Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/5MqdxpUmoPY0bkcMlWL7dENbtdA.roa
File: 5MqdxpUmoPY0bkcMlWL7dENbtdA.roa (raw, json)
Hash identifier: u8SWQnB7C+omfAWYG7xNKu3vZp7zWn9mbs68/2gQNuc=
Subject key identifier: E4:CA:9D:C6:95:26:A0:F6:34:6E:47:0C:95:62:FB:74:43:5B:B5:D0
Certificate issuer: /CN=6da13c60ff074c70df0409c3e028add68fa3e7f7
Certificate serial: 01A198ED8757FA7F687677432EDF37795DB1
Authority key identifier: 6D:A1:3C:60:FF:07:4C:70:DF:04:09:C3:E0:28:AD:D6:8F:A3:E7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/5MqdxpUmoPY0bkcMlWL7dENbtdA.roa
Signing time: Sun 01 Nov 2026 21:04:25 +0000
ROA not before: Sun 01 Nov 2026 21:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218455
IP address blocks: 2001:678:1360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:ed:87:57:fa:7f:68:76:77:43:2e:df:37:79:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da13c60ff074c70df0409c3e028add68fa3e7f7
Validity
Not Before: Nov 1 21:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4ca9dc69526a0f6346e470c9562fb74435bb5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:b5:38:3f:27:54:c6:27:e9:e6:81:8d:9f:
f2:db:13:2c:ba:64:1d:89:10:ed:ba:76:e6:20:52:
dc:2d:d7:38:bc:d8:8a:50:63:c8:df:d8:f8:be:54:
d4:f1:74:bb:82:5c:10:e2:22:ae:b8:27:91:7b:c8:
42:80:e6:cc:9e:28:3c:cb:1b:7b:cf:3e:db:67:df:
4a:88:5c:de:51:82:31:7e:f6:3e:f7:76:82:c1:2a:
c0:82:eb:5b:c9:43:75:04:5b:1c:10:88:61:45:db:
bc:41:fb:ed:5a:fe:37:18:60:dd:24:b4:dc:56:52:
e5:c7:1c:95:a4:d3:1c:43:cb:cd:25:95:42:50:6b:
4b:eb:8d:cf:9d:93:1c:42:67:a0:77:25:c1:8a:e3:
d1:1d:79:ba:24:f8:39:b4:cc:31:77:11:8e:89:37:
0a:6d:6b:92:6b:74:3c:5e:20:5c:ca:4b:b9:cb:55:
40:d9:f5:4b:14:c5:28:9e:23:bd:6d:bd:93:08:a1:
98:8c:f2:ed:64:3a:24:82:1b:98:77:da:b5:5a:5c:
cd:3c:b6:56:ca:73:b8:38:69:a0:36:22:50:02:31:
fb:4b:28:c4:a0:8d:f7:fd:31:c3:bc:e3:36:80:ce:
64:f2:53:6e:ee:99:97:7b:23:66:69:b4:02:db:e0:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:9D:C6:95:26:A0:F6:34:6E:47:0C:95:62:FB:74:43:5B:B5:D0
X509v3 Authority Key Identifier:
keyid:6D:A1:3C:60:FF:07:4C:70:DF:04:09:C3:E0:28:AD:D6:8F:A3:E7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/5MqdxpUmoPY0bkcMlWL7dENbtdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1360::/48
Signature Algorithm: sha256WithRSAEncryption
88:43:31:c2:a2:16:6d:b1:03:84:cb:2e:c5:4c:c4:92:82:72:
59:02:21:96:e2:a9:ed:5c:2b:bc:dc:b3:b7:fd:e4:ec:2b:b3:
8a:d8:5e:dc:e0:fa:58:2c:6e:77:e2:5d:d4:ae:74:33:68:79:
6d:db:35:11:b6:46:88:dc:43:cb:97:e2:56:43:52:32:1e:e8:
e6:23:ed:e8:74:1d:75:1e:42:54:4c:67:11:d8:34:b3:1d:17:
b1:94:ee:a3:d5:5d:21:4e:a8:4c:6c:46:ac:2b:06:f6:7a:96:
21:f2:a1:89:db:80:62:8e:b0:2c:42:df:b1:32:c8:05:86:10:
be:49:8c:4f:fb:bc:9e:80:be:0c:99:db:8c:6d:b4:d6:60:63:
e4:d6:fd:67:e1:cc:68:95:52:5e:32:bc:94:0c:12:a2:19:98:
3c:38:24:4c:03:72:a0:5c:7e:5d:66:6c:b3:39:ab:04:3f:fb:
1f:13:4c:bc:ac:bd:f2:a3:61:ab:75:ae:6e:22:c1:0b:e3:af:
ad:d7:3e:2c:88:3e:63:e4:bd:92:d5:60:f4:2f:6a:6f:40:58:
55:a5:c7:09:4f:54:d9:29:16:e8:05:d9:d5:5a:14:35:cc:e9:
8b:1b:e4:11:cf:17:64:bd:37:11:0b:e9:bc:b7:a6:f2:a1:80:
00:58:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:45:57 2026 by rpki-client