Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa
File: 5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa (raw, json)
Hash identifier: 9uPoQd7e20GSb4ZNenQ4RHHLA/wWGAuknlkGqZ4eRPg=
Subject key identifier: E4:B0:20:45:29:7D:7C:58:72:FD:1A:D8:E9:8E:21:FC:8B:52:F6:9C
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019CBE7F68558533D550F25AB935009B24BD
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa
Signing time: Thu 05 Mar 2026 14:55:46 +0000
ROA not before: Thu 05 Mar 2026 14:55:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 176.105.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:7f:68:55:85:33:d5:50:f2:5a:b9:35:00:9b:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Mar 5 14:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4b02045297d7c5872fd1ad8e98e21fc8b52f69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:d5:1b:f7:7e:a8:1c:b6:39:53:3a:2b:40:
dc:19:65:a0:31:7b:80:27:d8:47:ae:6a:64:d8:10:
b9:5e:cf:45:ac:04:0a:8c:83:ae:8b:20:6f:a3:79:
5e:4d:5b:a4:f5:b9:3a:77:4c:8a:0d:a1:a2:dd:21:
26:2d:30:88:3e:cb:82:48:d8:e4:b8:9d:d2:7c:03:
91:3d:f3:ff:9a:b5:ac:5f:00:d3:8c:cc:52:08:de:
2c:43:4a:a7:b8:62:61:2a:a9:26:2d:18:69:51:7c:
9f:70:ae:e9:d0:70:0a:38:bb:0b:37:eb:06:ff:d2:
45:3d:de:8b:c8:da:67:01:22:a0:43:4c:7b:27:98:
06:93:e9:f6:96:c3:36:84:4e:be:ec:40:14:2b:e5:
3f:08:3b:80:1a:3f:0b:8e:e7:a1:20:48:ae:c6:eb:
73:fb:3a:dc:3c:15:6f:bb:40:5e:48:fc:19:7f:4d:
bc:cb:a3:95:c5:bc:55:ce:bb:bd:fd:79:91:3a:43:
12:26:35:29:f6:de:c8:e1:6a:e4:c2:74:07:5e:10:
77:4b:0e:63:54:37:b7:4e:a9:4b:4a:7e:ac:fd:80:
7d:07:aa:7e:ad:a0:8f:b8:2b:9f:f4:be:3d:c3:61:
4c:56:9e:ee:9a:7d:fe:18:fd:44:40:bb:c4:af:1b:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B0:20:45:29:7D:7C:58:72:FD:1A:D8:E9:8E:21:FC:8B:52:F6:9C
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
02:96:80:62:13:0c:31:20:55:7c:a8:4e:dc:a3:e2:3c:7b:c5:
ba:b6:1e:06:ec:87:52:10:0a:3e:f0:83:54:8a:ab:4a:45:2e:
77:2d:50:2b:79:74:98:29:cf:ec:4b:b4:5c:29:3f:a7:8e:e4:
3a:d7:2f:36:1b:07:df:83:5a:8f:18:1f:1f:aa:d4:d9:b3:31:
68:5d:82:d2:da:09:6c:bb:71:ed:c6:ab:f2:d5:3d:b6:23:dc:
68:b5:b4:ba:e0:65:af:07:4a:8e:16:b4:45:23:4f:77:80:18:
43:2f:ac:c3:e1:f9:5a:8a:08:1f:e1:53:75:5e:d2:75:92:62:
e8:1a:67:26:e7:d5:2d:e4:a2:72:49:88:3e:1b:5b:40:36:aa:
5e:69:3c:1e:35:84:13:f6:53:06:06:b2:b0:e9:4c:86:88:58:
2f:80:e4:43:0f:e3:39:c1:aa:6f:7a:88:99:34:e5:73:f0:65:
22:83:ea:21:02:f6:57:25:bf:25:ed:5c:2c:97:cc:94:2e:77:
90:9f:f7:94:5f:67:f3:24:86:da:51:1b:2a:5d:49:32:e4:f0:
5a:b6:e8:8a:e9:45:69:ee:55:aa:6f:bc:b7:28:ac:16:ae:fd:
34:22:27:98:e2:51:19:8a:d8:b8:a7:10:46:fc:55:6f:57:ee:
8e:94:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:13:38 2026 by rpki-client