55:
a7:cf:0a:48:c1:62:ad:79:99:1b:27:c6:9d:ed:4c:9c:9b:e8:
35:9d:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:13 2026 by rpki-client