Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/g6yrvOBeW6EKsF6uPz4qtt_DajI.roa
File: g6yrvOBeW6EKsF6uPz4qtt_DajI.roa (raw, json)
Hash identifier: /eXlPUvaL86WUGYjsxXCQYyeVUT9/VSJoeS28C++a+Y=
Subject key identifier: 83:AC:AB:BC:E0:5E:5B:A1:0A:B0:5E:AE:3F:3E:2A:B6:DF:C3:6A:32
Certificate issuer: /CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Certificate serial: 01A04803526FFEBACAF57959FE6E4AA84649
Authority key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/g6yrvOBeW6EKsF6uPz4qtt_DajI.roa
Signing time: Fri 28 Aug 2026 10:56:12 +0000
ROA not before: Fri 28 Aug 2026 10:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43888
IP address blocks: 195.210.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:03:52:6f:fe:ba:ca:f5:79:59:fe:6e:4a:a8:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Validity
Not Before: Aug 28 10:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83acabbce05e5ba10ab05eae3f3e2ab6dfc36a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:ef:df:8f:d2:e7:ac:28:d0:a3:66:10:2b:
64:4a:68:cd:25:18:86:43:16:84:84:97:f5:34:a1:
46:af:6d:79:be:c0:7d:7a:97:f5:92:50:33:d0:f6:
dd:e9:11:83:5f:73:ae:ef:44:41:80:bc:62:0c:6d:
cd:c2:a0:5d:99:5d:75:66:95:2e:a1:ff:7f:bf:1d:
14:5e:7e:71:a0:a0:49:e0:a0:47:4d:33:8c:fa:51:
23:c7:5e:10:1e:1a:52:dd:23:98:90:e0:5b:fa:18:
62:57:f9:57:ba:01:5b:ec:79:1a:ef:32:de:0c:30:
a3:10:47:14:1f:50:5c:fb:e9:ec:6d:e0:9c:dd:b9:
e5:d3:73:64:22:c9:2b:f7:24:4a:d8:17:03:46:f1:
06:db:18:9d:d2:c6:8d:08:18:99:be:e6:de:dc:5c:
f0:7e:ad:66:20:39:65:c8:52:bd:b9:f4:3f:03:40:
e6:6e:66:01:6c:a8:4c:2c:e6:15:1b:47:98:57:a5:
d0:d3:1c:c5:1b:27:05:cf:b8:25:d0:d9:e6:80:f4:
0a:75:54:93:71:d2:39:9c:fc:3f:9c:26:20:8c:79:
91:5a:ec:77:60:bd:10:ae:d0:a8:d4:b1:ee:58:a7:
3e:42:47:89:9d:eb:1a:87:95:7d:0c:8e:2f:a3:01:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:AB:BC:E0:5E:5B:A1:0A:B0:5E:AE:3F:3E:2A:B6:DF:C3:6A:32
X509v3 Authority Key Identifier:
keyid:52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/g6yrvOBeW6EKsF6uPz4qtt_DajI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.24.0/23
Signature Algorithm: sha256WithRSAEncryption
45:07:20:4c:97:19:c8:49:34:66:b9:52:ad:f7:42:97:6e:60:
6a:35:32:33:75:a3:3f:8b:38:b3:7b:fb:a9:5d:67:f2:4e:a0:
3b:81:ae:5d:4c:11:c1:aa:74:26:21:3d:91:9d:d9:c1:03:53:
70:e3:d5:d8:ff:c9:73:d8:1a:fb:c5:ee:08:58:7f:97:35:3e:
1c:7c:36:94:3a:86:f2:7a:63:85:99:df:6e:64:7d:fd:dd:1a:
d9:4d:04:49:b6:03:e0:af:13:4b:9f:e4:1e:c5:98:e5:10:52:
53:d1:c5:5e:58:6b:e2:1d:d7:94:59:22:53:45:07:ec:22:2b:
aa:e7:46:fa:f3:03:69:71:ac:b7:d5:d5:c8:b2:8b:1d:23:80:
06:ff:a4:a1:6e:9b:29:65:57:d8:97:f9:9b:80:f9:8e:53:49:
f6:5d:23:0d:96:8e:de:16:89:be:1d:eb:a6:c1:49:36:b7:f3:
9f:28:35:19:39:da:8c:7a:6b:ab:6d:01:ea:c6:76:52:3a:b2:
2c:dd:4c:42:01:23:c4:64:ee:fe:dc:29:63:a7:fa:fc:30:e0:
25:ed:14:c5:05:32:d3:d3:24:c3:ce:b2:e6:3d:13:7a:f9:9b:
39:6b:ee:92:da:7f:7f:5a:72:aa:03:81:4a:a3:6c:ae:a1:f6:
48:7b:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:00:45 2026 by rpki-client