Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/5c5sqX9Rf-F8-mZyKhjoqeWt6bg.roa
File: 5c5sqX9Rf-F8-mZyKhjoqeWt6bg.roa (raw, json)
Hash identifier: o1061DC+8ybayG7O3uuXXyE82kQHf4Kon0Ij+lZmosA=
Subject key identifier: E5:CE:6C:A9:7F:51:7F:E1:7C:FA:66:72:2A:18:E8:A9:E5:AD:E9:B8
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D3AEF995636C18E426326D1A554A4E76
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/5c5sqX9Rf-F8-mZyKhjoqeWt6bg.roa
Signing time: Thu 24 Sep 2026 13:50:54 +0000
ROA not before: Thu 24 Sep 2026 13:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 193.38.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ae:f9:95:63:6c:18:e4:26:32:6d:1a:55:4a:4e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 24 13:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ce6ca97f517fe17cfa66722a18e8a9e5ade9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:0f:80:ff:94:9d:bb:29:78:2b:66:06:b1:
41:48:75:e1:09:d5:24:36:5f:02:f2:3a:64:ef:2e:
90:c4:e8:db:6b:d3:9b:eb:8e:42:27:78:2b:13:b6:
60:b9:41:4a:59:52:4a:dc:0c:ee:44:79:55:10:0b:
da:1b:07:b0:53:6e:01:13:6b:0b:4b:fe:75:e5:ba:
99:b7:24:10:55:4c:65:92:f0:c2:d7:af:0d:13:8b:
f2:93:a6:3c:ce:3a:58:e5:67:78:df:ad:3d:e9:41:
ed:78:2c:5a:78:0f:43:2e:c5:a2:9b:1c:c3:be:bd:
80:25:c8:d7:08:31:d3:83:00:05:ad:73:c2:35:02:
81:c6:2c:b6:f2:5e:ad:a9:46:3a:96:93:01:92:c8:
ca:ff:d7:ef:86:53:99:b7:af:ae:2c:2f:8c:04:86:
44:08:c0:04:d4:d9:5e:72:77:34:ff:f0:e7:2f:9e:
d1:6b:fc:54:b8:81:5c:76:62:c3:f1:69:6b:f8:b2:
d6:b3:40:88:b0:14:3e:f8:56:a1:97:e7:82:e3:42:
ed:3f:f8:20:e3:f5:24:5b:2b:2b:ce:29:2b:fa:fe:
1f:c1:bc:25:0e:92:92:c5:6a:1d:20:a1:8b:6e:21:
8a:23:9b:89:ed:5c:8b:9f:31:6a:8d:5c:d2:8b:96:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:6C:A9:7F:51:7F:E1:7C:FA:66:72:2A:18:E8:A9:E5:AD:E9:B8
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/5c5sqX9Rf-F8-mZyKhjoqeWt6bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f5:e3:87:9a:db:f6:66:55:ec:9b:86:be:06:61:67:4c:89:
ea:59:7d:85:31:37:ff:15:10:4a:99:ae:54:40:7f:1d:b0:a4:
fa:2f:64:a1:f1:06:c9:c9:3b:5e:0a:87:52:ca:62:63:42:2e:
02:c0:7d:98:59:2f:0e:09:41:c6:21:bc:5c:1a:d7:7d:c6:55:
d2:a4:64:d8:97:b8:7d:ec:96:93:77:97:01:45:b2:76:0e:67:
f8:19:61:96:d8:1c:cc:4a:5a:6b:e6:cc:45:3d:77:a3:59:84:
ff:1f:9c:e6:2b:7f:90:e7:cb:d6:0d:96:c6:e0:b2:72:b2:30:
4f:97:44:8d:96:d1:23:44:86:c1:be:1c:28:a5:b2:8f:9f:69:
b8:1f:27:b2:4c:d0:2c:76:3e:c4:e6:22:44:fd:db:5c:6e:6e:
a8:40:35:bd:21:5f:b1:6c:a3:a0:db:7a:78:c5:93:f2:4e:d4:
1b:e2:80:1f:89:28:ad:39:76:f7:68:0f:e0:2a:3e:d9:1e:72:
48:9a:e4:33:f5:02:43:07:87:3c:ed:ee:1a:08:89:48:72:09:
22:c4:7d:54:bc:d0:80:6e:52:fd:a4:51:8c:b6:77:0c:71:8e:
46:9e:a8:16:09:2e:d3:17:73:6d:ab:cf:a1:bb:59:5a:91:e3:
95:db:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:25:49 2026 by rpki-client