Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/toFHyKC8our7yBb70ZIXyNMO4eA.roa
File: toFHyKC8our7yBb70ZIXyNMO4eA.roa (raw, json)
Hash identifier: jO5amPvqTLWbfhcMXZbzbGVv4S/YdrK8WIMcZov7fSg=
Subject key identifier: B6:81:47:C8:A0:BC:A2:EA:FB:C8:16:FB:D1:92:17:C8:D3:0E:E1:E0
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01A15377BF46EAD76D13F389BA0E7339C8F0
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/toFHyKC8our7yBb70ZIXyNMO4eA.roa
Signing time: Mon 19 Oct 2026 09:21:58 +0000
ROA not before: Mon 19 Oct 2026 09:21:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:5f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:77:bf:46:ea:d7:6d:13:f3:89:ba:0e:73:39:c8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Oct 19 09:21:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68147c8a0bca2eafbc816fbd19217c8d30ee1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:3a:dd:42:26:9d:3c:6d:b8:7e:6c:5c:83:
b6:f8:95:ea:22:ff:b6:b4:be:c0:7c:74:6c:3d:19:
9c:43:b7:dd:e4:4e:27:22:f3:f4:92:54:b2:0f:54:
45:43:5b:9e:fa:5c:da:75:13:88:24:d8:75:26:32:
f8:9a:4f:40:f3:6b:88:27:41:a0:a0:da:97:44:71:
09:11:de:9f:70:e7:cc:eb:71:96:c1:b6:73:e8:ec:
09:22:8f:a8:2f:6e:25:1c:4e:2d:d1:78:3c:d5:91:
18:f4:95:0a:ef:8f:51:20:7a:ad:1a:29:b1:bf:3e:
9c:a3:9a:a3:d5:29:c7:ca:ee:50:53:e8:04:7f:c8:
1f:dc:7b:f9:dc:ac:42:13:31:f4:fa:a6:38:fd:dc:
29:bd:bf:ae:c4:fa:4f:3b:f1:f8:20:b8:a1:af:ce:
1c:62:15:7a:5d:7d:2a:72:9e:ef:82:a3:72:8f:0a:
ec:ab:38:4f:06:f0:91:19:93:7c:22:b3:4a:3c:51:
c6:f6:72:e1:b6:1c:a3:9d:db:7e:b5:18:da:e1:96:
97:ff:d8:ca:d2:29:dd:fc:e0:82:87:03:c6:11:50:
b9:ef:e3:e8:ac:9d:92:f7:05:54:37:16:f9:89:17:
62:12:64:53:4f:9c:2a:bf:bd:d3:e3:21:a9:39:ec:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:47:C8:A0:BC:A2:EA:FB:C8:16:FB:D1:92:17:C8:D3:0E:E1:E0
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/toFHyKC8our7yBb70ZIXyNMO4eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
64:da:9c:11:61:e7:0f:0d:61:bb:72:13:9d:3c:fb:5c:c8:c4:
f4:5f:51:82:8d:5f:28:d4:84:83:1b:28:d5:9d:f2:49:a5:31:
12:00:96:e3:c0:7c:6c:09:2a:cc:c6:71:1b:f3:69:37:2f:84:
fa:76:ae:17:c4:0b:02:82:2d:87:2b:b1:84:f0:ff:75:fe:75:
8f:70:7e:bf:1f:68:1d:8d:cc:b8:e2:9a:b3:89:de:96:95:67:
81:28:39:ae:65:79:5c:25:2f:d2:7f:4c:0f:2f:8f:3f:89:ed:
49:5b:8c:8d:1b:b9:f1:53:eb:df:39:81:8b:7d:62:11:6e:78:
7d:12:0c:7d:ea:e2:d5:44:70:a4:c6:f0:ee:dd:10:f7:54:9e:
61:80:8a:b8:f5:43:3a:99:53:f3:80:4e:98:59:ef:8a:07:7a:
29:55:87:c5:7e:65:8d:c5:97:c0:60:37:a3:0a:b1:7f:59:4c:
e9:9c:c3:ec:05:c2:2f:2b:b4:57:b2:e0:07:98:15:75:af:43:
ca:dc:86:8b:2d:17:2d:0c:31:79:cb:be:fa:25:85:33:67:21:
09:6a:1b:ac:d2:1f:25:85:09:f1:c3:5c:d7:44:d5:33:d1:d0:
e8:38:20:20:62:21:d3:c9:98:e5:2a:9c:40:f5:b3:11:91:40:
84:fe:3a:f1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFTd79G6tdtE/OJug5zOcjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi
M2M0ZmQwHhcNMjYxMDE5MDkyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjgxNDdjOGEwYmNhMmVhZmJjODE2ZmJkMTkyMTdjOGQzMGVlMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtec63UImnTxtuH5sXIO2+JXqIv+2
tL7AfHRsPRmcQ7fd5E4nIvP0klSyD1RFQ1ue+lzadROIJNh1JjL4mk9A82uIJ0Gg
oNqXRHEJEd6fcOfM63GWwbZz6OwJIo+oL24lHE4t0Xg81ZEY9JUK749RIHqtGimx
vz6co5qj1SnHyu5QU+gEf8gf3Hv53KxCEzH0+qY4/dwpvb+uxPpPO/H4ILihr84c
YhV6XX0qcp7vgqNyjwrsqzhPBvCRGZN8IrNKPFHG9nLhthyjndt+tRja4ZaX/9jK
0ind/OCChwPGEVC57+PorJ2S9wVUNxb5iRdiEmRTT5wqv73T4yGpOezWgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLaBR8igvKLq+8gW+9GSF8jTDuHgMB8GA1UdIwQY
MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt
MDU2NWYzMzdkY2JlLzEvdG9GSHlLQzhvdXI3eUJiNzBaSVh5Tk1PNGVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl
LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRfADAN
BgkqhkiG9w0BAQsFAAOCAQEAZNqcEWHnDw1hu3ITnTz7XMjE9F9Rgo1fKNSEgxso
1Z3ySaUxEgCW48B8bAkqzMZxG/NpNy+E+nauF8QLAoIthyuxhPD/df51j3B+vx9o
HY3MuOKas4nelpVngSg5rmV5XCUv0n9MDy+PP4ntSVuMjRu58VPr3zmBi31iEW54
fRIMferi1URwpMbw7t0Q91SeYYCKuPVDOplT84BOmFnvigd6KVWHxX5ljcWXwGA3
owqxf1lM6ZzD7AXCLyu0V7LgB5gVda9DytyGiy0XLQwxecu++iWFM2chCWobrNIf
JYUJ8cNc10TVM9HQ6DggIGIh08mY5SqcQPWzEZFAhP468Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:54:56 2026 by rpki-client