Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/CTiIYG5Z0i8NFD9GTIvIRbIzJQ8.roa
File: CTiIYG5Z0i8NFD9GTIvIRbIzJQ8.roa (raw, json)
Hash identifier: lHylF9jTQy3B30h+EVJ1w8Da80DIiicRD5M1TS3mYr4=
Subject key identifier: 09:38:88:60:6E:59:D2:2F:0D:14:3F:46:4C:8B:C8:45:B2:33:25:0F
Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial: 019EC5587E846391056A72D2033F8F75C8EC
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/CTiIYG5Z0i8NFD9GTIvIRbIzJQ8.roa
Signing time: Sun 14 Jun 2026 08:56:11 +0000
ROA not before: Sun 14 Jun 2026 08:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214476
IP address blocks: 5.182.62.0/24 maxlen: 24
2a01:e000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:58:7e:84:63:91:05:6a:72:d2:03:3f:8f:75:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
Validity
Not Before: Jun 14 08:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=093888606e59d22f0d143f464c8bc845b233250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:73:7c:a7:f7:5a:2e:2f:e0:cd:62:ce:59:
49:fd:76:6f:40:2b:e3:b3:c6:a6:94:69:89:d8:8c:
d9:b4:b9:01:16:7d:0c:84:06:87:9d:a2:c2:d3:44:
cc:16:36:55:b1:d3:e7:17:3e:ed:f8:ca:29:ab:c4:
a1:5c:40:79:31:f9:d4:c1:5e:80:24:ab:0b:e7:10:
3a:71:ad:c5:1a:16:5f:1b:42:c5:24:b3:49:ee:0c:
ad:bf:b6:bd:2b:96:85:78:0f:44:67:f6:14:51:4b:
7b:2e:a3:15:27:37:56:90:09:fa:df:13:b9:a3:f2:
d0:18:7b:27:79:8c:47:e1:38:be:28:aa:bc:72:a6:
14:d0:27:a0:35:d5:6f:55:74:14:f4:ce:5d:b9:75:
b5:cb:29:e8:b8:95:f5:29:ef:ca:05:d9:6d:f0:e1:
a9:65:bd:d8:a9:5a:83:cc:6a:2a:cf:9d:af:33:0e:
fe:3a:9d:48:7c:96:0a:7d:cb:45:2d:a6:42:9e:ed:
da:1c:51:a9:75:f7:42:40:a1:7c:f0:89:64:f9:8d:
e6:dd:5a:fa:e1:0a:7e:d1:08:8f:b8:8a:c1:20:77:
48:83:df:cd:1f:1f:eb:81:16:52:e4:e5:c2:f0:c7:
2d:d3:2c:6a:b6:19:70:9c:28:0e:13:58:b1:b8:e0:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:88:60:6E:59:D2:2F:0D:14:3F:46:4C:8B:C8:45:B2:33:25:0F
X509v3 Authority Key Identifier:
keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/CTiIYG5Z0i8NFD9GTIvIRbIzJQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.62.0/24
IPv6:
2a01:e000::/29
Signature Algorithm: sha256WithRSAEncryption
05:d0:83:de:88:c6:37:f5:16:9e:cd:cf:78:bd:04:a9:05:50:
60:dc:f7:b1:fc:e2:5f:29:ed:24:99:e8:c5:3d:4b:ef:65:77:
42:bb:f4:ef:6b:b8:86:7f:9d:7a:8e:a2:e3:9a:56:6d:ff:f3:
9d:be:26:d7:6d:5d:f6:93:c6:f5:44:dc:1e:f6:19:58:cd:0d:
41:97:24:eb:ae:b4:63:55:5a:32:1d:cf:fe:11:06:75:20:8a:
8c:1c:68:17:ee:13:32:68:91:a5:8c:a8:03:6d:49:3f:ec:d4:
b5:0b:1c:ca:ba:4a:dc:40:8d:7c:69:0b:b4:a9:d0:19:cc:1f:
4e:35:1a:14:dc:9b:d8:ed:1c:b1:ff:94:5e:62:9b:01:5d:dc:
50:b6:e2:13:7c:a8:bf:4e:b4:89:20:9f:14:60:cf:d4:70:3c:
bd:02:f9:2f:e0:40:7f:40:a2:c5:74:bd:1e:d6:e3:d6:13:e0:
ac:19:34:4d:8d:d5:b4:d4:87:62:3f:f9:df:f7:5f:bc:ec:de:
58:6e:03:00:a6:a8:6c:2f:ac:8f:b7:96:cb:a3:60:1a:10:f0:
5d:dc:43:6b:b4:9e:f7:3d:16:a5:e0:77:da:d0:9b:b9:d1:3d:
09:de:60:4b:c5:58:36:c8:09:30:05:35:1d:da:98:4f:14:7b:
28:e3:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:31 2026 by rpki-client