Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/laQy4Wer-MeK7_ZIFecIrIa3BYE.roa
File: laQy4Wer-MeK7_ZIFecIrIa3BYE.roa (raw, json)
Hash identifier: GIqBZqp8MxiBgUobnm0UVDm8lJqcl76WM/fO2JMPIBI=
Subject key identifier: 95:A4:32:E1:67:AB:F8:C7:8A:EF:F6:48:15:E7:08:AC:86:B7:05:81
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A115C7ED474CAD3BEDB19DD65DD072D445
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/laQy4Wer-MeK7_ZIFecIrIa3BYE.roa
Signing time: Wed 07 Oct 2026 09:53:06 +0000
ROA not before: Wed 07 Oct 2026 09:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.254.166.0/24 maxlen: 24
5.254.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:c7:ed:47:4c:ad:3b:ed:b1:9d:d6:5d:d0:72:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Oct 7 09:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a432e167abf8c78aeff64815e708ac86b70581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:c5:7a:15:06:1f:b6:68:b2:65:46:bf:94:
6c:50:b1:48:3f:75:15:79:f4:79:00:91:89:2a:79:
ac:8f:35:61:a9:f6:74:13:02:18:e0:fa:37:62:d6:
ec:87:38:df:ca:33:ee:35:17:95:c3:da:ef:2b:0c:
c8:0d:17:2b:00:85:f7:1a:ec:89:32:77:b3:73:20:
8e:b9:f1:b9:fc:ca:13:42:83:86:fb:1e:a3:de:d8:
3a:58:a7:f8:71:07:41:a5:dc:18:96:b8:84:45:88:
e7:b9:cc:0d:6b:90:c2:57:f8:b1:45:71:5d:b2:c7:
63:e1:b6:30:94:45:82:3f:46:86:9f:5a:01:1f:91:
84:5c:6a:4e:2d:10:e6:ec:63:1b:2f:1b:e1:f3:f2:
2f:8e:03:0e:5c:27:43:73:70:8e:f9:cc:d5:ee:cf:
83:82:af:11:7d:61:d8:a8:2e:bd:6c:5d:c6:ab:77:
80:4a:a8:26:3b:74:d4:48:e1:7e:06:14:fb:2d:10:
47:9c:e5:1d:4b:f0:7f:99:0c:2f:ea:21:5c:fd:6e:
62:2c:aa:e4:94:bf:d7:ae:6b:b4:38:4e:3d:55:bc:
56:5f:b5:9f:a1:ff:07:c5:fb:cb:92:65:03:32:ba:
a7:83:b8:66:fa:da:39:b7:18:4f:79:1b:23:d9:4a:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:32:E1:67:AB:F8:C7:8A:EF:F6:48:15:E7:08:AC:86:B7:05:81
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/laQy4Wer-MeK7_ZIFecIrIa3BYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.166.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:8f:f6:7e:3e:ac:bb:31:d6:c2:28:3a:37:9a:d6:3f:60:7b:
63:4f:41:85:4b:e2:cb:72:66:8d:ad:15:38:68:e1:5e:80:9e:
f4:6a:e6:99:17:af:13:7b:ad:e7:bc:96:6e:cf:79:a7:f4:c6:
ab:19:e7:77:66:18:74:58:5d:3f:36:74:a7:5b:d2:c6:f3:1b:
9b:3d:70:a0:ea:fc:2c:0a:e3:13:9a:29:9d:97:4e:b4:a4:d6:
e5:8b:07:95:cd:6c:77:eb:7f:d9:33:44:c6:7b:71:72:aa:b1:
f0:59:f6:37:d2:13:40:a3:22:d0:f6:f3:50:e5:b0:e3:6e:f2:
55:b8:e3:cc:f4:89:6f:dd:7a:40:c5:a6:04:55:3d:a7:d9:29:
bd:88:15:1f:17:ef:c5:80:60:87:c9:72:41:d9:5a:09:2f:80:
36:87:06:bb:ab:4c:8a:c3:34:70:24:a2:9a:bc:4b:55:3b:95:
26:14:b5:a3:98:e1:e3:38:7f:61:41:27:c5:35:32:16:d4:ba:
be:d4:ba:3c:ea:a9:1e:96:e7:41:23:87:de:d5:ce:66:24:94:
a1:66:b0:35:c8:68:ed:8c:fa:4b:d5:77:22:14:20:09:0a:f4:
cb:96:14:4f:46:e8:a2:c4:b5:e8:94:d9:52:16:a6:dd:b2:6e:
53:48:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 23:55:31 2026 by rpki-client