Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5-2AX5eGHEW5bUacQqpqBhZXaco.roa
File: 5-2AX5eGHEW5bUacQqpqBhZXaco.roa (raw, json)
Hash identifier: 1k5/g4ArHmEERsOtlAVXZ0DVV4sAV32F96SedlNi0tU=
Subject key identifier: E7:ED:80:5F:97:86:1C:45:B9:6D:46:9C:42:AA:6A:06:16:57:69:CA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F8A93E0B12F0463B27F398722E1870A89
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5-2AX5eGHEW5bUacQqpqBhZXaco.roa
Signing time: Wed 22 Jul 2026 16:06:14 +0000
ROA not before: Wed 22 Jul 2026 16:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 212.189.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:93:e0:b1:2f:04:63:b2:7f:39:87:22:e1:87:0a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 22 16:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ed805f97861c45b96d469c42aa6a06165769ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:fd:33:4b:61:e7:a6:fa:a9:9b:ad:06:64:
ee:2e:de:d0:58:89:f5:6a:fe:23:78:b7:d5:19:c9:
8d:03:9f:e4:4f:c0:c6:9f:aa:2d:17:e0:75:bb:68:
68:d8:d3:df:0c:11:8d:b8:93:43:fd:88:6c:c2:91:
fa:d8:be:f6:20:ac:c9:21:e6:4f:fb:78:18:38:57:
bd:75:3b:c4:02:31:4f:76:e4:cf:ab:d4:21:b4:b8:
c0:e4:e1:88:c5:c7:a3:be:07:ae:2b:94:cc:1e:36:
2e:57:b5:f7:c9:3f:1d:b4:0b:c1:18:09:d4:ac:11:
6f:ce:30:35:a8:63:75:76:3b:da:de:6c:26:4f:32:
63:4b:a2:57:34:f5:e5:e0:87:c5:cd:27:1f:09:bf:
0e:85:5c:2c:3a:50:46:2d:b1:da:21:10:f7:51:bf:
8a:7e:27:4f:b0:f1:67:7b:6a:3e:fe:62:61:b9:bb:
26:93:45:4f:23:d2:50:17:e8:5f:e6:31:b2:2b:27:
12:5d:ea:88:42:83:7b:f5:ae:e5:c3:76:30:01:25:
65:43:88:16:eb:a0:65:7f:bd:cf:20:fc:c0:0b:09:
9d:13:53:7f:ac:69:04:cc:9d:ae:ba:c5:f1:1a:76:
63:58:d6:cc:51:d1:56:10:2d:ec:92:22:49:0a:51:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:80:5F:97:86:1C:45:B9:6D:46:9C:42:AA:6A:06:16:57:69:CA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5-2AX5eGHEW5bUacQqpqBhZXaco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.48.0/24
Signature Algorithm: sha256WithRSAEncryption
36:72:2d:d5:59:0e:dc:4a:11:9a:bb:9b:85:d3:87:82:7b:32:
25:50:df:e5:7d:d0:fa:14:01:46:ec:0f:89:90:74:f6:53:29:
bb:6a:5a:05:25:43:b8:d7:a7:e2:89:ce:59:95:70:b7:41:23:
2e:d5:26:36:6d:56:cd:99:0f:c0:55:f2:80:f5:f2:aa:f6:9a:
4b:0d:a4:51:3c:7f:01:d9:85:e7:84:4e:2e:7c:dc:89:d9:d1:
da:0c:62:23:e9:24:fc:7d:22:75:c8:5e:74:ae:83:56:4d:7d:
72:1b:c5:ba:58:90:06:e3:5a:dc:67:82:8a:2e:c1:56:77:23:
de:ad:d4:1f:37:21:22:8e:19:d6:89:14:b1:8f:23:cc:bd:02:
63:7e:79:f3:e2:26:de:5e:2e:2f:11:de:d6:73:5c:f0:14:6a:
34:b2:e7:67:79:64:2c:7f:f1:c1:ed:72:58:92:06:e4:b1:6b:
94:e1:5e:41:c8:db:dd:98:fd:40:94:9f:35:9d:5f:28:d1:6d:
55:7f:73:30:54:7d:58:45:0d:29:f7:e9:4b:45:8c:88:6e:1e:
f7:32:68:bc:c1:0d:b8:5e:51:06:bc:a1:26:42:eb:97:e5:e1:
bf:0e:52:fe:be:1a:f3:1c:2f:14:61:96:5f:a8:c0:02:84:aa:
74:5c:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:58 2026 by rpki-client