Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/5Z9U9f9LzaE4Ayc_8YN3vX1_Za4.roa
File: 5Z9U9f9LzaE4Ayc_8YN3vX1_Za4.roa (raw, json)
Hash identifier: tISE7ij5Mog88K8RBo/pOOcpsFCfmvmLSehurREUsnc=
Subject key identifier: E5:9F:54:F5:FF:4B:CD:A1:38:03:27:3F:F1:83:77:BD:7D:7F:65:AE
Certificate issuer: /CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Certificate serial: 01A01E350B0612F66EC584F3353608187745
Authority key identifier: 4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/5Z9U9f9LzaE4Ayc_8YN3vX1_Za4.roa
Signing time: Thu 20 Aug 2026 08:06:27 +0000
ROA not before: Thu 20 Aug 2026 08:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203396
IP address blocks: 193.176.148.0/22 maxlen: 22
193.176.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:35:0b:06:12:f6:6e:c5:84:f3:35:36:08:18:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Validity
Not Before: Aug 20 08:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e59f54f5ff4bcda13803273ff18377bd7d7f65ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:bb:ac:9a:14:e3:1a:c2:d6:8b:60:d4:84:
f2:f5:b2:e6:3b:3f:aa:bb:a8:9e:15:cf:35:f6:0d:
74:c1:57:43:81:84:99:7c:d6:da:27:b5:9f:38:ec:
d8:bb:87:d6:cf:98:a9:07:93:75:a7:4f:e4:dc:05:
ad:71:f1:5e:45:1a:a7:e2:62:b0:d2:07:c1:81:0b:
61:34:41:24:99:4f:24:42:8c:c9:de:27:58:9d:a8:
ca:ce:d8:67:f5:b1:31:f2:ce:1c:27:99:3e:f2:81:
db:8e:c0:fe:0f:ca:d9:35:45:55:75:5e:82:68:5a:
4d:8c:0e:23:d2:dc:ec:57:3f:79:2d:fd:39:b2:f1:
c1:97:6f:5c:f4:61:e2:3c:05:44:be:f5:f3:0e:bc:
8d:ae:44:09:ca:35:df:90:06:b7:2e:f2:21:f7:38:
81:32:a3:cb:cb:ac:6f:d2:82:c0:de:81:ca:c3:c8:
22:2e:5c:e3:dc:74:72:8f:fe:49:23:4e:c9:6e:0b:
f2:57:e5:93:e9:e1:19:38:9e:c2:13:a0:a4:57:c8:
94:f5:63:1f:25:73:b7:b8:09:ff:3a:a0:35:95:6a:
99:80:4c:61:d1:9f:34:63:8c:b2:44:c5:5e:32:0d:
a8:78:d1:88:e1:04:16:0f:6b:dd:1c:fa:45:18:b0:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:54:F5:FF:4B:CD:A1:38:03:27:3F:F1:83:77:BD:7D:7F:65:AE
X509v3 Authority Key Identifier:
keyid:4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/5Z9U9f9LzaE4Ayc_8YN3vX1_Za4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.148.0-193.176.152.255
Signature Algorithm: sha256WithRSAEncryption
28:cd:e8:a5:be:32:11:74:ea:26:db:4a:6e:7f:74:23:68:22:
c9:ec:ad:3d:bc:e5:2a:7b:70:f2:59:7f:39:19:8c:90:f6:1b:
99:3f:1c:6d:db:1e:5e:17:99:05:13:f7:6c:e9:8a:e7:4e:91:
40:6c:6d:52:2d:32:27:35:9a:6a:88:ab:a9:f0:c8:64:25:16:
b2:dd:79:5c:ae:d2:6a:06:59:93:ce:f4:e1:cc:5f:39:20:aa:
ea:77:d9:e8:3a:7a:49:d0:37:d2:ba:f3:32:7d:1a:32:9d:dc:
bc:22:09:56:d7:a7:91:5c:60:c6:01:98:33:53:fe:03:ed:ca:
b6:6e:c6:94:ba:40:21:0d:4d:18:61:c6:45:84:77:5e:3d:22:
bd:c9:66:96:6a:0c:6a:33:a3:3a:63:8d:83:1c:96:26:a4:b2:
ba:1e:10:b2:e0:5e:19:1f:b8:49:f3:68:33:70:72:96:89:04:
ce:08:08:a6:04:7c:3a:f5:55:36:7e:31:03:b3:2e:da:ca:ce:
c5:fa:81:1b:2d:4f:ce:8d:9a:74:fa:7c:c7:d7:e5:a1:dc:56:
78:23:90:9b:9a:4c:c3:1d:4e:8c:5e:7c:db:e3:32:85:b0:7e:
2a:1d:66:5c:12:a3:9a:42:30:49:4c:34:60:51:24:bf:20:19:
2a:ec:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 07:42:51 2026 by rpki-client