Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5-pHhL_ClDsYxKcAYrj4-bb9Pt8.roa
File: 5-pHhL_ClDsYxKcAYrj4-bb9Pt8.roa (raw, json)
Hash identifier: 3plMbdIXOabFSUI6gPDHsePdV9qf8NyxXZMJaLbUHis=
Subject key identifier: E7:EA:47:84:BF:C2:94:3B:18:C4:A7:00:62:B8:F8:F9:B6:FD:3E:DF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DE78CFD20498E7D068BBF50D931BE202E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5-pHhL_ClDsYxKcAYrj4-bb9Pt8.roa
Signing time: Sat 02 May 2026 07:17:49 +0000
ROA not before: Sat 02 May 2026 07:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64161
IP address blocks: 188.255.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e7:8c:fd:20:49:8e:7d:06:8b:bf:50:d9:31:be:20:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 2 07:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ea4784bfc2943b18c4a70062b8f8f9b6fd3edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:72:24:19:90:81:a1:21:5b:aa:5c:0b:da:
64:e8:0c:18:31:33:28:af:63:59:0a:ce:54:bd:b5:
4e:d9:4d:e0:fc:3a:d9:f8:74:04:34:d6:00:1d:69:
cf:8b:76:d0:b2:e3:f5:65:d3:39:e4:ca:44:2b:bb:
2c:01:c7:fd:f3:3e:c9:4e:84:7e:76:0f:f2:77:ee:
c3:2f:b6:e6:e4:28:79:d1:38:59:b8:6e:62:34:90:
4c:89:d6:c7:51:b9:2b:5e:f5:de:a8:32:4a:2e:a2:
60:69:8d:e2:e9:8f:8c:b8:cd:58:44:9f:9f:7d:22:
89:24:16:a1:b7:e2:f1:c4:a9:cc:1f:7b:28:d7:10:
05:f4:34:6e:67:b5:87:27:a3:f9:a0:d0:7c:22:ec:
2d:d9:23:c8:7a:eb:74:42:21:d7:71:51:c3:32:f3:
f2:38:02:c1:23:9a:1d:98:4e:8c:5d:4c:bd:ca:a1:
2f:de:b3:43:09:cd:b5:91:6a:bd:5a:53:e5:60:6b:
ee:e7:32:f5:5a:98:91:26:97:dd:69:a7:3a:dc:47:
a2:d2:a1:b6:f5:c6:36:a4:b5:c7:f1:b1:63:eb:39:
2a:d9:83:81:b7:02:40:e9:91:d8:40:40:d1:b2:45:
8b:47:5d:62:9a:8c:54:a5:73:ae:8d:78:59:62:ec:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:47:84:BF:C2:94:3B:18:C4:A7:00:62:B8:F8:F9:B6:FD:3E:DF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5-pHhL_ClDsYxKcAYrj4-bb9Pt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f6:e8:7a:aa:fe:45:58:4b:8b:a6:53:0d:7d:18:45:d2:f9:
7b:8e:af:18:51:c7:b0:50:ae:2f:fd:3e:ca:d0:ad:2c:b0:5e:
b2:7b:41:d8:5c:c7:f9:88:d9:01:e7:d7:35:c6:20:10:97:1b:
b4:90:4b:e7:12:bc:bd:9a:c7:b0:9a:1c:5b:cd:15:c5:6e:c4:
aa:d4:c3:d8:48:5a:f9:c7:92:f4:29:7c:6d:53:60:4c:29:50:
19:cc:e7:a7:b0:36:32:01:e9:3a:46:92:00:ef:11:56:7d:e4:
be:1d:fc:b1:73:9c:b8:82:1f:7a:07:67:3a:fa:4a:aa:d0:26:
a1:a3:5f:10:00:4e:ec:1c:d0:c1:56:0e:c4:80:c8:38:07:25:
7e:1e:a5:c2:04:ee:3e:1a:1c:0f:10:48:7c:41:92:cb:33:e6:
58:b7:02:12:3a:f6:52:30:e7:f4:66:a1:1c:8f:11:fa:b4:6c:
47:4a:96:d4:89:34:83:83:a5:d1:5c:ca:d6:af:f4:f6:49:75:
33:10:31:45:54:d9:a6:af:14:5c:68:5c:76:f9:a8:d2:52:50:
72:e1:86:ec:9e:9d:f1:e5:d5:d8:ab:43:bf:4c:e3:12:f1:71:
24:39:16:5d:83:43:3d:35:30:00:26:21:31:6e:88:f9:9d:24:
3a:ff:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:49 2026 by rpki-client