Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/kMSjqJOrzJDpG8FFrIFiinruuxs.roa
File: kMSjqJOrzJDpG8FFrIFiinruuxs.roa (raw, json)
Hash identifier: qq+kGxkHnwsPE0vpu7WxOqMNZmZUOTdi5OXzBh28VFs=
Subject key identifier: 90:C4:A3:A8:93:AB:CC:90:E9:1B:C1:45:AC:81:62:8A:7A:EE:BB:1B
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019E7321ACB4CEDB7DB81DD886179987C250
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/kMSjqJOrzJDpG8FFrIFiinruuxs.roa
Signing time: Fri 29 May 2026 09:47:27 +0000
ROA not before: Fri 29 May 2026 09:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36352
IP address blocks: 5.226.171.0/24 maxlen: 24
5.226.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:21:ac:b4:ce:db:7d:b8:1d:d8:86:17:99:87:c2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: May 29 09:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90c4a3a893abcc90e91bc145ac81628a7aeebb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:7d:0c:08:db:df:30:39:41:0b:4f:6e:7b:
c7:c9:9d:29:3e:1f:fd:5b:6a:70:0c:cc:81:80:5e:
ba:d6:09:59:4e:1e:75:9b:95:07:c9:a1:1c:f2:98:
f3:c3:dd:96:3a:53:f0:1c:90:f6:c0:05:46:78:10:
86:34:2e:12:d5:b6:70:a1:12:02:aa:81:0d:00:f0:
5b:a4:fc:ca:cb:29:0d:a0:c0:4d:86:73:8a:6e:b4:
1b:47:6f:d5:08:db:f8:a1:85:34:de:bd:a9:af:47:
84:d9:12:c8:92:d4:88:e3:5b:c8:ba:9d:35:60:7f:
1b:7c:c8:0b:59:3e:96:66:83:70:93:b9:cb:ce:9a:
a2:a7:29:f3:fc:33:a7:84:b4:e0:ae:eb:f8:1f:49:
c9:91:0c:8d:50:30:ba:72:7a:53:2a:8c:c2:84:5e:
28:68:1d:8c:5b:f8:0c:46:7b:51:55:e7:05:05:dc:
c7:ac:99:17:e0:1a:94:98:45:40:4b:75:3e:07:7f:
66:57:f6:8f:24:82:e6:50:77:da:22:03:8f:96:e1:
23:90:00:3b:46:55:18:93:a9:6d:44:ad:bf:64:85:
bb:cb:fb:d1:18:46:db:69:e8:39:83:d6:0b:d0:44:
a2:3b:6c:5f:51:e5:0c:0f:a6:66:bc:27:87:72:1d:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:A3:A8:93:AB:CC:90:E9:1B:C1:45:AC:81:62:8A:7A:EE:BB:1B
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/kMSjqJOrzJDpG8FFrIFiinruuxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.171.0/24
5.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
41:36:7b:3b:13:2a:55:7b:f7:32:c9:d6:e8:36:d3:e3:30:06:
c7:31:ec:69:b4:04:da:fa:47:57:14:10:ce:b0:98:62:1d:df:
cc:81:d2:dc:d0:06:9e:22:fb:28:d2:29:2f:84:57:50:09:fc:
83:63:be:f3:c7:ce:09:16:bb:c4:55:af:2b:15:1a:36:7d:39:
cb:fe:e8:ab:66:2f:51:d7:70:28:ee:ab:4a:5a:58:15:2f:31:
3c:5a:dd:6f:f4:02:05:6c:78:01:c3:88:93:d5:d8:32:e3:d8:
f5:e2:12:7b:3d:82:c5:fa:cd:7c:8c:98:5f:0f:62:e7:09:e4:
e2:2a:7c:e2:4a:50:ec:a7:dd:3e:3f:ac:42:ce:20:4c:8c:32:
57:2f:28:d8:35:23:de:81:37:fb:db:38:d3:af:5c:78:28:dd:
d6:9e:78:52:4b:ce:dd:80:12:56:4a:07:33:58:64:b7:5a:d0:
89:d9:ea:66:cc:64:74:86:d0:24:93:a9:8d:22:9e:70:d0:c9:
a3:7a:04:93:70:a7:34:c0:a5:98:1b:18:35:4b:12:1a:23:e2:
40:28:0e:15:ae:3a:9d:7d:d4:c8:38:78:72:cd:44:4c:c1:29:
03:ab:ca:be:40:1b:da:9c:46:c4:73:77:19:d5:08:8e:c7:56:
6d:dd:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:35 2026 by rpki-client