Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/4UwlYnr52PGvgrKUwZbaj95o1GA.roa
File: 4UwlYnr52PGvgrKUwZbaj95o1GA.roa (raw, json)
Hash identifier: +2AP9nSVJw2jCPzcUReDcj4cufxT4/ipf0cJtgIcbr0=
Subject key identifier: E1:4C:25:62:7A:F9:D8:F1:AF:82:B2:94:C1:96:DA:8F:DE:68:D4:60
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A0B14076F5166868AD6BF2ADB76E5CD9D3
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/4UwlYnr52PGvgrKUwZbaj95o1GA.roa
Signing time: Thu 17 Sep 2026 21:23:07 +0000
ROA not before: Thu 17 Sep 2026 21:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.39.0/24 maxlen: 24
195.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:40:76:f5:16:68:68:ad:6b:f2:ad:b7:6e:5c:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 17 21:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e14c25627af9d8f1af82b294c196da8fde68d460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:1d:bc:76:1a:8d:63:ad:ff:13:d6:74:50:
ae:57:4a:9d:9c:40:ec:97:98:9e:00:cc:64:8d:bc:
bf:48:e0:95:22:f5:a2:f6:ef:80:40:2d:d2:7e:2d:
d5:3d:60:ff:52:9c:3c:fc:9a:f6:5e:61:c8:f2:82:
03:d2:94:03:53:b7:da:7e:28:da:01:f3:a1:73:45:
b5:4f:aa:ef:3a:64:90:e1:6a:02:94:5b:fc:8f:af:
1b:e3:05:4e:22:a2:00:f0:0a:a4:09:4a:01:37:21:
8e:08:0a:67:e4:72:6a:5b:b3:4e:57:1c:95:49:c6:
dd:f5:20:29:3b:29:af:3e:64:62:69:c9:20:99:d7:
ba:fb:ef:c5:15:5c:d8:03:1d:d7:5f:d5:66:cd:95:
f5:52:da:e6:56:76:74:e9:39:42:33:83:6c:f8:98:
b3:f5:dc:86:26:33:a8:9e:a8:10:c6:36:80:b1:8a:
3f:45:0c:1c:89:9a:66:4c:bc:ad:2e:89:1e:81:15:
54:46:91:46:1e:01:e5:2b:04:a4:cb:de:86:b3:d0:
e1:b2:00:1a:0f:ac:dd:32:59:bb:db:ee:d8:56:33:
03:ab:60:2b:68:2b:4b:9d:fc:75:6f:3e:9a:61:2f:
d8:3c:78:cb:0e:8e:ab:5b:be:71:96:c6:57:60:60:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:25:62:7A:F9:D8:F1:AF:82:B2:94:C1:96:DA:8F:DE:68:D4:60
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/4UwlYnr52PGvgrKUwZbaj95o1GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
195.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ed:56:e3:91:37:e8:ee:94:d0:ea:c1:18:25:28:46:00:55:
bb:21:e2:ae:53:af:26:7b:09:24:bd:57:37:c2:ae:4b:27:26:
ca:38:96:f3:15:98:0d:c0:cb:db:df:8a:ec:44:b4:07:95:90:
f2:3e:58:f4:29:62:0d:bc:e0:ef:fe:2b:3f:0e:5d:ed:c8:24:
fb:26:0d:73:dc:87:08:b7:40:d9:d3:1e:b3:8d:45:d3:a5:37:
aa:08:f4:56:4a:5a:bf:f7:c7:c4:8d:62:2b:08:e8:75:cc:15:
7f:e3:fc:53:17:a8:11:28:47:90:a4:0d:50:10:e7:81:16:d4:
fc:7d:1d:00:72:aa:10:55:08:6b:5b:e3:10:9a:ee:04:86:d1:
16:ba:c6:97:51:96:4a:87:06:0b:6f:c7:eb:c8:f3:4e:37:85:
db:ef:74:5a:4e:df:6c:cb:6c:a3:f7:86:95:65:1a:38:78:fe:
75:a9:23:d3:b6:ee:34:db:08:d5:ba:75:ed:9d:0c:51:3f:4a:
a8:1a:ad:7d:23:be:74:18:74:bf:de:db:73:c8:75:54:74:57:
1e:50:ee:88:d0:7c:6e:9e:1b:d6:ca:44:73:35:4b:1d:3e:fe:
af:a3:b2:6a:12:14:c0:93:bf:fc:65:14:29:d7:ef:5b:b8:8c:
f5:81:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:00:00 2026 by rpki-client