Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/b5_COOMkuwt2UFmsw8RZDUdu2bU.roa
File: b5_COOMkuwt2UFmsw8RZDUdu2bU.roa (raw, json)
Hash identifier: SCz+3vlllNscZmO4r92p0VfL8FTVpL4+e6YHq26D4Zs=
Subject key identifier: 6F:9F:C2:38:E3:24:BB:0B:76:50:59:AC:C3:C4:59:0D:47:6E:D9:B5
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0E865B663D0F231BE8BC4684908DE7ED7
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/b5_COOMkuwt2UFmsw8RZDUdu2bU.roa
Signing time: Mon 28 Sep 2026 14:22:54 +0000
ROA not before: Mon 28 Sep 2026 14:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:65:b6:63:d0:f2:31:be:8b:c4:68:49:08:de:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 28 14:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f9fc238e324bb0b765059acc3c4590d476ed9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:3b:e8:04:51:09:b7:8a:95:24:8e:77:71:
c2:ad:69:14:1d:ff:e0:68:85:2c:0f:e6:24:a6:f2:
26:df:b8:7b:48:0e:fa:6e:c4:a1:9c:4e:80:ec:66:
e5:90:5e:eb:46:0b:8e:0d:e4:7f:9f:6d:5d:05:45:
c3:90:4e:34:6a:e5:90:f3:01:9e:5a:55:48:04:ad:
7c:f6:b9:db:65:0d:8a:b1:0c:55:18:b5:3a:f8:a0:
51:91:2d:9a:c8:65:4b:ed:43:f9:13:6a:7d:4c:68:
a2:92:7c:96:94:ed:f0:13:10:68:01:d6:5b:87:99:
81:a5:a1:39:77:80:ec:3d:90:bf:27:da:2f:6a:53:
c4:53:2f:23:b6:e7:12:e4:58:36:ad:bf:97:e8:23:
c3:6d:c8:0b:ba:cc:c2:81:49:45:08:c5:5e:eb:b0:
6a:94:ad:54:31:9f:10:1a:17:f1:f5:d5:58:79:fc:
a7:21:96:ef:78:9c:ef:6a:56:ba:53:10:d6:28:eb:
28:72:f5:bb:3f:a7:24:c0:6f:c3:31:58:f4:65:0a:
53:c5:01:4b:8a:41:8a:1e:0b:e9:fc:34:98:2b:22:
6d:df:3e:26:93:ea:33:b1:16:2b:0c:9a:84:11:fe:
77:e7:fe:ef:21:91:34:d7:1d:8e:d0:78:e2:00:0b:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:C2:38:E3:24:BB:0B:76:50:59:AC:C3:C4:59:0D:47:6E:D9:B5
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/b5_COOMkuwt2UFmsw8RZDUdu2bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:51:66:4a:da:11:a3:28:44:a3:42:98:22:2b:13:86:e0:54:
05:7b:4b:c8:54:95:67:2b:bd:e7:21:57:1d:da:b9:46:65:4e:
b2:1a:0f:dc:0e:99:c2:b3:25:cb:77:77:d3:11:f9:75:3a:db:
d1:5e:f2:77:d4:6d:f0:56:56:39:f7:f0:7a:d4:69:57:ce:1b:
90:f7:a2:4e:b8:ff:c4:30:15:cf:1b:20:dd:e0:b5:7f:6f:af:
ad:c8:28:3c:7b:2d:a6:89:b7:3e:86:08:23:12:60:9a:6c:eb:
78:12:ee:e1:5c:2b:a8:3f:41:50:e0:ba:1c:34:b3:68:95:bb:
4b:4f:79:c7:d7:74:28:5b:a0:b9:b8:ab:7e:60:f9:3d:d5:1f:
05:ec:97:66:a9:b7:d8:05:24:1a:67:22:25:5a:72:46:bc:b7:
fd:ec:33:40:b3:a7:67:45:e0:87:b0:2c:bd:64:d5:4b:7d:93:
ce:36:10:e2:f0:6a:0a:34:fb:62:eb:d3:7e:d8:74:75:94:50:
be:f9:1c:ff:a8:c0:ec:f4:33:c4:fa:7a:d8:94:ab:a9:bf:93:
72:74:ba:14:bd:3f:35:6b:06:c1:28:6f:90:a1:71:ca:26:92:
ae:d6:00:cf:39:88:63:76:21:a0:75:9f:ee:d2:32:1b:f1:fe:
50:98:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:16 2026 by rpki-client