Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/5HIB4XdFvUnYx8q0lLws_OpypiI.roa
File: 5HIB4XdFvUnYx8q0lLws_OpypiI.roa (raw, json)
Hash identifier: SmHZRFszjS8iXB/TCR3lbdZL3Jg43B7hycjvKJTAA7g=
Subject key identifier: E4:72:01:E1:77:45:BD:49:D8:C7:CA:B4:94:BC:2C:FC:EA:72:A6:22
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23685CDC6077AD1300002D6D0CE86C47
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/5HIB4XdFvUnYx8q0lLws_OpypiI.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43278
IP address blocks: 189.74.109.0/24 maxlen: 24
189.74.110.0/24 maxlen: 24
189.74.111.0/24 maxlen: 24
201.50.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5c:dc:60:77:ad:13:00:00:2d:6d:0c:e8:6c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e47201e17745bd49d8c7cab494bc2cfcea72a622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:fb:15:8e:3c:dd:f9:30:4f:02:3c:27:73:
0a:1e:85:47:83:47:69:6e:70:b7:f8:15:bd:1b:7b:
a7:25:fe:f4:6b:5a:e1:a4:bb:78:04:40:11:64:da:
2d:9b:a5:e6:93:2c:9c:0b:02:b9:6e:16:b3:30:7a:
3a:3f:94:6a:c4:a0:27:f1:d7:63:13:aa:d0:42:a5:
25:ba:1e:87:2e:32:e9:d2:95:ec:fb:89:9a:b1:ed:
5c:d8:48:1c:e4:71:b6:de:4c:b0:2b:f3:b7:82:bb:
d9:d6:19:dd:4c:dc:ee:95:36:b5:61:b0:fa:6d:dc:
89:a4:52:31:cd:9e:5d:41:4e:b6:8e:9f:3c:a9:9c:
8e:9d:68:ed:4b:b5:ac:a7:35:20:86:9e:3a:61:64:
a8:79:54:43:e0:46:a0:e9:38:2b:9e:bf:bd:34:9e:
de:78:a4:f3:a5:7a:81:b8:f9:ac:81:08:b0:ac:2d:
12:84:aa:5b:83:07:2f:54:5d:39:62:05:f0:10:20:
fb:f4:f7:d3:94:74:2d:56:6b:3d:c1:05:94:8f:54:
5f:99:a8:e4:d9:8c:c0:5e:b7:13:a6:32:f1:fa:51:
03:01:86:43:18:a0:a0:8f:eb:29:78:73:a4:2b:bf:
cd:94:32:86:1b:71:4c:a9:e1:d6:c9:21:58:d3:94:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:01:E1:77:45:BD:49:D8:C7:CA:B4:94:BC:2C:FC:EA:72:A6:22
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/5HIB4XdFvUnYx8q0lLws_OpypiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.109.0-189.74.111.255
201.50.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9e:30:87:74:0b:58:b2:8c:e7:1b:6b:65:99:58:5a:a1:12:
be:a5:4a:3a:f2:fa:a7:13:68:71:32:a5:97:27:20:f7:73:6b:
b3:aa:77:29:88:d6:89:a9:54:7c:cd:d0:c9:93:66:cc:09:80:
37:57:91:35:81:be:ac:36:99:37:85:78:53:c5:89:13:0f:e8:
f3:a2:c9:c6:31:fe:c8:f5:bb:9e:31:be:d7:8b:b2:64:ba:96:
54:10:51:0d:3e:e8:f3:af:fe:d8:6d:af:8c:7e:32:b6:c4:4d:
74:15:47:ba:6b:be:16:ff:d4:02:53:98:78:fe:74:7a:42:0b:
15:28:65:da:ad:1b:f9:16:a0:37:54:aa:9f:35:60:a0:b3:8a:
d8:4f:23:cc:e5:40:29:97:43:22:4c:da:9b:b6:1b:66:5c:eb:
b9:4d:8a:83:d6:33:2c:e5:9c:d8:bb:e7:fe:5f:81:b2:68:27:
d6:35:50:bc:ef:43:16:04:7f:33:47:17:a8:be:fc:ae:60:eb:
37:2f:86:7f:e1:c2:bb:34:cb:8a:24:f0:69:13:fc:16:31:ec:
c0:19:b6:70:5a:47:7f:b5:a0:59:de:af:02:19:5e:d1:70:c3:
44:93:99:0a:31:ef:3d:d7:74:f7:91:a1:08:19:5c:fd:9b:84:
ac:91:aa:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:37 2026 by rpki-client