Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/fA6w6VP7R2vZKZKUNqK2JWzERWU.roa
File: fA6w6VP7R2vZKZKUNqK2JWzERWU.roa (raw, json)
Hash identifier: I+bcdmGqkiGBZV/bV8LduLxTTcNcRIHlDEGmlUDqWy4=
Subject key identifier: 7C:0E:B0:E9:53:FB:47:6B:D9:29:92:94:36:A2:B6:25:6C:C4:45:65
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A0816AE3C51959056C7487A7D2F5685790
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/fA6w6VP7R2vZKZKUNqK2JWzERWU.roa
Signing time: Tue 08 Sep 2026 14:27:41 +0000
ROA not before: Tue 08 Sep 2026 14:27:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15533
IP address blocks: 5.32.152.0/21 maxlen: 21
37.244.64.0/18 maxlen: 18
62.73.128.0/19 maxlen: 19
91.185.160.0/20 maxlen: 20
176.62.128.0/21 maxlen: 21
213.212.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:6a:e3:c5:19:59:05:6c:74:87:a7:d2:f5:68:57:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Sep 8 14:27:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c0eb0e953fb476bd929929436a2b6256cc44565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:10:11:75:82:13:ab:39:8f:f1:ab:28:ec:
60:59:e3:51:04:46:be:2a:76:92:f4:2b:35:7b:c2:
ce:a3:48:cc:c9:8a:d5:dc:76:42:1c:fa:62:23:61:
5b:39:6a:11:e6:fd:7e:59:a7:98:d5:07:72:61:65:
45:3e:99:66:04:92:5d:62:6f:63:26:1a:20:24:ad:
51:1f:cc:af:fd:dc:3d:44:b6:7f:e3:32:ab:36:e3:
9e:b3:7e:60:38:a4:9b:d1:53:88:6c:f8:7b:d2:f7:
c3:84:13:d4:41:63:5e:41:60:73:8d:a3:4c:fb:bd:
17:3a:a2:7f:74:c7:f2:3b:8e:01:8e:df:12:4a:96:
29:36:bf:a6:9c:be:ee:28:97:43:16:57:4c:bf:2d:
4c:4e:bd:b3:36:b6:a2:02:1a:ff:2b:79:13:d3:a0:
52:9b:94:d8:ee:1b:04:9a:a9:92:3f:07:71:22:ce:
2b:ff:f9:61:fd:f4:37:a4:7a:17:e7:7c:27:a0:8f:
6b:47:92:00:e9:ad:4f:df:dd:e2:12:b6:be:19:8a:
16:4d:5b:0e:37:c9:4b:03:b4:3e:f8:02:f5:7f:81:
c3:f2:d0:da:9e:b0:60:0e:d6:27:07:70:50:4d:65:
76:56:0c:a6:5f:23:16:07:ba:16:2b:ae:5d:62:68:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:B0:E9:53:FB:47:6B:D9:29:92:94:36:A2:B6:25:6C:C4:45:65
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/fA6w6VP7R2vZKZKUNqK2JWzERWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.152.0/21
37.244.64.0/18
62.73.128.0/19
91.185.160.0/20
176.62.128.0/21
213.212.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:38:a0:0d:eb:f0:f5:ff:77:e9:a6:37:b5:36:80:50:db:22:
74:60:e0:2a:38:07:ba:e0:5b:1a:90:a6:5c:d1:6d:a3:f6:6f:
e9:66:98:ef:84:32:a2:ed:a3:13:2f:bd:18:88:65:58:65:58:
b7:6b:84:ae:7f:ef:be:21:74:eb:a5:00:77:e9:d7:f7:fd:db:
fd:de:0e:8b:56:1b:79:18:c6:de:8c:e8:b4:a3:06:1e:0a:87:
47:61:f1:a3:18:af:7f:14:ac:82:d7:ef:64:4f:33:fb:89:4c:
f8:4e:8d:f7:a9:a4:47:d0:cc:4c:28:8b:5f:7e:e0:7b:60:92:
2b:aa:f3:8f:4c:33:d9:0d:16:a5:71:52:37:29:c7:a5:f3:a1:
31:ed:d5:e5:d7:9e:1a:d2:c4:6e:3e:f4:b5:43:e4:eb:db:10:
5d:bd:0c:ce:23:db:91:56:35:db:bc:f1:4f:20:9c:01:3a:fa:
d7:d6:8b:aa:e0:21:58:1b:18:43:23:e0:c7:70:bd:b4:3f:0a:
b1:87:23:9b:9a:93:2d:55:90:60:12:94:53:9b:83:02:6d:9b:
24:2e:24:4d:52:05:da:58:b1:58:5e:b8:22:62:5b:60:e8:62:
cc:44:da:72:97:ff:5e:c0:a8:8b:2e:0b:fe:e2:f3:ea:bc:fe:
a2:fc:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:37:32 2026 by rpki-client