Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa
File: INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa (raw, json)
Hash identifier: +5qeByzEneEsC8OBCRKdqJbbnxdRus+dvidceYaX+Zw=
Subject key identifier: 20:DB:A3:FA:67:46:B7:AA:D5:8E:CD:EF:17:EB:6A:93:3F:99:4E:76
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A063DFB5D6FAA917A3782E0194ED4FE77E
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa
Signing time: Wed 02 Sep 2026 20:46:40 +0000
ROA not before: Wed 02 Sep 2026 20:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 130.78.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 13:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:df:b5:d6:fa:a9:17:a3:78:2e:01:94:ed:4f:e7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Sep 2 20:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20dba3fa6746b7aad58ecdef17eb6a933f994e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:a6:f9:f7:11:23:f8:f6:32:7f:ee:ad:85:
ea:a1:aa:ca:82:c3:21:91:12:be:ae:47:d9:84:c9:
89:63:d2:80:57:fa:44:26:15:51:13:e8:d5:0f:3a:
a2:cd:85:2a:6c:ed:f9:4c:2c:99:67:89:27:af:af:
f2:39:16:d6:0c:69:51:2d:d0:22:fd:d6:35:11:08:
fb:c9:1d:83:ca:9a:24:78:69:61:2e:f6:3a:f4:a7:
62:7f:77:5f:9f:d1:e1:ba:9f:71:ec:20:99:82:97:
a0:5a:28:4f:bb:f8:df:20:18:aa:9b:f4:71:6f:5b:
37:2c:10:09:ea:5d:41:c2:0a:05:49:f3:e3:14:bb:
e5:e8:06:db:05:66:2b:a1:3b:d8:84:61:f3:b9:71:
c3:1f:98:2a:83:5b:bb:91:3d:c5:59:14:2b:78:76:
5a:13:fa:25:c0:b8:fc:a3:d9:35:5a:13:f2:44:48:
7b:03:cf:13:b6:fb:58:cd:6b:d5:a3:36:cc:94:05:
f9:5c:bf:73:b3:88:76:95:0c:64:b8:6d:14:4d:8e:
b3:d7:69:6a:bf:26:74:c1:64:12:03:d3:80:e1:35:
f1:22:71:e4:6f:5b:8b:17:21:ac:3c:be:0c:c8:b2:
18:4a:6c:f8:63:05:cd:80:1d:27:bf:40:4e:ab:e4:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DB:A3:FA:67:46:B7:AA:D5:8E:CD:EF:17:EB:6A:93:3F:99:4E:76
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.186.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7b:12:04:b0:b0:fa:8e:fc:d3:37:af:48:5e:89:1a:15:62:
8c:b7:5e:f7:74:b1:31:27:5c:85:8c:40:34:eb:1d:26:e1:fe:
2b:36:23:0b:55:8d:5b:32:78:90:2f:00:59:3b:e3:34:45:bb:
fa:e0:7a:44:4f:b5:a7:f6:be:7c:a0:18:62:b1:5a:31:b0:82:
12:1f:42:b8:5a:8e:cf:84:42:30:96:f2:9d:50:55:55:06:12:
ef:1a:9c:22:d0:ee:13:40:f1:c0:b6:e6:8c:fb:6d:fc:b8:32:
62:f7:6b:e5:ed:9e:f1:2d:9e:ea:13:83:c2:74:01:4b:32:17:
75:5b:69:c1:7e:e6:5b:ef:a9:f1:76:00:41:49:2e:c1:7b:0f:
90:3b:e6:28:14:ff:0f:bd:b5:93:c3:92:b0:cb:dc:92:fb:6b:
a2:44:d5:4a:5c:29:8e:01:70:4b:53:46:ed:99:42:1f:58:a1:
62:24:d4:ae:18:7b:c3:80:ae:6b:7e:bd:07:3c:0f:b4:e2:26:
b0:30:ef:d1:be:17:81:1a:30:e8:90:01:e6:3c:ea:66:d0:4c:
43:b6:16:31:c0:dc:f9:5d:a5:e5:d5:96:7e:1f:39:b9:a7:32:
86:01:c2:5f:0e:04:e3:e4:4e:2a:19:38:42:e4:69:01:83:0d:
2f:b9:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 22:57:16 2026 by rpki-client