Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YAGl6qikwFEEjEWttZ3OFdbk5Jk.roa
File: YAGl6qikwFEEjEWttZ3OFdbk5Jk.roa (raw, json)
Hash identifier: 04VvVFi2VKZgkWHLX29oG6ZweKgZr26p6Y10SiGWc5E=
Subject key identifier: 60:01:A5:EA:A8:A4:C0:51:04:8C:45:AD:B5:9D:CE:15:D6:E4:E4:99
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01A02E0F9375780532D86E7DB70E0A5D7F30
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YAGl6qikwFEEjEWttZ3OFdbk5Jk.roa
Signing time: Sun 23 Aug 2026 09:59:27 +0000
ROA not before: Sun 23 Aug 2026 09:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214475
IP address blocks: 5.160.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:0f:93:75:78:05:32:d8:6e:7d:b7:0e:0a:5d:7f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Aug 23 09:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6001a5eaa8a4c051048c45adb59dce15d6e4e499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:e5:ed:b7:43:d1:a5:1f:23:23:82:43:a4:
18:35:13:25:80:ce:79:9d:f3:ea:97:2a:85:96:61:
81:a6:ed:ab:b2:f9:6c:0d:3a:3f:7e:82:3e:2e:71:
84:0c:d3:eb:17:dd:6b:d7:ca:b3:b4:e0:9d:24:61:
17:44:91:12:77:08:fd:d3:8e:cd:c6:e3:11:e7:a0:
61:9e:28:87:73:96:71:28:f1:26:56:c2:18:54:55:
21:9b:40:ad:e6:cc:b0:cb:99:61:13:66:f3:71:64:
83:18:e3:c1:72:1b:9d:7d:ea:56:bc:49:76:f7:10:
08:c6:b7:7f:0f:7a:bb:d8:04:31:41:bd:48:5e:3e:
80:e4:f1:38:85:c4:1e:ff:6e:f0:dd:88:95:b1:57:
ce:0f:8a:75:d1:72:8b:47:6b:9b:43:33:e6:e2:d0:
06:1e:6a:e1:d9:9c:a9:fe:c0:2d:bd:ab:2d:9f:8d:
da:75:4b:b1:6c:27:bd:07:5d:14:d6:cf:cd:fa:70:
6f:db:6b:56:78:72:4e:ea:bf:08:b8:c4:1d:31:06:
21:1a:d5:bc:e4:44:42:89:30:19:e6:1c:c6:05:ad:
2e:79:9b:52:96:6e:ea:81:a9:4b:6f:30:77:0b:8e:
5d:9f:0f:1e:aa:3e:36:e5:0a:3a:93:e4:12:21:9a:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:A5:EA:A8:A4:C0:51:04:8C:45:AD:B5:9D:CE:15:D6:E4:E4:99
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YAGl6qikwFEEjEWttZ3OFdbk5Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.37.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5a:4e:06:cd:71:bb:74:a5:c8:a1:c2:aa:6e:95:3c:a0:48:
be:43:2c:3e:5d:52:5f:08:8d:e4:be:1a:3e:43:0c:ac:c2:ea:
b0:f0:b1:21:bd:1b:7c:b2:7d:c8:22:bc:49:9f:00:8e:63:b7:
39:f0:66:65:b6:34:85:24:5d:c5:03:88:4d:9a:7b:fd:65:ff:
62:a4:b9:40:8e:98:9a:e3:c5:81:c8:35:aa:7e:86:01:c0:39:
91:b0:a0:00:72:a2:9e:70:2d:23:ba:1e:23:d2:a3:ed:a3:fb:
da:d7:1f:21:34:07:34:7a:36:05:0d:0f:f7:98:e1:65:18:ea:
5e:fe:bb:f0:93:d8:bc:97:3e:0a:70:e7:2e:b5:3e:6b:45:2e:
55:34:00:c1:db:36:63:df:da:92:41:f6:4a:bf:8a:31:e5:68:
75:67:66:ea:40:82:be:8c:a0:2a:0b:6e:6a:93:b1:6c:28:77:
92:8e:91:c3:01:9b:83:f5:8b:0d:c8:d7:ae:81:33:45:20:c8:
00:47:ba:c7:f3:41:46:2a:fb:59:72:84:2b:73:d9:11:ec:df:
10:34:29:cc:87:05:24:5f:e2:6a:71:cd:ea:86:d9:08:dd:0a:
c4:0e:e4:a5:20:e5:0a:f2:0a:95:b6:82:fc:be:46:cd:ee:b5:
d7:58:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:29 2026 by rpki-client