Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/5DIXYN3iWyCCglaKPyTEISwSvcQ.roa
File: 5DIXYN3iWyCCglaKPyTEISwSvcQ.roa (raw, json)
Hash identifier: wzPomSvtsUqVc3cXXuStopuzX0SMyf27R/3+Wz39SlQ=
Subject key identifier: E4:32:17:60:DD:E2:5B:20:82:82:56:8A:3F:24:C4:21:2C:12:BD:C4
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A0E7EB05CB631826199AB9D7A1E602F466
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/5DIXYN3iWyCCglaKPyTEISwSvcQ.roa
Signing time: Mon 28 Sep 2026 12:08:54 +0000
ROA not before: Mon 28 Sep 2026 12:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215613
IP address blocks: 5.144.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:eb:05:cb:63:18:26:19:9a:b9:d7:a1:e6:02:f4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Sep 28 12:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4321760dde25b208282568a3f24c4212c12bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:d2:9d:4c:25:31:e7:29:3d:5c:d6:70:be:
69:d0:f6:e2:93:74:b0:09:3b:5e:df:94:01:b3:d3:
28:e3:f8:cb:00:a5:90:6f:f5:c3:fd:30:a9:51:c7:
24:e2:56:05:13:0f:4f:e4:fd:11:95:dd:2b:38:78:
7e:d2:30:88:f9:b0:f4:18:a8:15:c1:0f:41:3d:0d:
7c:6c:cd:36:23:5f:e0:95:5d:10:d3:5a:6b:dd:95:
11:ec:a5:dd:25:3a:7e:b7:50:c7:4e:0d:5f:1b:9f:
39:74:d5:6b:ab:dc:ef:55:3d:3c:f5:a9:1c:85:ac:
75:50:70:7a:4e:a2:55:ca:21:29:ed:62:8e:84:f1:
37:05:63:88:73:61:5a:70:b1:a9:ae:76:f0:1b:9a:
23:ed:3e:24:99:36:7d:3f:b9:00:ae:5c:8e:9d:e8:
f6:ae:50:20:fe:5d:4d:e4:20:31:b1:1c:5c:11:7c:
07:f8:8c:01:67:80:60:cb:4a:ac:ca:c8:fb:e0:73:
7f:73:f5:28:54:c8:30:4a:d9:cb:fa:06:82:93:78:
d5:78:f8:77:37:06:85:b7:8d:59:d8:22:a2:ce:99:
73:f6:bb:e9:46:53:56:f8:24:43:86:fc:cc:de:59:
22:67:ad:11:2c:e1:b1:21:fb:65:27:7c:1a:06:60:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:17:60:DD:E2:5B:20:82:82:56:8A:3F:24:C4:21:2C:12:BD:C4
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/5DIXYN3iWyCCglaKPyTEISwSvcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:6d:68:76:dd:52:ef:d6:c6:b7:5b:82:65:5e:36:bc:f3:de:
85:2f:4d:94:a9:36:b2:ad:88:97:f8:98:b5:d7:da:cc:1d:2f:
0c:a9:85:6e:5a:3c:25:34:64:70:71:d4:03:a4:32:96:4f:37:
a1:19:b1:ca:c9:dd:15:a1:b6:21:55:1c:97:d1:f2:56:b6:80:
50:35:ed:ea:d8:35:74:7a:64:f6:3e:11:94:8c:92:84:cf:13:
d2:41:23:e5:b3:87:ab:f5:21:df:34:aa:3f:15:f2:06:7e:4a:
74:f4:8d:d9:c1:c8:53:70:81:5e:e3:14:66:3f:e7:91:56:a4:
6e:be:61:91:54:f4:a1:6e:5a:2d:7a:e4:ff:61:fa:fd:24:44:
13:37:07:7c:0c:5a:52:64:d8:03:af:90:b5:31:27:90:ac:a4:
71:c8:08:f1:60:75:33:7d:96:38:82:88:9e:e0:99:a3:5d:a2:
3b:63:62:68:b7:bc:fc:06:60:c5:64:cf:bd:37:c5:19:19:76:
fb:2d:6f:58:8c:77:99:93:51:cd:f0:0d:e2:96:a9:84:5d:ec:
db:e2:47:22:6a:cf:3a:3f:88:6c:70:76:3f:93:c4:d6:6c:d8:
ea:0f:9f:03:df:e8:bd:2d:3c:ff:aa:c9:c7:83:8e:62:7c:37:
b9:84:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:20:24 2026 by rpki-client