Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/U5qz6xEJwpl9W5yFofcjv_QYJdg.roa
File: U5qz6xEJwpl9W5yFofcjv_QYJdg.roa (raw, json)
Hash identifier: SFU07nCtw7gmZMA4jhGAvEN7wK5wQZgNbDVm6oGSUf8=
Subject key identifier: 53:9A:B3:EB:11:09:C2:99:7D:5B:9C:85:A1:F7:23:BF:F4:18:25:D8
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019F952BA93DFFCBC0BBB7BC64692865BF1E
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/U5qz6xEJwpl9W5yFofcjv_QYJdg.roa
Signing time: Fri 24 Jul 2026 17:28:14 +0000
ROA not before: Fri 24 Jul 2026 17:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 158.94.80.0/21 maxlen: 21
158.94.88.0/21 maxlen: 21
158.94.96.0/20 maxlen: 20
158.94.112.0/20 maxlen: 20
158.94.128.0/20 maxlen: 20
158.94.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:2b:a9:3d:ff:cb:c0:bb:b7:bc:64:69:28:65:bf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Jul 24 17:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=539ab3eb1109c2997d5b9c85a1f723bff41825d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:14:c4:70:e4:ff:f6:d0:e0:b4:5c:f4:be:
24:f2:8f:41:b2:08:b1:ad:68:57:cd:02:b2:2d:a9:
08:c2:b7:bf:91:86:88:62:86:9a:5b:7d:1e:33:82:
5b:c0:ad:93:4b:c8:c1:7c:91:99:09:ca:50:8a:ea:
7d:4a:48:5d:bc:b6:a9:1a:a5:f3:b7:7d:b2:ba:34:
2e:e3:0b:1b:5a:51:bf:1f:64:15:fe:da:dc:5a:78:
ca:4a:21:8a:9c:74:64:b8:8c:30:fd:a5:f2:a2:f6:
7d:27:83:d4:9a:f6:b3:8c:cf:4a:5b:30:49:8e:3c:
b8:5b:4f:b4:4a:16:a4:e2:14:e2:85:ec:bc:6f:ee:
e8:e7:6a:60:62:7a:a3:11:06:ce:06:d4:69:58:1f:
72:32:75:3f:80:49:fc:47:2e:69:c3:47:0d:76:6a:
a6:68:13:bf:0a:52:41:52:5f:53:26:96:53:45:30:
87:ab:34:cd:33:79:41:d1:4d:e8:dd:1f:99:dc:d7:
fc:d3:a2:e9:45:00:62:92:8b:b3:25:fe:a4:ee:a0:
7e:05:19:a3:3e:b8:27:e9:44:6d:93:a6:95:d6:b7:
f4:ea:d3:a0:4c:f1:11:f3:6b:c1:81:f7:07:b8:e0:
d4:0f:19:3b:90:e0:be:5d:91:a9:8e:a7:d3:54:6a:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:B3:EB:11:09:C2:99:7D:5B:9C:85:A1:F7:23:BF:F4:18:25:D8
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/U5qz6xEJwpl9W5yFofcjv_QYJdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.80.0-158.94.159.255
Signature Algorithm: sha256WithRSAEncryption
74:6a:ef:4d:b5:88:e7:54:ee:1a:75:7b:c1:ba:fa:eb:c7:b5:
42:19:81:8a:b8:9c:d0:2a:ee:a7:21:c7:45:7f:84:e6:92:3a:
2d:1c:43:50:0b:19:ab:16:a7:1e:c9:06:1d:27:dd:8e:b9:28:
60:f5:11:6c:d7:30:53:da:2c:20:2d:89:78:d3:7b:77:63:52:
bc:ac:58:25:2a:9c:53:32:cf:3c:a9:18:1a:f8:5a:6d:4e:eb:
a4:00:c8:78:26:70:76:3a:b2:06:6b:21:b4:69:e6:ca:bc:c8:
a2:7b:9f:ae:4e:0b:c9:13:22:a4:82:34:17:cb:ee:2a:68:f1:
12:63:db:47:66:75:ed:53:54:19:8e:1d:01:46:4e:dc:4d:9c:
37:08:f4:f3:ec:2c:31:69:c7:0b:42:4b:39:8c:59:23:8b:e3:
1f:35:17:86:37:f7:9d:c7:c3:13:e5:55:22:e6:d3:d3:c8:0b:
67:6d:44:23:bd:59:6f:eb:d0:66:f9:c4:8e:b7:67:ad:0d:23:
82:9e:f4:cc:13:33:10:d6:af:c0:2b:97:b3:03:aa:84:a7:60:
8a:41:c7:d2:4b:4f:96:ea:bb:8f:40:0a:77:7c:e2:ed:1d:e1:
3c:f4:5a:8f:12:e5:b9:bc:7c:e0:3a:65:55:b5:78:50:d6:ba:
c0:cd:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:48:31 2026 by rpki-client