Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/5w5DbTtvb6SeMz3_UE0rwfblTDc.roa
File: 5w5DbTtvb6SeMz3_UE0rwfblTDc.roa (raw, json)
Hash identifier: fHfClX6ib9kUfrFHkePYoEnfGuEUjbb4k9MOYx0DJ4Q=
Subject key identifier: E7:0E:43:6D:3B:6F:6F:A4:9E:33:3D:FF:50:4D:2B:C1:F6:E5:4C:37
Certificate issuer: /CN=a7d8f48de9817a2b3c34ce4de17ae81257dc4407
Certificate serial: 01A0CE165E531494B09453FA3BB7067A4953
Authority key identifier: A7:D8:F4:8D:E9:81:7A:2B:3C:34:CE:4D:E1:7A:E8:12:57:DC:44:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9j0jemBeis8NM5N4XroElfcRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/5w5DbTtvb6SeMz3_UE0rwfblTDc.roa
Signing time: Wed 23 Sep 2026 11:46:07 +0000
ROA not before: Wed 23 Sep 2026 11:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210606
IP address blocks: 194.117.55.64/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9j0jemBeis8NM5N4XroElfcRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:16:5e:53:14:94:b0:94:53:fa:3b:b7:06:7a:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d8f48de9817a2b3c34ce4de17ae81257dc4407
Validity
Not Before: Sep 23 11:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e70e436d3b6f6fa49e333dff504d2bc1f6e54c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:93:12:d1:82:87:ab:4f:a0:c9:47:02:1e:
1b:d4:ec:8c:0d:5e:50:b4:91:3e:fe:8c:1a:27:f2:
45:fb:63:7f:50:6b:05:1e:27:df:76:9f:32:89:98:
8a:81:77:47:10:e4:40:4f:37:bb:1b:df:3e:3d:7b:
69:a7:93:32:e0:5c:33:fe:ee:a4:4c:5b:45:9b:d2:
29:fd:e7:ff:44:84:eb:cd:aa:42:f9:40:f8:01:d5:
94:38:8e:be:ad:f7:e7:59:47:02:1e:ed:f4:92:0e:
a3:12:5f:96:02:36:d2:1c:42:85:ff:6e:6b:52:aa:
90:1d:4b:b7:c5:38:d7:d6:9f:06:11:c4:63:67:68:
83:da:80:0e:71:ca:6a:1b:a4:dd:32:bd:46:cd:9a:
03:2f:02:79:a9:33:63:1a:cc:f7:af:60:e2:67:70:
a7:1a:64:b7:10:e6:07:fd:17:63:7e:cc:f1:27:72:
1b:ff:84:21:58:66:20:bb:3d:79:70:7d:ea:cf:02:
66:a0:35:99:a3:03:89:cc:26:d4:e2:4f:a1:e4:4c:
59:27:0d:ab:1d:f6:c9:a8:d2:da:fb:1e:89:14:6e:
fa:64:e6:c6:9b:c3:e6:53:5b:b1:a1:7e:5a:8b:81:
82:24:22:86:35:c2:e9:f0:28:a4:70:d5:c9:13:46:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:43:6D:3B:6F:6F:A4:9E:33:3D:FF:50:4D:2B:C1:F6:E5:4C:37
X509v3 Authority Key Identifier:
keyid:A7:D8:F4:8D:E9:81:7A:2B:3C:34:CE:4D:E1:7A:E8:12:57:DC:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9j0jemBeis8NM5N4XroElfcRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/5w5DbTtvb6SeMz3_UE0rwfblTDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15ff6c-69a6-477f-90cc-88369e4c801c/1/p9j0jemBeis8NM5N4XroElfcRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.55.64/26
Signature Algorithm: sha256WithRSAEncryption
33:68:ed:3e:13:e9:43:66:01:05:f5:e2:18:6a:ea:52:ca:d5:
a2:3a:fb:16:a6:7a:44:1f:0f:43:3e:8e:8d:2c:37:53:4f:58:
b6:d2:60:48:ed:36:04:89:53:00:a9:fd:6a:21:3f:de:74:ab:
6d:39:c4:45:e4:82:df:1b:94:c9:a6:af:35:12:fa:38:12:94:
62:10:de:53:a3:44:3b:07:f2:7b:c0:27:fe:3d:f0:3f:e3:53:
35:f5:90:59:d9:44:0a:2a:ac:cc:31:f1:c8:2d:63:e2:ce:70:
78:e2:6f:8e:02:da:b0:a9:7d:24:c5:db:75:c1:f4:db:0f:7a:
63:3e:b2:e6:62:55:3d:da:4c:dc:61:f9:6e:36:d1:de:96:6e:
71:4c:52:6d:ce:48:e9:47:1c:d9:94:b5:c9:47:43:46:ba:4f:
06:11:2e:f0:64:e2:a8:69:f6:7b:51:84:68:ae:00:6f:30:58:
ae:3e:8d:41:4f:86:82:e3:7b:b7:cd:0c:da:8b:46:df:6b:4a:
e9:de:0d:80:26:17:da:41:ed:bc:e7:5b:5f:5c:f5:85:72:e7:
d8:6d:f4:13:87:48:bd:86:e3:7d:b4:23:c8:1c:73:17:9b:82:
db:84:68:63:16:11:9d:0d:6d:9e:f7:02:53:a2:c0:36:1a:95:
4e:f4:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:28:43 2026 by rpki-client