Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa
File: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (raw, json)
Hash identifier: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=
Subject key identifier: 63:C1:B7:29:E3:5F:3D:4A:AA:AE:25:DE:66:FD:4B:D3:B1:4C:62:54
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019C7B1B3553BFE093863EACE4E5BE043E16
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa
Signing time: Fri 20 Feb 2026 12:51:46 +0000
ROA not before: Fri 20 Feb 2026 12:51:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215762
IP address blocks: 5.181.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:1b:35:53:bf:e0:93:86:3e:ac:e4:e5:be:04:3e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Feb 20 12:51:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63c1b729e35f3d4aaaae25de66fd4bd3b14c6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:33:64:8f:a8:b2:c1:aa:0c:cb:14:00:e9:
ba:ba:fd:fc:88:36:6b:2f:d1:6d:a3:b7:85:ed:84:
50:4b:d8:5f:ba:39:8d:ce:ee:ba:41:3b:cd:00:42:
8f:7e:79:6b:a7:8b:a8:cb:e2:b7:52:a8:1d:c9:09:
c9:a5:6c:b9:de:49:73:9c:60:64:42:10:34:5e:56:
c3:42:1b:bd:43:67:90:83:c9:a2:89:7a:cf:3e:be:
86:ec:dc:99:62:8b:a3:e3:84:a7:78:4e:ce:8e:92:
3e:fa:19:45:42:aa:9e:87:e2:fb:7f:30:44:6e:27:
2e:3f:81:d5:3e:8a:19:81:d2:8d:60:ea:5a:5c:6a:
50:03:cc:aa:84:9b:0b:7c:5c:f8:67:4f:f5:ba:68:
6a:81:39:9e:cf:53:91:dd:4d:18:90:77:bd:71:7d:
f1:e6:ee:ce:82:60:fd:15:40:22:81:46:3d:22:4f:
9f:ac:a0:37:d3:0f:9e:fa:af:01:4f:23:f7:25:a5:
59:f5:fc:21:8f:0d:eb:1f:26:e0:e1:93:38:b2:b0:
61:e2:9b:bd:a4:2b:f5:bb:9f:77:7d:33:9c:ae:f5:
1f:26:89:5f:f4:cf:18:91:53:4c:d8:35:cb:66:d2:
80:2b:e6:42:7a:b5:52:96:5a:89:13:1e:e5:6a:aa:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:B7:29:E3:5F:3D:4A:AA:AE:25:DE:66:FD:4B:D3:B1:4C:62:54
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.80.0/24
Signature Algorithm: sha256WithRSAEncryption
03:09:41:66:e5:6e:d4:03:32:b2:57:5a:2a:85:95:6c:05:aa:
f9:64:c2:cd:20:01:5e:39:5b:23:14:86:a5:e3:b4:64:3f:0d:
09:d5:a5:9e:b1:44:e9:65:01:11:5c:a2:bb:06:35:ab:63:0f:
28:c5:66:ec:5a:2e:0a:cd:4f:96:3f:b0:43:34:19:07:62:96:
a2:f4:c6:48:34:15:80:65:18:89:75:dd:67:f1:8f:f1:b6:cd:
4f:62:35:70:d7:19:09:17:ee:48:bd:ed:01:81:51:1e:05:7c:
dd:d4:94:00:57:cf:94:0d:ee:1f:bc:6b:dc:ce:3c:55:0c:91:
2f:c5:f6:06:2d:b2:f9:7d:4f:1e:18:0a:59:be:9e:68:89:f5:
05:84:73:d6:da:fe:e7:ec:be:d3:5c:2e:4d:a9:5b:a8:01:c5:
0f:33:05:c2:d2:06:1e:26:18:d3:ec:6f:ee:fa:ac:14:c5:44:
a2:51:c8:29:c8:3c:1c:82:58:6b:7a:e0:e0:b4:43:29:9a:8d:
44:6b:db:e3:bf:df:62:f0:64:0a:11:12:09:51:11:f2:36:c9:
a3:64:ed:51:75:8f:bd:f6:8f:c6:73:3f:41:bb:1a:4e:83:d6:
69:f5:ab:10:bb:ee:9b:90:53:29:93:77:64:4d:af:13:a6:e4:
74:3a:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:53 2026 by rpki-client