Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/c669fb-6026-46d9-926a-57b199d27aec/1/5qV27_fVyE9s9-YKhBrfWrMj3FQ.roa
File: 5qV27_fVyE9s9-YKhBrfWrMj3FQ.roa (raw, json)
Hash identifier: /4YcoJE44ZouhSnIdkSg5nODy0cbQBWsomNFckXbvy0=
Subject key identifier: E6:A5:76:EF:F7:D5:C8:4F:6C:F7:E6:0A:84:1A:DF:5A:B3:23:DC:54
Certificate issuer: /CN=7ede3b403658078f5e3fe94d373218e31bf090eb
Certificate serial: 01A11FAAFA4ED0BBC58B24425B441876855F
Authority key identifier: 7E:DE:3B:40:36:58:07:8F:5E:3F:E9:4D:37:32:18:E3:1B:F0:90:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft47QDZYB49eP-lNNzIY4xvwkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c669fb-6026-46d9-926a-57b199d27aec/1/5qV27_fVyE9s9-YKhBrfWrMj3FQ.roa
Signing time: Fri 09 Oct 2026 07:57:41 +0000
ROA not before: Fri 09 Oct 2026 07:57:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 130.66.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c669fb-6026-46d9-926a-57b199d27aec/1/ft47QDZYB49eP-lNNzIY4xvwkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c669fb-6026-46d9-926a-57b199d27aec/1/ft47QDZYB49eP-lNNzIY4xvwkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ft47QDZYB49eP-lNNzIY4xvwkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:aa:fa:4e:d0:bb:c5:8b:24:42:5b:44:18:76:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ede3b403658078f5e3fe94d373218e31bf090eb
Validity
Not Before: Oct 9 07:57:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6a576eff7d5c84f6cf7e60a841adf5ab323dc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:36:f3:ac:f3:24:bd:8d:91:65:ae:c7:ca:
e2:4f:29:b2:22:06:05:bd:43:79:4e:f4:b4:d6:f9:
0c:84:d5:29:f6:60:82:d6:e5:25:16:bc:ed:7f:70:
22:a2:7d:dd:82:f1:cd:89:7a:bc:15:81:ab:34:d2:
a4:52:1d:c5:a1:ae:c6:3b:1a:6b:26:78:83:02:95:
83:7d:ed:84:16:69:9b:65:f4:82:ae:7a:51:fd:7e:
fa:c7:a4:36:30:cb:c2:39:08:ba:6a:26:f2:cc:b6:
27:cf:88:a6:d0:5e:28:c9:3b:5d:a5:a6:5f:25:e4:
3d:de:80:02:5b:fa:eb:ea:77:ca:47:38:4f:3c:5f:
d4:36:89:13:8b:4f:b1:23:31:4a:2b:f7:57:4d:27:
93:03:dc:34:21:52:ea:f7:28:cf:be:61:4f:b7:5d:
bc:f9:c9:a8:13:4a:5c:19:a6:f7:54:93:bc:6e:04:
08:c9:4f:3c:85:38:05:4c:38:b2:c2:c2:09:e3:d7:
6b:5c:e5:8c:17:2c:57:90:57:19:ce:6e:ca:8e:67:
04:05:1f:8d:c7:89:f0:9a:4d:2b:7e:9d:cb:ee:a4:
53:5f:b1:4f:4b:48:a9:a4:7f:11:7b:e4:13:de:23:
bc:28:e6:c2:c6:c0:0b:2f:53:d9:17:2d:d9:9e:87:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A5:76:EF:F7:D5:C8:4F:6C:F7:E6:0A:84:1A:DF:5A:B3:23:DC:54
X509v3 Authority Key Identifier:
keyid:7E:DE:3B:40:36:58:07:8F:5E:3F:E9:4D:37:32:18:E3:1B:F0:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft47QDZYB49eP-lNNzIY4xvwkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c669fb-6026-46d9-926a-57b199d27aec/1/5qV27_fVyE9s9-YKhBrfWrMj3FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c669fb-6026-46d9-926a-57b199d27aec/1/ft47QDZYB49eP-lNNzIY4xvwkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:bc:eb:f3:f6:16:b0:13:fe:07:f4:d5:17:c0:72:15:51:cd:
1f:fd:ca:e4:3d:fe:50:ca:4d:61:28:4c:65:b0:e0:bb:c9:9b:
68:21:a7:da:97:38:17:f3:0d:14:fe:50:19:8e:23:5d:3c:62:
5d:80:18:73:fa:46:2b:4f:80:5b:75:84:34:26:4b:4a:66:90:
bf:89:9a:1a:8b:28:7f:54:ed:b6:90:4f:07:fe:d5:55:10:02:
3c:f5:c3:22:ae:70:12:d8:2d:a0:68:01:9e:0e:7c:51:bc:c1:
29:24:1c:62:f5:52:01:a3:85:72:3b:04:73:a0:f2:f2:92:20:
e2:9e:96:8f:9c:d1:2d:39:c8:3e:8d:d5:98:ef:19:6c:1b:3a:
2e:e7:37:6f:1d:72:42:a2:f5:21:6d:01:38:ab:a1:84:6c:91:
f6:09:2b:51:b8:26:ae:a8:07:06:e7:f2:12:c8:c6:87:30:96:
6e:c7:8d:c9:42:16:f8:d8:88:a1:91:a0:4a:74:57:0a:92:53:
08:4f:f9:47:79:63:7f:44:d6:4f:8c:ee:a7:f4:75:b0:65:8e:
a3:96:6a:d4:d1:d7:a7:fd:74:38:1b:80:9f:ef:7d:76:a1:82:
47:e2:11:d0:03:3e:f3:83:e0:7d:4d:fb:f7:a6:03:a6:e6:90:
b0:4b:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:18 2026 by rpki-client