Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5ESz0iojCNRtB9G5b-AwBcVOy7s.roa
File: 5ESz0iojCNRtB9G5b-AwBcVOy7s.roa (raw, json)
Hash identifier: 0A8pAL/5zLuNj9s4gwX2Vb9W97aVvdJmvakRhliJFu4=
Subject key identifier: E4:44:B3:D2:2A:23:08:D4:6D:07:D1:B9:6F:E0:30:05:C5:4E:CB:BB
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01A1C6BA3E23A20CB85B0CAE648385DAB4D8
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5ESz0iojCNRtB9G5b-AwBcVOy7s.roa
Signing time: Tue 10 Nov 2026 18:30:56 +0000
ROA not before: Tue 10 Nov 2026 18:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 94.154.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:ba:3e:23:a2:0c:b8:5b:0c:ae:64:83:85:da:b4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 10 18:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e444b3d22a2308d46d07d1b96fe03005c54ecbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:56:5c:7b:32:94:be:f1:7c:7e:1e:0a:ba:
a5:2c:e1:a4:ee:83:ea:38:f6:ce:da:2f:7e:ae:08:
ee:10:32:84:60:a2:d9:e9:cb:cd:da:63:a1:2a:8f:
15:a0:7f:cc:7b:f2:1a:3a:a8:e8:d6:af:8f:f8:fb:
fe:85:8c:54:4f:50:ec:d0:99:9c:7e:ea:78:7e:67:
f2:8f:55:64:e7:22:3d:8c:c9:5f:b7:33:01:71:f6:
9f:f5:4f:2c:c9:80:ff:95:84:d8:da:44:a7:d4:4c:
19:10:2a:f5:9d:ad:0f:0c:35:86:db:e0:46:5e:55:
37:21:8b:e2:28:c1:39:df:f8:24:94:89:0f:96:79:
0f:8d:8d:ed:c3:58:4e:ba:62:61:14:99:52:62:81:
b7:ca:92:5c:9f:18:a6:ce:f6:e2:12:5d:fc:5a:5e:
98:54:1e:6d:3d:99:f4:d0:ec:a4:c4:e7:0b:a9:00:
1e:4d:94:c7:db:21:38:37:00:ac:01:f4:eb:f1:08:
36:b3:1f:b9:ed:46:93:78:c2:f1:2b:16:da:41:fa:
e6:40:8e:1d:76:0e:2f:0c:91:71:f5:f8:92:51:9d:
e5:56:73:0b:75:6c:ab:fd:24:a3:72:da:6b:4c:5c:
48:42:7a:dc:44:17:c7:02:2f:ef:03:73:5e:42:1f:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:B3:D2:2A:23:08:D4:6D:07:D1:B9:6F:E0:30:05:C5:4E:CB:BB
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5ESz0iojCNRtB9G5b-AwBcVOy7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
Signature Algorithm: sha256WithRSAEncryption
47:41:bc:ac:78:58:44:9b:88:72:cd:b3:0a:88:38:80:c4:6e:
bc:b1:28:0b:7a:b7:23:87:7e:59:19:e1:3b:ca:4b:97:8c:a5:
60:0a:25:19:b8:30:86:66:43:0e:9c:7e:01:ee:b0:8c:fc:21:
7f:78:64:0f:f2:00:99:93:15:cc:63:0d:6b:e6:32:b8:9b:09:
20:79:5a:bc:41:b6:3a:cd:be:9d:23:5d:f9:73:3a:bf:f9:58:
eb:f4:39:36:64:de:72:ad:51:a3:fd:10:98:5b:24:e0:06:0b:
cf:f0:18:f2:09:8c:f2:91:a2:aa:48:38:59:f9:c4:91:ef:4b:
62:a3:77:a0:ea:89:4e:4c:10:17:3d:27:8b:44:e5:f1:8f:b0:
a0:33:a7:99:3d:95:ad:b9:6a:4a:af:42:62:3d:4d:fe:8c:f2:
b4:7b:24:c2:7c:ce:24:26:f5:b0:08:55:49:a2:e1:31:bf:a0:
01:c8:1f:ef:bd:6d:87:32:f0:a4:ad:5d:29:ea:ff:1a:69:de:
83:83:0d:34:75:e2:10:ed:8e:85:bb:0a:1a:aa:e5:6e:66:c2:
9b:1a:08:9e:a3:f9:d4:da:18:bd:03:7b:35:22:c5:16:6a:c9:
f6:e3:4f:4b:88:a9:36:51:e0:8f:b2:37:5b:fb:9d:91:01:bf:
4f:61:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:04 2026 by rpki-client