Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/5ySJ6Z5iBCgKkz6IZCi0taQgNF4.roa
File: 5ySJ6Z5iBCgKkz6IZCi0taQgNF4.roa (raw, json)
Hash identifier: U5xoeJM/uozTC7N0niukbt/1l9eSEDOcVcw4Bgpkvpc=
Subject key identifier: E7:24:89:E9:9E:62:04:28:0A:93:3E:88:64:28:B4:B5:A4:20:34:5E
Certificate issuer: /CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Certificate serial: 01A134D4EA007AF27CECFF36B16AAA6F4F1C
Authority key identifier: 69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/5ySJ6Z5iBCgKkz6IZCi0taQgNF4.roa
Signing time: Tue 13 Oct 2026 10:35:31 +0000
ROA not before: Tue 13 Oct 2026 10:35:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219092
IP address blocks: 209.135.151.0/24 maxlen: 24
2001:678:1378::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:d4:ea:00:7a:f2:7c:ec:ff:36:b1:6a:aa:6f:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Validity
Not Before: Oct 13 10:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e72489e99e6204280a933e886428b4b5a420345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:4e:c5:a9:08:92:03:04:f7:ce:a1:5b:5f:
c5:a9:13:38:45:ed:f4:83:8c:00:eb:2a:77:a9:70:
d7:c0:0a:25:8a:5c:e2:c9:37:9a:f9:2a:6e:10:e2:
ed:71:c8:d9:b2:2b:f9:76:6b:ea:eb:a6:2f:80:cb:
7f:cb:53:e8:7b:36:82:df:36:b0:52:59:a2:d6:33:
9f:bf:74:40:48:3b:51:44:9d:ff:3a:6e:9c:ff:f8:
c2:e8:e3:f6:1d:24:0c:ce:ef:13:a5:a2:a7:b4:d7:
15:6f:34:00:e7:48:af:21:08:af:17:b7:15:6b:1f:
55:a7:96:08:2f:3e:ad:b2:f1:0d:a2:cf:a1:56:c3:
ec:e2:55:68:e5:e5:d6:25:7b:aa:a8:fb:48:d2:70:
6a:9e:34:11:f1:b8:30:95:1b:a7:1f:e3:e2:9b:84:
fc:24:4d:3e:30:65:be:54:cf:50:78:42:1d:25:1c:
39:bf:27:7f:34:c3:a4:b2:9a:5e:db:c0:78:a2:f2:
a6:ac:7e:83:4f:09:b8:c1:ff:31:06:81:c2:3b:24:
0a:84:77:f8:25:da:b1:ca:05:5e:c9:4b:c7:fe:3d:
0f:1e:8c:3b:e0:f4:f9:e0:91:80:6b:51:66:14:25:
51:e9:da:e2:22:ee:5e:86:11:39:d0:fd:79:8b:7c:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:89:E9:9E:62:04:28:0A:93:3E:88:64:28:B4:B5:A4:20:34:5E
X509v3 Authority Key Identifier:
keyid:69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/5ySJ6Z5iBCgKkz6IZCi0taQgNF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.135.151.0/24
IPv6:
2001:678:1378::/48
Signature Algorithm: sha256WithRSAEncryption
63:1d:90:4f:83:c9:ce:e5:12:39:77:e1:04:cb:ee:8c:14:d3:
e4:a3:0b:69:0e:9b:ab:74:6c:ca:86:21:b8:4d:1f:f1:4c:0c:
fc:1c:92:4f:bc:ed:e4:a7:d9:af:2f:73:63:ba:b5:82:2c:78:
ed:c6:3b:c2:4a:5c:15:c3:55:bb:53:b4:93:51:33:88:7b:4b:
d8:92:b5:f9:74:f1:52:fd:e7:8b:2d:78:2d:20:68:c0:65:00:
2e:f4:41:41:ae:07:6f:60:02:8c:c6:54:47:38:dc:2d:ab:74:
c2:f5:56:19:d8:33:ad:93:03:d8:77:34:c8:ec:b5:fe:9e:29:
95:52:c4:c4:04:22:72:88:60:44:a5:8f:3e:31:7b:44:44:b4:
66:05:89:37:9a:15:3c:a1:96:24:8d:a6:19:cb:47:2e:ba:35:
e4:a2:8d:da:42:c5:5a:67:e8:97:19:cc:00:35:61:d7:0d:57:
be:b9:d2:ac:9a:42:dd:1e:49:a7:72:8b:81:05:5a:b8:f5:f3:
1a:94:e4:5c:1b:c8:f0:86:da:dd:15:fc:bf:b9:1d:d9:3b:4c:
73:8e:96:89:fb:91:de:3c:1d:03:5b:40:43:ed:46:a7:57:33:
a1:33:d4:6f:35:51:66:a4:03:d9:96:f0:ce:74:1c:da:1f:8a:
1d:25:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:35:58 2026 by rpki-client