Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/I3J5Yun8FNG0gKgGhYfOgZrhxmE.roa
File: I3J5Yun8FNG0gKgGhYfOgZrhxmE.roa (raw, json)
Hash identifier: wZkItnpwIMeK3BCcvuuXAEf0YQ420bG0GfKY+q+hnQ8=
Subject key identifier: 23:72:79:62:E9:FC:14:D1:B4:80:A8:06:85:87:CE:81:9A:E1:C6:61
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A1105D8258DD711C3B6900A994B0C99E53
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/I3J5Yun8FNG0gKgGhYfOgZrhxmE.roa
Signing time: Tue 06 Oct 2026 08:38:46 +0000
ROA not before: Tue 06 Oct 2026 08:38:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215877
IP address blocks: 145.107.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:5d:82:58:dd:71:1c:3b:69:00:a9:94:b0:c9:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 6 08:38:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23727962e9fc14d1b480a8068587ce819ae1c661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:bd:78:49:ea:c4:ff:62:ad:80:c4:8e:52:
7f:a8:c4:92:4e:70:09:56:c9:9a:f4:97:36:f8:5f:
db:62:cd:35:41:fa:ef:b9:d9:a4:16:64:02:fe:eb:
0d:d4:21:4a:40:21:20:0c:49:f9:8a:66:d6:50:37:
77:12:8a:1e:d2:49:b5:c6:d1:7b:3b:8a:8c:bc:2e:
f2:d5:ab:18:e5:78:25:5b:fb:cc:8b:b8:df:be:20:
3a:47:bf:27:c0:1e:99:06:67:8c:2c:8b:10:1c:7b:
3d:97:53:d5:b8:ac:56:26:4b:f9:46:74:6b:69:52:
76:e5:b9:c4:09:56:81:1a:08:73:5a:4e:92:1d:93:
42:54:3d:5f:0f:e0:87:99:ad:d1:9e:3f:9f:57:1b:
12:d4:b2:98:d4:fe:91:ef:99:9e:f6:e8:22:61:90:
10:1a:f6:08:99:cc:7c:b9:78:9a:7a:59:98:ad:8a:
71:57:c1:06:26:56:eb:cc:18:41:b0:06:82:6f:e9:
d9:4e:33:b7:5d:d8:f7:ca:da:08:c9:2d:a6:04:89:
dd:79:f2:c7:35:ed:12:3c:4a:4c:da:68:0c:75:3e:
b2:60:be:54:8b:d8:2c:28:f5:81:b5:15:7d:df:66:
47:b4:53:08:4b:9a:42:64:43:af:11:f1:35:7f:49:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:79:62:E9:FC:14:D1:B4:80:A8:06:85:87:CE:81:9A:E1:C6:61
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/I3J5Yun8FNG0gKgGhYfOgZrhxmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.107.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b0:02:62:3e:b0:19:54:2c:d5:cf:90:38:fe:80:bb:80:4f:
c4:25:55:ac:b6:0e:f5:f1:c6:cf:1f:b4:97:7e:15:dc:67:a8:
24:24:72:c8:32:40:e0:7b:fe:e5:a7:01:f1:3e:e7:7c:75:08:
d4:b0:a0:56:1a:f6:20:9b:39:a2:ee:f2:18:f4:35:ce:2d:a3:
3a:89:d4:ad:3d:dc:76:85:53:d9:bf:d3:10:fa:6c:06:96:20:
93:b2:81:9d:44:4a:fc:06:59:09:aa:84:fd:c0:51:42:de:80:
70:30:a2:49:b6:72:d9:f7:9d:24:5e:4e:0c:fe:1d:62:ae:2c:
8b:c2:a2:36:d7:47:b1:d5:63:fb:85:fc:47:17:75:7d:fc:2c:
83:80:65:be:c0:60:c2:7b:fe:d9:c0:f5:ba:52:20:c1:2f:a2:
0d:69:b5:db:7f:f4:14:1f:4d:58:04:8f:ef:13:94:dd:76:de:
d9:0e:a4:65:38:f4:cd:02:f7:45:a4:73:64:0f:db:7b:97:2e:
d5:ec:14:40:54:43:4b:c1:c6:5c:9c:b1:68:6e:90:ca:4b:e1:
2f:29:f8:d8:4c:5e:73:9d:30:51:3b:bd:a9:ab:55:ab:05:b8:
84:e4:fa:f6:0b:16:66:b0:e5:c7:cb:29:c3:43:72:ce:44:8f:
22:00:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:17:45 2026 by rpki-client