Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1MlSIVekR7nJOhytdlMR4jKtR-0.roa
File: 1MlSIVekR7nJOhytdlMR4jKtR-0.roa (raw, json)
Hash identifier: Fp4zpsgtHGLmZbR0hKTXyDrZzEqlceg8ruA+2JYmVfM=
Subject key identifier: D4:C9:52:21:57:A4:47:B9:C9:3A:1C:AD:76:53:11:E2:32:AD:47:ED
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A154F584A900C2BD62F7242BC1560EDA23
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1MlSIVekR7nJOhytdlMR4jKtR-0.roa
Signing time: Mon 19 Oct 2026 16:18:58 +0000
ROA not before: Mon 19 Oct 2026 16:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210743
IP address blocks: 2001:978:1b04::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:f5:84:a9:00:c2:bd:62:f7:24:2b:c1:56:0e:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Oct 19 16:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4c9522157a447b9c93a1cad765311e232ad47ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:e3:d8:3f:79:93:50:e2:a5:f5:b4:4d:69:
42:92:83:1f:84:bd:12:18:2a:05:5b:a5:e2:45:e5:
8c:eb:31:34:1b:d0:07:14:b2:98:03:a7:fa:80:b5:
68:b9:a1:62:4c:f3:4a:e1:aa:96:ca:95:d2:45:6f:
c5:d4:aa:a1:90:1d:0b:3f:41:fe:77:32:88:ff:1f:
f3:0b:db:7a:8b:24:db:b2:58:46:15:0b:60:79:12:
d7:bf:e4:01:34:84:a0:27:55:02:b5:b3:fb:4d:b3:
a5:a8:5b:04:d7:d3:d1:11:4f:97:50:bd:ef:c6:bf:
fc:bd:14:4b:6d:46:8e:ab:9d:10:99:43:18:09:f7:
68:37:15:c8:eb:cd:c1:2a:b3:45:9d:18:56:f1:35:
dc:f9:af:36:e1:76:48:e9:96:ef:55:88:c4:df:c8:
2b:22:2b:07:df:b5:bc:4c:17:9e:f4:7d:ac:40:f3:
e2:33:43:02:02:e6:31:61:dd:e2:0c:e0:ef:b2:7c:
50:de:5d:be:7a:1c:30:de:f1:d1:2f:13:e2:58:4a:
fc:c9:da:3e:9e:28:41:6f:f7:5e:51:2d:55:2b:f1:
bb:12:c7:8c:c3:85:49:ac:8d:11:63:46:2d:97:38:
58:21:66:ed:fe:69:d5:e0:5d:aa:fd:c3:92:b6:0e:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:52:21:57:A4:47:B9:C9:3A:1C:AD:76:53:11:E2:32:AD:47:ED
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1MlSIVekR7nJOhytdlMR4jKtR-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:978:1b04::/47
Signature Algorithm: sha256WithRSAEncryption
15:ad:e7:d8:b7:1d:b5:4a:d9:e7:18:f5:51:d9:80:b9:f6:56:
0e:fd:50:ce:85:ff:62:a8:ff:40:a3:34:9e:2e:b5:c6:b5:c9:
9b:cd:fa:41:bc:4c:27:19:37:5d:77:f0:a0:be:93:5b:ff:1a:
d1:b4:b8:6f:4a:28:f8:8d:40:80:42:a4:e1:8b:c3:9b:97:0f:
b1:97:ee:94:be:58:29:38:62:b3:a5:76:00:77:b2:4c:1e:9d:
56:51:e6:5a:ab:7b:40:4d:10:57:07:e1:d7:bc:9f:09:2e:e6:
39:b0:1a:74:08:d8:99:33:76:cf:b5:44:aa:59:75:44:9a:22:
ae:e7:42:6f:95:12:04:ee:10:01:d5:88:1c:8b:fe:aa:6c:e7:
53:41:d2:e7:6c:7b:a2:56:74:aa:f2:8c:32:de:16:03:5f:ff:
76:d6:d8:70:ce:12:23:c3:53:70:1c:d8:7e:e7:5b:2d:9f:76:
d6:da:ef:e9:75:8c:97:dc:62:fa:35:cc:8a:75:fb:7b:3f:9f:
06:34:8d:be:e4:cf:c1:36:69:b4:25:c2:ae:0d:50:df:d6:7b:
75:4c:03:4d:fd:b1:8c:b9:2f:65:35:cc:0a:c2:f6:9f:83:0c:
96:2d:63:37:48:27:ea:23:70:75:c6:15:0c:19:b7:13:00:5c:
3e:db:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:22 2026 by rpki-client