Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/m5LEzQ7k9M_i1Mf9nyRYbapro_I.roa
File: m5LEzQ7k9M_i1Mf9nyRYbapro_I.roa (raw, json)
Hash identifier: EU68ip9i0c0wHEF4cx6F380sT+XGSMkmVFb4pWp4nEo=
Subject key identifier: 9B:92:C4:CD:0E:E4:F4:CF:E2:D4:C7:FD:9F:24:58:6D:AA:6B:A3:F2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019FA37D7016B0DA9E09F037582F954CAF18
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/m5LEzQ7k9M_i1Mf9nyRYbapro_I.roa
Signing time: Mon 27 Jul 2026 12:12:14 +0000
ROA not before: Mon 27 Jul 2026 12:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57784
IP address blocks: 5.133.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:7d:70:16:b0:da:9e:09:f0:37:58:2f:95:4c:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 27 12:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b92c4cd0ee4f4cfe2d4c7fd9f24586daa6ba3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:68:77:21:59:7e:e6:e1:e7:d8:54:ae:b6:
c2:b8:82:33:26:0a:bf:e5:a7:26:d2:e1:09:f3:e3:
91:f1:5d:34:d0:bc:49:28:77:68:12:25:fb:d1:2f:
15:09:5d:32:58:6c:67:d9:ae:7a:4e:98:49:43:64:
9e:d3:cb:00:b6:b9:9c:e5:69:0c:31:ea:cc:5f:28:
82:3e:9f:15:d1:0f:37:64:2b:a6:d8:c6:c5:02:69:
30:72:f2:9c:47:65:fd:a8:15:73:dc:80:2d:9f:80:
bb:63:22:ed:1b:ab:66:19:b3:4d:e5:02:02:a8:73:
c3:00:9e:d3:b7:7f:cd:81:0d:75:de:9d:90:b4:f1:
de:10:26:7b:2f:78:96:36:6d:36:eb:40:77:ae:40:
3d:98:95:6a:f5:4d:ac:8d:7b:67:fa:39:9d:bb:04:
7b:4e:fa:4b:4a:15:1b:0b:8f:85:77:7b:79:c1:16:
8b:83:a4:05:c0:90:a3:a7:62:69:26:7a:fc:4f:a5:
b9:55:38:70:79:45:99:94:15:de:a1:ef:12:8d:18:
79:42:3c:03:50:0b:32:71:ed:44:af:6e:db:0d:6b:
0b:ec:44:97:30:52:14:b2:94:c1:06:88:5d:73:13:
9c:45:e7:b0:90:c5:70:65:be:8c:71:04:b9:a9:88:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:92:C4:CD:0E:E4:F4:CF:E2:D4:C7:FD:9F:24:58:6D:AA:6B:A3:F2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/m5LEzQ7k9M_i1Mf9nyRYbapro_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:43:65:a0:88:b4:75:3a:f3:dd:13:b3:f5:a1:89:27:5e:c7:
1a:d8:bf:dd:a2:b4:04:4c:86:b2:af:ee:19:b3:c8:7e:08:82:
66:39:8d:94:5a:40:d0:94:7f:52:7d:11:6b:d8:11:d9:81:c8:
62:9e:6e:7a:ff:73:f6:87:0f:2c:23:46:ce:5e:6c:0f:34:42:
22:43:a7:62:82:aa:2c:53:b8:2d:98:aa:96:88:84:a0:32:99:
6e:e8:e3:7e:c4:c2:07:0b:2b:14:8a:f5:4d:49:58:71:fb:e5:
03:af:f2:ae:70:4b:24:eb:b6:07:a7:9d:ac:c0:4f:95:64:62:
86:62:63:17:c8:18:91:48:51:d8:d1:77:d1:98:d5:de:e3:fe:
9f:f3:c0:7c:ae:dc:05:7e:dc:ca:2c:1b:78:38:95:32:f6:44:
6c:d4:e2:f6:2e:1d:ec:76:45:fc:48:1e:95:5d:01:05:ab:c4:
b1:81:72:c2:63:f8:bc:a7:88:d3:f5:4f:e3:0a:5f:24:1f:72:
16:b7:df:1b:b5:dc:03:92:c9:1c:c4:f7:63:55:94:44:24:ec:
e8:18:84:b3:67:5c:75:75:ad:6f:9d:d8:fb:03:88:9c:ad:55:
ed:84:cc:31:ac:63:0d:cd:af:38:be:6e:b6:a0:90:6c:5f:aa:
d4:ce:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:00 2026 by rpki-client