Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/Siehy75MP7vOcnXoZBK4YhzQRqE.roa
File: Siehy75MP7vOcnXoZBK4YhzQRqE.roa (raw, json)
Hash identifier: kCQ7xcOauGt4TPo8jXT/okVbQR+al1IIKRImkP3hRYY=
Subject key identifier: 4A:27:A1:CB:BE:4C:3F:BB:CE:72:75:E8:64:12:B8:62:1C:D0:46:A1
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01A110B9F96B88554124A3A2BADCA21FC4A2
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/Siehy75MP7vOcnXoZBK4YhzQRqE.roa
Signing time: Tue 06 Oct 2026 10:19:45 +0000
ROA not before: Tue 06 Oct 2026 10:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47448
IP address blocks: 213.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:b9:f9:6b:88:55:41:24:a3:a2:ba:dc:a2:1f:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Oct 6 10:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a27a1cbbe4c3fbbce7275e86412b8621cd046a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:7f:55:92:55:00:dc:cf:16:4f:87:82:be:
da:83:ac:eb:65:cd:2d:56:02:dd:18:1b:d5:dd:18:
24:f8:db:c2:01:0d:05:5b:28:e4:43:ba:7c:f6:76:
d7:25:d5:34:d7:7d:f3:9d:0e:c8:bd:be:87:ce:39:
59:ff:2a:8c:05:57:8e:4f:17:88:af:26:6a:da:db:
34:ed:f2:4d:a1:04:98:ba:16:59:f1:9f:12:9f:f4:
cf:c1:ba:ae:e7:4d:67:2d:dd:06:85:aa:79:83:76:
b5:1a:2f:af:88:7f:66:42:2d:43:e9:6c:2b:dc:35:
2b:16:b4:57:30:8c:95:6c:37:95:9c:c2:ae:ed:8e:
1c:b1:62:44:df:27:1d:03:f1:13:70:32:fa:94:ba:
f2:7a:17:22:fb:96:69:90:05:bb:a6:90:0d:b6:2b:
e3:fd:e6:57:bb:78:28:a8:c4:11:51:b3:d3:fa:4d:
6a:19:e7:db:d0:57:69:1b:6f:8a:96:c6:b1:8b:21:
a5:3b:9d:4d:42:22:15:7d:a8:63:cb:c9:57:7d:12:
cc:3f:d0:96:98:7e:af:3f:19:b0:e2:d9:29:9d:41:
8f:4a:85:80:b3:09:59:a8:92:b1:ef:08:00:59:e6:
cd:a1:9d:6e:a9:29:60:2e:42:34:07:4a:89:67:68:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:A1:CB:BE:4C:3F:BB:CE:72:75:E8:64:12:B8:62:1C:D0:46:A1
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/Siehy75MP7vOcnXoZBK4YhzQRqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f1:db:db:e0:0a:ef:27:d5:e8:b0:91:c5:2a:bc:0b:e8:c3:
ec:50:85:66:b2:06:68:95:1f:b6:22:12:5e:7f:d4:0b:4a:10:
cb:68:e0:00:91:24:1d:c6:89:96:69:4b:73:93:01:9b:57:dc:
e3:07:6e:b5:e8:5c:20:1f:5c:36:b1:87:a4:fd:9d:74:09:ec:
82:29:ed:dd:69:f5:3b:ed:b3:9e:53:68:ec:21:d8:0c:83:61:
4d:24:49:aa:7c:0e:0a:77:a7:5d:8a:e9:c3:26:a3:6a:f9:81:
8c:f6:d0:08:fc:c5:49:3a:61:c0:ef:31:c3:9d:34:24:b5:2b:
24:82:16:05:c9:f5:02:e1:cf:5e:17:91:a7:ee:5e:d3:7f:81:
00:aa:4d:3a:c3:55:31:b5:04:0e:33:b2:26:09:44:6c:f7:e2:
e7:cf:72:2b:f4:b7:3b:76:7c:4d:ad:43:f3:7e:91:9b:3a:5e:
88:f0:31:42:3d:70:b4:75:88:47:0c:b1:90:49:0a:bd:f2:a3:
fa:b5:96:e0:f1:7d:0d:57:9f:38:b1:9f:8e:1d:a2:eb:53:42:
20:ae:51:c5:63:a5:7b:f8:01:a5:ad:c1:b4:01:60:67:e0:d1:
a7:d5:c5:67:94:ce:94:e8:1b:05:19:38:36:b5:f0:d7:4d:13:
84:e1:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:03:59 2026 by rpki-client