Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/_Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa
File: _Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa (raw, json)
Hash identifier: R9XukPe4DSAWpgSPkCL5g1hxeUwcjBv75r2z5QRzV8A=
Subject key identifier: FD:0E:6E:FD:A6:B8:A1:0F:A2:87:76:1E:27:E7:A2:42:18:84:18:30
Certificate issuer: /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial: 019F2369352C1092602D09FB21726DA23547
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/_Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211420
IP address blocks: 5.255.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:35:2c:10:92:60:2d:09:fb:21:72:6d:a2:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd0e6efda6b8a10fa287761e27e7a24218841830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:25:c0:e0:da:f7:c1:49:1c:3a:d9:1c:15:
05:38:cf:8f:40:e6:2f:41:c1:e0:2a:78:cb:82:47:
df:be:91:48:b8:2f:ed:88:4f:90:ad:95:8f:07:c9:
bb:e8:0d:a6:07:43:7e:f3:f1:be:c3:3e:f4:96:7a:
96:9c:5c:85:2a:50:d2:3f:0b:83:b7:91:1a:d9:0e:
f9:29:3d:b0:ae:36:79:a4:53:05:cd:21:d0:f1:e8:
a4:93:e2:40:ad:f4:21:f6:ee:f2:35:ec:3c:54:6d:
e7:00:9d:e5:3a:f3:f4:7a:77:a8:e5:1c:17:2e:5b:
6c:d3:4a:23:41:12:4e:56:f6:83:44:19:be:28:60:
93:9c:22:04:2a:c9:0e:26:d7:18:dd:f5:67:73:1e:
e5:5e:03:f7:db:53:2d:0a:d5:c3:83:d2:f3:49:89:
ff:ff:bc:78:41:7b:d2:18:e0:5f:83:cf:48:ee:50:
ae:fe:75:e4:ff:ff:9b:bc:90:da:61:60:c4:9f:d2:
ed:9a:b2:c5:17:65:9d:4b:66:d9:db:65:92:9c:4f:
17:e6:14:27:97:85:40:5a:02:f4:2f:3d:d4:69:a0:
9c:de:d3:eb:15:45:99:e6:48:de:ec:22:47:2f:84:
f6:56:c0:5e:ae:67:39:74:d9:dd:99:f1:40:40:a0:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:6E:FD:A6:B8:A1:0F:A2:87:76:1E:27:E7:A2:42:18:84:18:30
X509v3 Authority Key Identifier:
keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/_Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c0:ca:e4:15:f7:70:e5:45:30:47:83:c6:b2:ff:d0:28:77:
89:de:b1:89:92:8c:2c:d1:9d:bf:18:8b:a3:a1:cc:12:9f:d9:
4b:52:ed:e1:ea:1f:84:fe:c2:87:f5:e1:ed:db:11:4d:ca:0d:
46:43:62:37:48:7c:e6:a0:aa:12:73:16:29:91:62:25:ed:91:
8e:8e:66:e2:d7:26:25:05:17:eb:74:72:39:96:b9:1b:0e:46:
6c:a4:7a:92:cd:c4:e4:0e:df:17:b2:fb:1c:b2:5d:12:5f:7f:
06:d2:09:75:da:f5:fd:0a:0e:1b:55:fa:95:3d:82:05:64:90:
c7:31:55:30:8d:bf:19:35:50:91:fe:97:61:92:b7:41:6f:43:
dd:f7:36:a9:ec:25:84:64:24:6f:10:dd:8f:92:f6:2a:6b:ef:
56:98:63:46:5c:6d:33:15:79:0b:2d:2c:62:2d:37:8f:8a:c5:
fd:30:ec:75:31:e8:50:d5:0e:86:c3:2e:14:6a:2a:b3:3a:ac:
de:bd:4e:6d:c8:cb:28:af:53:5f:05:e9:fe:5f:7d:b6:ae:27:
f0:1f:80:a8:14:d0:93:95:7f:c0:f4:fd:ea:f6:67:b9:28:a8:
2e:90:36:f2:f1:ca:73:64:66:23:66:a2:7a:d8:c0:8c:5d:03:
0b:d2:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:34:03 2026 by rpki-client