Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/Pkhf5Rsqg9MDsKoyFnMod3fegHw.roa
File: Pkhf5Rsqg9MDsKoyFnMod3fegHw.roa (raw, json)
Hash identifier: mmZzQ1x2yJBflnqmtqOAcQzFxESG5N3+yHsJR4Mb+g0=
Subject key identifier: 3E:48:5F:E5:1B:2A:83:D3:03:B0:AA:32:16:73:28:77:77:DE:80:7C
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 01A043E35E8837A6495CE4D573BF3EDD3341
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/Pkhf5Rsqg9MDsKoyFnMod3fegHw.roa
Signing time: Thu 27 Aug 2026 15:42:49 +0000
ROA not before: Thu 27 Aug 2026 15:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209505
IP address blocks: 2001:67c:b1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:e3:5e:88:37:a6:49:5c:e4:d5:73:bf:3e:dd:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Aug 27 15:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e485fe51b2a83d303b0aa321673287777de807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3e:f8:bf:bd:1a:3b:85:4e:90:59:38:94:fd:
79:09:37:83:6b:c7:ec:14:8b:b7:89:f0:dc:d7:ee:
c3:76:2f:0a:fd:d0:be:7c:96:94:07:4e:75:91:f0:
e2:64:6f:3d:7e:3a:9c:bd:08:83:ab:04:07:d1:6f:
65:d8:ee:64:59:c5:08:c7:12:6a:ca:ad:fc:20:66:
8e:cb:33:81:12:03:72:a6:ad:db:3d:1e:8d:3c:3a:
13:f2:18:bd:04:6f:b2:c5:49:0e:3f:7a:90:c8:fd:
52:31:44:db:0b:52:12:a1:02:e2:28:b2:21:2c:2a:
fb:ca:61:30:ba:4d:b6:08:f0:1a:b1:09:13:e8:b8:
d8:e8:fe:e1:30:61:81:96:47:eb:12:2d:1e:c0:8f:
7f:75:57:14:38:c6:bb:63:ca:3b:f2:4f:27:cb:db:
e3:d6:15:d2:7f:c8:1b:2c:57:02:d9:05:7a:56:9b:
a0:28:2d:40:88:61:a8:e3:b9:b4:d3:1c:c9:a2:0b:
34:86:4d:3d:a6:ae:23:0f:c6:6c:78:c1:c6:2b:9b:
32:a3:71:60:43:7a:eb:cb:e2:da:f1:b8:c6:3b:87:
3d:fd:14:02:e8:34:5f:7b:45:80:b6:99:89:d4:e1:
ae:c7:2e:a8:2e:5c:9e:d0:6a:95:b7:50:20:4d:d1:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:5F:E5:1B:2A:83:D3:03:B0:AA:32:16:73:28:77:77:DE:80:7C
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/Pkhf5Rsqg9MDsKoyFnMod3fegHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b1c::/48
Signature Algorithm: sha256WithRSAEncryption
14:56:d0:13:04:18:d2:e0:ad:0f:1d:55:37:c6:41:0b:f9:bd:
fe:b9:df:8d:24:e6:d4:54:05:c3:f6:16:a0:92:61:ef:60:64:
31:81:8d:bd:48:2c:dc:2a:70:1f:cc:5b:e6:11:82:ac:31:8e:
85:af:af:5f:d2:5f:92:f7:12:82:34:24:84:60:c3:a6:1a:93:
53:96:5e:e8:ca:35:e5:5e:f6:81:af:ea:eb:36:35:2c:c1:29:
6d:8f:87:28:b7:c7:aa:6c:4a:a0:19:dc:1e:f5:d7:82:a7:23:
f0:65:d7:36:39:1d:6d:97:27:e7:c7:e9:a0:85:2b:0f:1c:7e:
78:61:c1:f8:1d:8a:09:10:04:ac:e5:f4:d1:bd:7f:43:f3:e4:
63:ce:12:cf:1e:5e:dd:e6:76:ae:86:70:cd:f1:2f:6e:93:91:
d0:92:6c:dd:30:84:df:e0:1e:a8:3a:4f:19:27:f8:72:58:46:
4e:62:23:c5:31:89:22:a4:58:a8:72:9c:b4:fb:9c:ba:1d:a5:
85:16:9a:0f:dd:74:7a:85:eb:e3:5f:5a:89:90:39:bc:31:1d:
9e:38:f2:45:03:bd:3b:81:07:9c:c2:82:d8:d2:38:50:cc:27:
c8:48:07:d7:d5:29:c0:3f:59:c0:a6:4f:06:12:60:98:84:53:
86:23:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:49 2026 by rpki-client