Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/1SuENHssfHS2BBIQfZ94NFfskM0.roa
File: 1SuENHssfHS2BBIQfZ94NFfskM0.roa (raw, json)
Hash identifier: 6nFnGCnUrqB2j5AhFglepLVxr4mMDjzgmMpNvQEKC+s=
Subject key identifier: D5:2B:84:34:7B:2C:7C:74:B6:04:12:10:7D:9F:78:34:57:EC:90:CD
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01A176E0CB0C1FF3385354C0B0B89CBE2893
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/1SuENHssfHS2BBIQfZ94NFfskM0.roa
Signing time: Mon 26 Oct 2026 06:23:25 +0000
ROA not before: Mon 26 Oct 2026 06:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6736
IP address blocks: 5.160.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:e0:cb:0c:1f:f3:38:53:54:c0:b0:b8:9c:be:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Oct 26 06:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d52b84347b2c7c74b60412107d9f783457ec90cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:3b:e6:57:19:d6:da:36:d0:4d:30:73:7f:
ab:ab:23:98:24:43:03:8f:80:73:57:74:1c:e3:3a:
d7:ac:45:51:f4:c8:e6:63:5d:a2:20:f8:dc:ca:64:
27:7e:43:76:62:7a:17:31:b2:77:90:93:0a:fc:d2:
ed:27:4e:45:25:61:98:32:36:92:3c:30:84:d6:48:
af:e2:ed:b3:ca:d6:d6:90:10:be:77:03:14:36:e7:
3c:c5:25:1d:17:ae:ee:7c:b4:75:b4:58:71:9f:e0:
ae:69:40:c1:35:23:6d:a3:6a:f6:dd:e0:09:38:13:
d3:99:ee:76:92:04:f1:25:38:ab:23:17:51:94:cd:
42:74:12:66:cb:f7:29:e0:07:fa:25:24:39:3b:e7:
bb:86:ff:ed:ea:fd:71:65:7e:4e:b8:6c:f9:dc:7e:
d6:75:a5:96:3e:47:6e:ba:d1:42:42:96:1b:47:8b:
25:7a:e4:96:57:96:38:cd:18:f0:57:59:e8:37:01:
79:0f:78:fe:c6:8d:8c:d8:ef:04:5c:db:4f:31:7a:
01:9e:07:51:e8:8c:e3:c8:38:a4:84:b9:30:22:01:
14:66:08:ca:27:ba:49:0c:cc:19:06:13:dd:52:5b:
a1:53:df:cf:d8:7d:08:f1:92:42:fd:3c:4c:ff:86:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:84:34:7B:2C:7C:74:B6:04:12:10:7D:9F:78:34:57:EC:90:CD
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/1SuENHssfHS2BBIQfZ94NFfskM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9c:e3:af:e2:dc:e1:26:32:24:39:bc:07:1a:c6:8f:df:f4:
71:41:f7:85:50:06:88:ad:fe:3e:27:11:3e:88:0a:46:bd:98:
b0:ef:90:b6:cf:18:7e:3d:b8:9f:ca:18:54:44:35:8c:98:94:
f8:0e:f6:cc:d1:11:e2:1c:82:cc:f4:66:93:72:eb:bb:eb:ad:
d9:88:85:7b:d2:bc:35:a5:75:7d:67:2d:a1:1b:eb:eb:64:f6:
60:b6:69:38:61:be:58:07:07:42:87:8f:dc:c0:b7:6b:ac:a5:
69:d2:52:0f:75:9e:a4:0e:5f:2a:6d:e3:1a:ca:be:5e:9f:0f:
fb:a9:60:80:7c:86:93:97:0d:ad:34:b8:e3:0f:ae:ab:fd:30:
59:14:f2:35:90:f7:bd:93:58:2e:93:3e:df:50:a7:06:99:c5:
d9:bc:fd:6e:06:0e:76:45:40:7b:a0:39:a1:c6:b8:28:ef:4e:
00:55:90:c1:07:d2:a4:13:bb:7a:99:8e:ad:db:b9:be:24:21:
56:47:ed:c3:e3:8f:e0:bc:3e:83:31:82:a2:68:4e:ec:6f:3d:
23:0c:26:3a:18:32:fc:c4:06:65:5a:bd:34:49:d5:82:1b:94:
08:16:3f:3f:c4:fe:1b:0a:66:43:ae:d9:e3:b5:01:1e:fd:a3:
c9:00:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:46 2026 by rpki-client