Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/5GNibjWVh9kv3niMKhBpdix2V2Q.roa
File: 5GNibjWVh9kv3niMKhBpdix2V2Q.roa (raw, json)
Hash identifier: V43kp1BYcyRiXrTVKmCCCR8M4THNOeMB1viDgjmazhM=
Subject key identifier: E4:63:62:6E:35:95:87:D9:2F:DE:78:8C:2A:10:69:76:2C:76:57:64
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01A17E457E2709357FB812055DE256F476E9
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/5GNibjWVh9kv3niMKhBpdix2V2Q.roa
Signing time: Tue 27 Oct 2026 16:50:45 +0000
ROA not before: Tue 27 Oct 2026 16:50:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 81.90.20.0/24 maxlen: 24
81.90.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:45:7e:27:09:35:7f:b8:12:05:5d:e2:56:f4:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Oct 27 16:50:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e463626e359587d92fde788c2a1069762c765764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:47:7b:40:09:87:ad:11:8a:27:07:65:86:
70:8f:f7:b8:8b:31:66:09:61:31:15:38:a1:cb:19:
99:41:50:09:dc:5d:d9:a0:f8:eb:f4:7b:2d:ba:fc:
6e:9f:c5:dd:34:75:f6:da:89:29:c5:9c:22:48:c3:
a1:7d:58:40:35:68:1e:e4:14:29:4d:c7:9c:62:d3:
20:c6:12:84:c2:d1:84:16:86:97:8e:c0:1c:9f:47:
77:c0:ac:d7:13:e3:f4:6f:69:80:db:f6:dd:de:08:
bd:73:14:ef:a9:0f:fd:e1:47:2b:23:d8:98:ab:64:
92:73:66:36:4f:a7:6a:c5:b4:8c:15:3d:94:21:55:
20:50:5d:e8:21:8f:7d:e2:96:85:94:88:b2:8b:1c:
d0:eb:4d:3d:12:e1:8d:f0:d0:75:56:4a:2f:6b:47:
ea:88:a8:96:78:c8:77:ea:d7:ef:e6:73:b6:7a:a2:
9e:c8:a3:38:3e:25:26:19:77:b6:fd:18:35:32:00:
25:35:f2:30:21:4e:79:14:05:72:49:d6:53:9d:d5:
6d:93:3a:f6:04:b3:6b:52:a1:6e:4b:01:9a:5c:e2:
fe:74:32:3e:87:7a:b4:18:52:18:d5:e8:b8:d3:fb:
9e:e9:87:7e:70:12:2c:cf:15:30:1e:71:d6:d0:4a:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:63:62:6E:35:95:87:D9:2F:DE:78:8C:2A:10:69:76:2C:76:57:64
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/5GNibjWVh9kv3niMKhBpdix2V2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.20.0/24
81.90.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:51:66:42:ad:26:26:45:64:4e:72:b8:01:c3:ce:34:ed:ee:
da:9b:db:43:a7:40:e9:41:41:9a:a9:fc:5a:8e:ad:04:3a:6e:
ed:b3:0f:28:a8:50:ca:6f:1c:5c:de:6c:77:0e:3b:24:4d:c3:
31:64:8f:fd:93:3c:ac:34:5f:03:b1:b4:39:5a:08:aa:e4:98:
d6:5a:49:24:0d:ae:08:7a:39:71:09:84:56:fb:31:4e:60:ac:
ad:13:50:31:b7:8e:29:06:9b:32:1c:69:51:61:25:96:41:c2:
93:5b:28:95:5e:63:21:24:c4:ee:ea:f0:18:8d:cb:4b:46:2b:
97:50:4a:6e:64:6f:a6:05:04:e6:26:26:00:a6:69:5f:c4:7b:
0e:ef:90:a5:96:30:e8:fe:87:9e:26:6b:1d:68:e6:d8:11:0c:
be:51:6e:a6:de:45:3d:c2:97:18:05:24:41:b2:e8:84:dd:a3:
39:ba:4c:4c:5d:67:f1:6c:8b:22:31:51:3d:03:23:f8:01:aa:
72:28:0e:8c:4b:c1:d3:7c:27:38:bd:14:e0:b1:44:8d:8d:70:
aa:2b:dd:9d:81:a2:c3:e2:c3:af:c9:e0:dd:05:76:ba:d1:ff:
4d:0b:b6:7d:dc:35:12:ef:6b:9b:ef:00:e9:a1:93:97:fe:cd:
44:1a:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:14:55 2026 by rpki-client