Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/l4-d5SvMomjdFUDqgivEAjMb3Jc.roa
File: l4-d5SvMomjdFUDqgivEAjMb3Jc.roa (raw, json)
Hash identifier: 0ZRBDEnU53gKRwXc7PBdtexg08xkZTFwaLUEyX3bxXY=
Subject key identifier: 97:8F:9D:E5:2B:CC:A2:68:DD:15:40:EA:82:2B:C4:02:33:1B:DC:97
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019D90F309AB0418A02A8935499031FC738B
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/l4-d5SvMomjdFUDqgivEAjMb3Jc.roa
Signing time: Wed 15 Apr 2026 11:42:19 +0000
ROA not before: Wed 15 Apr 2026 11:42:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 185.29.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:f3:09:ab:04:18:a0:2a:89:35:49:90:31:fc:73:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Apr 15 11:42:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=978f9de52bcca268dd1540ea822bc402331bdc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:00:30:87:8c:bc:06:8e:52:ea:05:60:9e:
3c:6e:05:c6:c9:13:aa:ad:47:6b:0c:b4:c4:e4:eb:
15:e6:8f:47:01:8b:1b:f9:d5:ea:8e:57:15:e3:8f:
24:a5:55:1a:fc:7c:e0:6f:76:a5:62:8d:ed:54:7b:
d3:3d:ed:eb:24:31:18:48:8b:e6:72:0a:e5:98:24:
97:5d:90:4a:86:c5:b8:72:86:88:7d:ce:9b:92:ff:
f5:0b:7f:bd:32:08:56:32:74:d7:f5:6b:10:79:99:
dd:0f:ee:c8:8e:a1:0f:63:c6:53:3d:58:c5:97:f4:
5d:3d:ac:a8:dd:85:f7:0c:8e:e2:81:6c:e2:36:27:
16:8a:dc:7d:86:8f:d8:84:1c:04:ca:ee:62:9b:58:
db:25:81:aa:4d:44:8a:a9:19:c2:2d:3f:25:1b:f2:
c6:8f:38:21:93:d5:b6:0d:7a:24:38:08:82:17:bf:
10:c0:eb:a9:03:48:c8:06:fd:94:f8:8d:2d:97:b3:
9b:8c:e9:79:b7:5f:e7:9b:30:25:65:29:d7:d2:4c:
34:f5:b7:fd:36:22:be:f1:59:7e:44:c8:c6:e7:7b:
1f:63:43:0a:43:bd:70:33:af:ee:95:01:f7:97:47:
47:bb:d2:48:2e:26:be:b6:bb:8a:e5:0c:87:bb:82:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:9D:E5:2B:CC:A2:68:DD:15:40:EA:82:2B:C4:02:33:1B:DC:97
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/l4-d5SvMomjdFUDqgivEAjMb3Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.5.0/24
Signature Algorithm: sha256WithRSAEncryption
86:77:eb:cd:5e:a1:e0:68:2a:1c:bf:29:f6:28:66:bd:b1:b8:
0c:51:07:7d:98:8e:06:8f:d4:0d:99:d3:72:b7:37:52:68:4f:
c9:80:03:57:9c:70:08:f2:b7:c9:3c:59:56:66:60:68:3f:25:
a1:83:d6:7b:24:87:86:18:ee:8e:de:7b:33:04:2c:ff:3b:1c:
50:df:d5:89:1f:f4:77:2b:05:80:76:e2:d3:af:98:b4:9f:94:
2b:79:4c:ef:fc:19:c3:a8:7f:8b:84:19:90:20:a3:b5:10:3d:
af:ce:e4:ed:69:a8:43:84:9d:16:6b:bc:18:0c:b8:fc:5d:67:
d7:74:b7:5b:fd:55:b8:ab:ba:9c:64:0c:1b:db:6b:56:0f:ba:
ac:b8:91:73:98:26:5e:08:21:a7:ec:8d:43:ee:05:89:09:eb:
c8:5e:35:16:f5:05:40:57:6b:38:ec:48:6d:2d:f9:72:35:a5:
55:a7:ee:fc:19:b1:1a:28:02:2b:a7:ea:68:16:1e:a9:b2:e3:
d9:81:bf:2c:6b:3f:f1:0d:5b:77:52:96:b4:00:71:05:ff:c1:
85:5c:61:2f:74:44:b3:cd:4d:35:ed:7c:38:e7:90:c0:27:c4:
ee:46:bc:b2:85:68:df:20:5b:e0:bb:aa:65:29:49:39:6e:84:
00:c2:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:02 2026 by rpki-client