Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/5F_6MYJ3Tjsft0v2m--XYj9QajM.roa
File: 5F_6MYJ3Tjsft0v2m--XYj9QajM.roa (raw, json)
Hash identifier: ptSYdcQn4vRSLxP94ghZiixDk850vlzn8oi5PdxtV2k=
Subject key identifier: E4:5F:FA:31:82:77:4E:3B:1F:B7:4B:F6:9B:EF:97:62:3F:50:6A:33
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A0A0EB8F6D81A7D01F82A7F1D7C0340BC9
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/5F_6MYJ3Tjsft0v2m--XYj9QajM.roa
Signing time: Mon 14 Sep 2026 17:16:27 +0000
ROA not before: Mon 14 Sep 2026 17:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 150.40.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:eb:8f:6d:81:a7:d0:1f:82:a7:f1:d7:c0:34:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Sep 14 17:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e45ffa3182774e3b1fb74bf69bef97623f506a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:56:13:05:f0:f4:b2:95:5e:32:6b:34:a6:
68:ea:9c:d4:63:18:c0:24:35:30:d0:a7:24:78:97:
10:de:5f:71:39:1f:88:3a:0c:5a:b4:58:e9:69:0f:
fd:21:a0:48:84:05:32:95:5c:66:e5:05:39:09:22:
e1:05:0b:4c:45:06:15:99:ff:81:5c:5a:e7:75:79:
c8:81:a2:21:61:ae:bc:0d:c5:e9:47:fb:9f:bb:7f:
25:12:b8:f8:74:9b:6a:f7:a3:3f:af:54:d2:b2:7a:
ed:cd:75:be:0f:a2:e5:df:86:b3:0a:09:a8:a3:3e:
89:4e:5f:c0:ef:06:90:0d:11:bc:42:49:01:02:f3:
d2:cc:c2:68:d7:ab:6c:3c:14:fa:59:7a:48:90:83:
f3:6f:ce:ec:f4:2d:65:25:c8:9d:2e:97:20:e6:9b:
72:00:fa:73:55:ae:71:2a:43:58:b9:9c:e5:82:04:
08:df:5d:4c:d0:7d:75:f7:38:fd:9f:14:71:3a:24:
cd:c9:62:e4:43:17:fb:72:d0:52:9c:0d:ad:50:94:
37:60:a4:c0:ed:90:a0:eb:a0:78:2c:ab:56:10:a0:
a4:f3:d9:dd:9f:20:77:9a:cd:7e:24:df:1f:15:cb:
c9:a1:38:bc:7e:2c:99:34:92:21:a4:69:3c:7e:3b:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:FA:31:82:77:4E:3B:1F:B7:4B:F6:9B:EF:97:62:3F:50:6A:33
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/5F_6MYJ3Tjsft0v2m--XYj9QajM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.125.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2b:18:51:af:55:33:de:fc:a8:2b:83:9e:58:14:fa:7a:0e:
5e:de:38:69:c9:6c:03:91:e3:dc:ae:9f:ad:df:3e:62:a7:0b:
fb:bf:dd:8c:cd:67:ee:19:01:1b:7f:76:80:39:47:4e:4b:1c:
4d:18:68:c1:4e:01:4b:53:62:36:53:39:84:5b:04:fe:ec:bf:
6e:27:17:e2:80:7c:a7:b6:30:2f:f5:31:ae:d9:d6:a1:35:08:
4c:6b:00:a9:52:84:cc:e7:a3:48:c2:dd:31:5e:15:69:2a:a4:
b3:a4:70:2b:5f:84:36:47:92:75:4d:78:a3:76:a6:cd:5a:5d:
14:fd:d1:24:c4:eb:27:3f:1c:93:16:2b:18:30:38:cf:c2:5d:
99:b5:98:ce:7c:11:6b:c6:45:97:9e:bd:98:66:aa:0e:51:d6:
7e:c6:b5:3b:9c:4e:c5:87:7e:c8:04:45:dd:9d:e5:53:08:bd:
62:a3:76:65:d8:d3:0e:31:c0:e6:63:2d:3d:28:64:46:73:8b:
99:df:63:64:6c:56:5e:6f:dd:96:59:93:ec:5e:c6:2d:69:73:
9f:22:2e:22:3e:73:6a:32:9b:b4:d8:c8:b5:a7:ab:4c:01:29:
45:7f:16:72:0b:ba:df:f7:71:80:33:30:c4:fe:73:e3:4a:a9:
ad:8e:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:30 2026 by rpki-client