Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/J94Ph5ck7enH36KLAo0q7sehkDs.roa
File: J94Ph5ck7enH36KLAo0q7sehkDs.roa (raw, json)
Hash identifier: tFAQN7l0foOD5FNqpnDpo4ufVC2+YXU4Iia2mg6KkgY=
Subject key identifier: 27:DE:0F:87:97:24:ED:E9:C7:DF:A2:8B:02:8D:2A:EE:C7:A1:90:3B
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 01A16FFABD34B942A585DAE40BDFAD1B75FA
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/J94Ph5ck7enH36KLAo0q7sehkDs.roa
Signing time: Sat 24 Oct 2026 22:14:25 +0000
ROA not before: Sat 24 Oct 2026 22:14:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 5.252.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:fa:bd:34:b9:42:a5:85:da:e4:0b:df:ad:1b:75:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Oct 24 22:14:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27de0f879724ede9c7dfa28b028d2aeec7a1903b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:c0:cb:ba:a7:de:9f:09:b4:e2:61:14:f1:
77:f6:86:05:3d:b1:10:ff:47:27:48:dd:66:b0:2a:
5c:8e:4a:9e:24:69:f2:8a:b3:ff:37:3d:af:dc:52:
cb:06:bd:32:6b:73:e9:26:7a:6b:ba:77:36:1c:75:
f7:09:5d:34:ae:84:f6:90:a9:1d:0a:09:e1:b4:b6:
06:38:9e:cb:56:89:00:e2:ec:04:cc:4f:b7:01:e8:
11:96:35:52:46:d9:7e:b5:ce:44:e3:d3:65:7b:96:
12:69:e1:c0:a0:40:72:f2:4b:ae:0d:72:34:4d:ac:
55:f1:d7:58:76:1a:c7:cd:24:25:80:66:ef:90:dd:
97:73:4a:9b:49:52:cf:ff:24:1f:cb:dc:94:23:1a:
ac:27:c2:18:f5:06:2b:92:ff:96:f6:84:6a:7e:47:
f7:b6:96:5e:25:c1:5e:12:6f:59:cb:f7:59:1d:33:
d4:de:9c:d4:c7:5b:85:e1:a5:79:19:ee:b8:2e:2e:
5e:fb:b3:b5:ff:2f:87:08:7e:27:62:55:96:78:3b:
b8:6b:c4:06:b4:1c:8e:82:74:c8:c3:b8:61:91:06:
63:b7:83:e6:ed:d6:8a:fb:65:43:d0:d0:06:95:6a:
bf:8d:76:32:a8:49:38:b8:d2:e2:03:e6:91:07:a7:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DE:0F:87:97:24:ED:E9:C7:DF:A2:8B:02:8D:2A:EE:C7:A1:90:3B
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/J94Ph5ck7enH36KLAo0q7sehkDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.155.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c4:57:cf:76:df:79:ca:85:41:10:ef:8c:d2:08:3a:a8:80:
77:8a:22:e0:87:6f:a5:a1:d9:5a:16:ac:e0:74:e2:f7:2d:10:
b1:c2:b9:5b:da:03:1e:73:da:13:b6:58:0b:e5:f8:8a:09:d3:
d6:a1:b4:51:6b:9f:67:66:4b:3c:60:91:e2:f1:6a:f8:be:72:
29:be:04:ee:de:82:71:55:dd:4c:3b:53:a1:02:c9:2a:6e:76:
1d:2e:20:b8:f6:9d:19:80:31:5a:21:5a:bd:69:f9:5d:dc:7a:
9c:37:26:43:98:76:78:5a:e5:cc:36:c2:24:a0:8b:09:0f:cf:
c0:cf:15:ed:10:9b:a1:c8:52:55:67:f2:3b:ea:a9:47:54:1c:
ce:ec:06:2e:68:9d:28:04:fa:2f:5c:73:8a:77:79:60:d9:ab:
4d:36:40:2c:e2:3c:00:54:1a:b0:62:d8:ca:72:b8:3e:c0:24:
3e:5c:24:0a:80:fb:35:bc:44:f6:f5:a8:84:14:5f:35:ff:7f:
ad:59:43:54:64:0c:b8:92:4c:2b:14:a3:f5:b0:92:8d:31:20:
7f:06:84:a1:19:03:82:a0:62:91:b0:1c:11:b9:67:e3:98:03:
86:b9:5c:77:a7:ca:2b:c5:32:fd:55:92:ef:91:f2:b4:33:97:
9b:de:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:13 2026 by rpki-client