Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/05ay0Ql2sWgkpZO24KFDNpytuz4.roa
File: 05ay0Ql2sWgkpZO24KFDNpytuz4.roa (raw, json)
Hash identifier: D4ibNFALvaaxjHjP16CsY2hQz9JBAyuJZhQaFzc0WWw=
Subject key identifier: D3:96:B2:D1:09:76:B1:68:24:A5:93:B6:E0:A1:43:36:9C:AD:BB:3E
Certificate issuer: /CN=c5394fb1c25800fa0900564c12262db1ebf51db8
Certificate serial: 01A0C7EFE2636C38F0A81A0464E7EEEBF40F
Authority key identifier: C5:39:4F:B1:C2:58:00:FA:09:00:56:4C:12:26:2D:B1:EB:F5:1D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/05ay0Ql2sWgkpZO24KFDNpytuz4.roa
Signing time: Tue 22 Sep 2026 07:06:21 +0000
ROA not before: Tue 22 Sep 2026 07:06:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.39.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ef:e2:63:6c:38:f0:a8:1a:04:64:e7:ee:eb:f4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5394fb1c25800fa0900564c12262db1ebf51db8
Validity
Not Before: Sep 22 07:06:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d396b2d10976b16824a593b6e0a143369cadbb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:0d:1f:76:7d:01:90:ba:28:3b:11:f0:db:
b9:fd:91:9a:b6:5a:76:2c:95:a8:0d:e1:ad:ed:5e:
0b:1d:fa:f6:c4:46:27:87:a6:51:ac:34:04:66:c8:
2f:77:42:05:ec:ed:42:1e:91:8b:24:ed:b5:55:ef:
b1:f1:da:a4:2a:9c:a9:e2:7a:26:4c:5e:87:2d:2f:
2e:de:ce:ef:e5:30:af:48:6b:db:fe:2b:40:fc:2c:
b2:e0:43:be:cf:ad:dd:5b:67:a1:e1:0a:3a:02:c0:
17:c0:4d:96:69:46:47:22:a9:cb:58:50:a7:18:d3:
66:66:16:1c:d9:41:05:a0:2e:17:21:ee:90:9b:da:
7d:87:cb:2c:e2:c4:07:1e:33:4a:b6:91:31:e2:48:
84:a4:5d:db:a3:af:8f:89:aa:37:f7:85:16:91:15:
17:cf:7b:7c:ac:b7:a5:d6:ee:38:fb:86:4f:f7:b2:
77:12:4c:02:7b:fa:50:0e:55:6c:d5:d7:3e:e9:09:
52:7b:09:dd:e7:9c:f9:d7:9e:fa:c3:ad:ed:aa:81:
b7:de:d2:62:d7:08:4e:9e:93:d8:dd:f3:b9:92:ad:
92:24:14:b7:39:3d:5f:d1:7d:80:7e:c3:cb:b3:db:
04:46:63:18:03:fb:41:e3:19:c0:1f:88:5a:7a:63:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:B2:D1:09:76:B1:68:24:A5:93:B6:E0:A1:43:36:9C:AD:BB:3E
X509v3 Authority Key Identifier:
keyid:C5:39:4F:B1:C2:58:00:FA:09:00:56:4C:12:26:2D:B1:EB:F5:1D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/05ay0Ql2sWgkpZO24KFDNpytuz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2c:40:e6:8d:0f:89:b6:7f:a5:f5:24:f9:dd:2e:22:19:53:
97:b1:36:53:12:a6:41:26:e3:aa:73:4e:57:50:5b:2c:ca:b6:
71:8f:b2:31:92:fb:c9:5b:55:f1:a4:75:67:ad:84:43:68:07:
88:23:2a:6a:c0:ef:29:cd:6a:4d:c6:7d:33:58:11:68:93:99:
64:01:9a:de:31:87:1b:23:bb:69:d0:d2:b2:4b:57:50:b1:9e:
cb:8a:00:f1:26:dd:93:0d:2b:ae:36:4b:c9:fe:c2:84:76:29:
f3:38:28:71:33:b9:14:23:bb:67:c5:1d:d8:0f:ae:8f:fb:ce:
1f:a4:1d:25:ba:2b:9a:fd:15:d9:70:73:df:ca:c6:fa:5c:f7:
5a:b2:df:e3:f2:65:96:03:9b:8e:3a:05:6b:75:b5:4a:a8:66:
57:0c:a1:e6:bd:78:d6:da:76:fb:e7:d2:37:9d:c4:cb:f9:ad:
93:a3:9d:ca:00:3d:50:2e:66:e6:66:ab:67:19:41:cb:dc:e8:
d6:cc:30:53:fd:05:10:a5:ae:07:a6:6f:f1:f2:f6:79:1b:16:
00:8e:07:27:4b:35:55:7b:0a:a7:d5:c0:c0:e5:8e:7d:c6:a5:
2e:45:d3:b2:e0:35:77:25:36:e6:bc:4d:5f:88:68:fb:10:3b:
e1:0c:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:46:28 2026 by rpki-client