Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa
File: 5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa (raw, json)
Hash identifier: SMRdVTfHclZq4V+gvOodEyeG5zAH5sDMph36bqmt3rk=
Subject key identifier: E4:7C:39:48:21:BB:FC:E3:F0:EC:5E:D6:BD:C9:87:B7:5B:9B:CA:97
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A08B37C689733E809E8E6E9FB36C65A86C
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa
Signing time: Thu 10 Sep 2026 12:08:03 +0000
ROA not before: Thu 10 Sep 2026 12:08:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 45.15.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:37:c6:89:73:3e:80:9e:8e:6e:9f:b3:6c:65:a8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 10 12:08:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e47c394821bbfce3f0ec5ed6bdc987b75b9bca97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:77:f9:86:8b:07:ff:20:9f:f5:8a:3b:54:
dc:19:83:c0:05:69:d4:11:96:e6:dc:f5:07:63:62:
4e:f2:2c:4d:69:03:f0:bb:a1:02:d8:db:0d:24:28:
7e:8f:68:28:e9:61:62:47:8a:a9:42:0a:2a:54:40:
2b:eb:50:ab:e2:c1:63:8c:c2:16:d2:82:a2:8f:5a:
f2:31:39:e7:5f:d3:69:49:ef:d0:b8:44:c9:e8:ce:
b2:98:4b:6f:fe:bd:ba:6e:b7:ad:b9:5e:89:ba:be:
a8:73:e3:78:0e:f7:a7:c6:94:6c:40:f0:36:c6:4c:
50:ac:29:31:4d:5a:d5:97:1e:5d:df:26:b7:59:c0:
3a:1d:32:44:19:02:fc:38:93:3f:c2:b9:bb:76:e6:
5d:3f:b8:e6:6b:41:73:ea:14:d1:e9:dd:14:4a:f3:
36:68:83:3f:a2:55:b9:c6:de:83:d9:32:63:9e:0e:
db:0e:1a:48:97:98:fd:c3:7a:ee:b0:a0:87:28:a1:
b5:fe:a2:26:70:a2:53:ad:e9:76:9c:b3:74:b6:fd:
db:5e:76:2f:18:6b:b4:e9:08:6c:67:fb:23:01:c4:
17:5a:69:83:dc:09:da:48:ba:9a:4f:a5:6d:c0:93:
24:e7:a2:a8:c4:d2:f2:d8:31:a2:a1:84:e7:68:92:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:39:48:21:BB:FC:E3:F0:EC:5E:D6:BD:C9:87:B7:5B:9B:CA:97
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.104.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ec:45:47:f7:2f:72:c8:ba:7e:83:da:b8:ae:48:c1:1f:c7:
f2:d3:b8:1a:15:21:37:8d:6b:80:7f:50:1a:5a:5b:ea:5a:60:
88:e1:cd:78:7e:38:28:6f:59:b2:1f:d2:ba:e5:23:c1:64:f2:
37:72:d2:c7:fd:4f:e2:ea:95:ea:5d:1e:21:e3:98:d6:73:62:
c9:68:47:fa:aa:00:99:81:9c:d1:f2:d6:c2:40:7e:0b:9d:48:
73:b6:23:de:7e:24:e1:db:b4:44:da:1d:a3:08:73:cd:a3:04:
b0:10:6d:4a:d5:4d:f8:d8:5c:41:77:af:65:88:1a:2e:2f:62:
c7:0f:be:5c:e0:03:d4:d2:74:b1:fb:2b:f3:7d:93:12:d1:2c:
25:f1:6b:2a:9c:26:b2:f9:28:f4:f6:1c:bf:2c:6d:e6:d5:12:
f7:3a:d1:b3:b7:18:aa:11:5e:4f:75:1c:77:c3:93:49:8a:58:
89:22:6c:c7:d8:31:6e:3a:da:8e:95:aa:e0:25:1b:49:71:2e:
21:b0:61:60:39:18:7e:b0:01:ea:68:3e:dd:db:3a:c9:e3:b0:
2c:98:f5:0a:ac:14:11:bd:55:3d:ba:1d:10:b2:6e:5a:cd:1f:
ae:75:01:05:26:2c:ab:97:f7:9b:09:92:56:dc:b2:a6:56:2e:
2a:e0:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:21 2026 by rpki-client