Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-c04xEY6KBrPD1UAP2WmsVxKCnI.roa
File: 1-c04xEY6KBrPD1UAP2WmsVxKCnI.roa (raw, json)
Hash identifier: fDgoCGGHwXCxmcJx+8llPNwy1hcn85GgMHhJbFrTPOg=
Subject key identifier: F9:CD:38:C4:46:3A:28:1A:CF:0F:55:00:3F:65:A6:B1:5C:4A:0A:72
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019E1D60646B9B5DA319AD733A2A2458C2AE
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-c04xEY6KBrPD1UAP2WmsVxKCnI.roa
Signing time: Tue 12 May 2026 18:08:36 +0000
ROA not before: Tue 12 May 2026 18:08:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206402
IP address blocks: 5.22.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:60:64:6b:9b:5d:a3:19:ad:73:3a:2a:24:58:c2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: May 12 18:08:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9cd38c4463a281acf0f55003f65a6b15c4a0a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:cf:8c:cf:66:76:a2:7c:39:e0:4e:9f:64:
9f:9a:87:5d:03:e4:ae:a3:78:65:b1:e1:38:18:c3:
94:7f:76:c8:63:68:cc:dc:16:30:73:16:a6:0b:4c:
50:d4:9a:6f:0c:ad:c6:5e:e8:55:f2:f1:a1:bc:f0:
1a:06:c8:01:14:7a:74:da:57:b6:a1:be:1e:51:ec:
4d:bc:17:bf:a8:03:8e:2b:e0:47:d3:1c:6b:fd:ce:
3e:ec:1a:6f:0e:01:d5:a4:92:43:5a:e8:a0:41:21:
44:70:8d:2c:b8:76:8b:3f:64:5e:b0:39:a0:be:40:
75:8d:dc:53:1a:c3:6f:6e:f5:c7:89:fe:da:f9:84:
ac:e5:ad:98:39:f1:b5:7a:cb:5d:70:35:b5:81:7e:
ef:12:a9:57:97:b3:21:e0:62:96:3f:a9:1e:23:7e:
94:bd:5c:75:44:fd:dd:c6:ae:65:64:f0:3b:03:fd:
33:48:ab:c7:18:ac:86:3d:e3:11:33:0a:5e:9e:f7:
59:46:01:22:4b:24:48:d8:60:fa:29:65:52:f3:a0:
f9:0b:fe:34:3e:1c:9c:c8:27:10:3c:15:b4:a7:32:
60:b6:3e:01:cf:9f:87:71:e7:9d:07:b4:d4:1b:a5:
24:26:df:1e:e1:f4:32:0c:87:14:52:3c:6c:42:37:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CD:38:C4:46:3A:28:1A:CF:0F:55:00:3F:65:A6:B1:5C:4A:0A:72
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-c04xEY6KBrPD1UAP2WmsVxKCnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.159.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:a4:f6:27:83:01:00:e6:55:c3:69:51:09:98:e8:d6:91:
cc:a6:50:25:8a:12:b5:b8:20:aa:98:fe:8e:fb:b0:0b:f2:74:
3f:2f:5d:04:7a:a6:93:8a:47:cc:9e:4d:94:25:5e:4c:e9:0e:
5f:7f:a2:50:b1:25:11:7e:ca:0f:34:5a:80:34:38:22:31:a5:
33:33:e4:43:4e:6d:ee:da:77:91:75:5a:a8:2b:02:0b:b5:a6:
1f:94:b4:42:56:36:a5:31:c4:81:b6:d0:f9:a7:d4:27:17:78:
66:f7:7d:9d:63:1b:9c:8b:4a:12:c8:8c:ec:e6:d3:34:5b:ca:
96:37:db:a7:07:0e:09:ec:ac:47:09:07:30:4d:c7:9b:77:81:
40:18:bc:9e:d3:f6:f1:ee:e3:72:9a:fc:65:f8:ce:e4:51:05:
04:c2:24:0a:2b:8b:95:a5:34:5f:5c:23:6b:29:d6:9a:d3:8a:
f1:41:b7:8d:b8:63:25:75:36:46:e3:e4:51:48:75:50:cc:dc:
99:b7:4c:3a:7f:60:1b:d4:43:9a:50:0e:3c:d7:77:11:61:67:
63:9a:6d:77:2c:fe:30:57:0e:06:f9:2d:8e:74:ca:0b:d6:f0:
c7:04:71:43:fc:bc:7b:f9:e3:55:58:c9:46:e3:5f:6b:39:dd:
99:d0:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:42 2026 by rpki-client