Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/P5m8X2QZ-kvt8VS-yB1NvVymMtI.roa
File: P5m8X2QZ-kvt8VS-yB1NvVymMtI.roa (raw, json)
Hash identifier: M7ivDyo094WRXU5Z+KQ9NZ8+Nxc6V9FBYqrJglVRrNY=
Subject key identifier: 3F:99:BC:5F:64:19:FA:4B:ED:F1:54:BE:C8:1D:4D:BD:5C:A6:32:D2
Certificate issuer: /CN=eb638f81755f160bf39316220386982460d1ff14
Certificate serial: 019F23684E3383A3422DF6C869757FDAB10D
Authority key identifier: EB:63:8F:81:75:5F:16:0B:F3:93:16:22:03:86:98:24:60:D1:FF:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62OPgXVfFgvzkxYiA4aYJGDR_xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/P5m8X2QZ-kvt8VS-yB1NvVymMtI.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209627
IP address blocks: 139.28.249.0/24 maxlen: 24
139.28.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/62OPgXVfFgvzkxYiA4aYJGDR_xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4e:33:83:a3:42:2d:f6:c8:69:75:7f:da:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb638f81755f160bf39316220386982460d1ff14
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f99bc5f6419fa4bedf154bec81d4dbd5ca632d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:38:df:61:a3:2d:44:fb:2a:94:f3:0c:58:
38:fa:39:1b:db:5d:bb:b1:3e:42:b1:57:b0:42:15:
c3:4d:d6:22:e1:84:25:08:cd:36:1e:88:55:88:da:
7c:1c:be:3f:2d:4e:4b:d1:70:8e:73:57:83:46:60:
9b:96:43:fb:ae:05:bb:9b:82:5e:59:e9:c2:39:ad:
c5:04:15:54:1e:33:9d:56:37:3c:6c:47:e3:ac:65:
08:10:35:4a:67:49:57:86:15:47:b8:f5:c2:81:1c:
25:e3:88:11:dc:20:01:97:8b:bf:68:90:4a:de:e4:
74:de:94:11:2d:57:a0:62:1b:31:47:58:a2:d6:b6:
65:97:5c:07:fa:ce:58:44:e6:c5:e1:e7:c8:eb:cd:
36:a1:7b:97:3c:ad:b3:f2:9d:0d:09:82:b2:70:10:
09:ca:33:4b:c5:d7:34:3d:1a:fb:6a:79:58:c1:81:
04:60:f3:29:e4:7e:88:f1:02:6c:7a:b5:23:7a:50:
f2:81:e9:3e:21:f3:18:2e:56:1c:86:49:ab:03:95:
19:32:e9:fe:57:b3:6e:90:93:cd:cc:35:6c:04:10:
21:27:2e:e1:15:05:3f:9d:df:47:9c:5d:77:ad:45:
ba:55:21:eb:c1:b7:29:f7:a1:57:17:06:a3:54:61:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:BC:5F:64:19:FA:4B:ED:F1:54:BE:C8:1D:4D:BD:5C:A6:32:D2
X509v3 Authority Key Identifier:
keyid:EB:63:8F:81:75:5F:16:0B:F3:93:16:22:03:86:98:24:60:D1:FF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62OPgXVfFgvzkxYiA4aYJGDR_xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/P5m8X2QZ-kvt8VS-yB1NvVymMtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/62OPgXVfFgvzkxYiA4aYJGDR_xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.249.0/24
139.28.251.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ee:d6:8e:bf:09:02:09:ab:59:c5:d7:11:1c:6a:49:5e:29:
a6:4a:b9:b7:91:e3:f8:79:a8:bc:1c:3e:35:17:31:02:0e:f5:
7e:45:78:21:1c:62:d9:8f:5c:18:21:90:c8:32:15:4c:65:ad:
5d:f3:b7:08:75:37:08:2b:65:fe:dc:4b:8a:cc:61:65:89:b3:
b7:49:fc:b6:7b:81:de:d5:66:1e:66:c6:b7:3e:48:70:aa:92:
4c:f1:e2:98:2e:14:3f:58:f8:ac:d1:41:83:b0:eb:74:5b:13:
74:52:1e:d8:1c:e3:21:59:e6:94:ee:9b:88:8f:c3:3d:38:4d:
13:b4:85:06:62:37:98:6f:1a:2b:17:40:29:21:a1:7a:fd:79:
4b:15:4d:5a:03:47:7d:4e:45:07:ed:d0:38:7e:b8:38:ca:8f:
7d:08:e8:d0:12:71:12:a8:f9:41:de:37:96:6f:2d:75:a0:82:
8c:1e:8e:35:41:f0:34:2e:bb:d0:5c:d8:08:ff:97:3d:5a:ec:
e9:5b:63:9f:00:49:df:1d:fe:c2:99:33:31:a7:d1:a3:97:a2:
66:53:86:7e:a4:ad:c7:ed:6c:d0:07:b9:ed:9e:3a:30:b1:8c:
96:df:74:fd:0d:8b:ca:58:8c:ca:c5:33:0d:04:84:8b:3c:0a:
6f:a7:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:27 2026 by rpki-client