Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/P0TSUa_O2R0WqImkYTbqNvp_xSA.roa
File: P0TSUa_O2R0WqImkYTbqNvp_xSA.roa (raw, json)
Hash identifier: FdEGT+YAusCANOcQeGpBhtrd2xw82WN4CDsU+y058Uk=
Subject key identifier: 3F:44:D2:51:AF:CE:D9:1D:16:A8:89:A4:61:36:EA:36:FA:7F:C5:20
Certificate issuer: /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial: 019F23C865AD7E830A8B0FA39885AF3077EF
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/P0TSUa_O2R0WqImkYTbqNvp_xSA.roa
Signing time: Thu 02 Jul 2026 17:02:43 +0000
ROA not before: Thu 02 Jul 2026 17:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 5.255.60.0/24 maxlen: 24
85.117.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:c8:65:ad:7e:83:0a:8b:0f:a3:98:85:af:30:77:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Validity
Not Before: Jul 2 17:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f44d251afced91d16a889a46136ea36fa7fc520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:0b:13:5b:4a:fc:2a:7b:cc:d9:59:9e:67:
ab:d7:9c:d3:6d:24:29:12:60:f5:75:74:32:5c:ba:
3c:ec:78:86:90:8d:9d:e3:ad:61:3c:19:4a:83:92:
d2:c3:63:16:3d:03:95:7d:53:4a:0e:69:32:8f:92:
78:f3:aa:1e:2f:3c:0f:ff:bf:5d:52:e0:80:2d:3a:
ad:84:75:d9:73:8f:16:96:4f:b9:7c:be:a1:b6:a6:
c1:55:16:e4:9c:e3:4d:d8:78:63:35:e1:d7:9e:fe:
6c:db:46:da:ab:7a:fb:0b:b1:9c:e9:15:7a:bc:c9:
5b:d9:f9:15:9b:d5:5d:85:27:e0:7d:76:32:75:c4:
69:da:68:f1:25:8e:c4:22:54:ff:23:95:21:61:d0:
e8:9d:b7:98:aa:12:50:96:fb:b1:25:bc:fb:09:bf:
57:85:b1:82:4b:ac:84:90:75:f0:32:4b:2f:6e:05:
25:07:2e:39:b9:58:cf:34:f8:2b:77:d6:4e:26:fc:
5d:5d:d2:2f:8f:04:3b:f3:9f:2b:15:94:8b:42:d3:
6c:af:62:df:d2:d4:4e:c4:74:47:6e:ff:93:af:59:
cf:af:a5:32:01:a9:b0:58:74:ed:6b:8b:f5:b8:0c:
2d:4a:08:51:8c:03:84:87:42:14:a7:39:84:b9:0a:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:D2:51:AF:CE:D9:1D:16:A8:89:A4:61:36:EA:36:FA:7F:C5:20
X509v3 Authority Key Identifier:
keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/P0TSUa_O2R0WqImkYTbqNvp_xSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.60.0/24
85.117.224.0/22
Signature Algorithm: sha256WithRSAEncryption
40:f4:9d:b2:88:4e:ed:52:65:a7:0b:43:69:a3:21:05:6a:a9:
a4:4c:db:02:9e:2e:18:63:69:d2:e7:d1:6a:1d:a7:0b:70:88:
c9:5e:a6:e9:1c:41:73:cb:36:ea:8d:b4:a7:16:2b:28:bd:7a:
cc:e2:f9:69:1a:47:12:f9:5f:7c:f7:5c:23:ba:4b:c8:77:be:
8a:91:fd:df:13:24:e2:07:4a:95:49:02:c6:d6:8b:61:98:c8:
22:6c:00:77:84:95:4c:a3:6c:03:84:0c:8c:67:c5:2f:4a:e8:
85:1e:22:d4:93:37:5c:9d:af:4a:2f:f9:97:16:56:8c:ee:e0:
2b:ef:40:b2:7a:35:95:e0:0d:b5:9c:bc:20:b5:0b:66:3c:cb:
61:c3:ab:a8:8e:1e:97:d6:bf:1e:51:0d:19:31:af:c3:0d:61:
8f:71:f0:d8:2c:db:65:06:ad:b6:6c:ff:c3:1f:ef:75:96:47:
94:7e:00:42:af:d4:aa:cd:6f:53:99:ee:bf:8a:8f:a0:8b:b0:
c5:39:ee:fd:5b:2a:51:be:67:eb:1d:8c:55:67:02:12:49:1b:
07:84:76:0d:a6:ed:ea:31:08:9a:d7:85:07:51:4e:ee:9b:3f:
4c:d5:7c:87:b8:e9:f4:1f:aa:15:66:44:47:c5:90:3a:6f:ed:
b9:56:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:40 2026 by rpki-client