Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/5Uf_d--u73R95XUGfW29utn5B6s.roa
File: 5Uf_d--u73R95XUGfW29utn5B6s.roa (raw, json)
Hash identifier: YAUOI68RjuBmOz4UKHfWyMXQWqCSPsvnMhP3+LZ2/C0=
Subject key identifier: E5:47:FF:77:EF:AE:EF:74:7D:E5:75:06:7D:6D:BD:BA:D9:F9:07:AB
Certificate issuer: /CN=520536fe776691837728a7fe455a732555b91125
Certificate serial: 019B7CECB96B49DB5E4083D394579BF69A32
Authority key identifier: 52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/5Uf_d--u73R95XUGfW29utn5B6s.roa
Signing time: Fri 02 Jan 2026 04:17:27 +0000
ROA not before: Fri 02 Jan 2026 04:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34451
IP address blocks: 195.8.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:b9:6b:49:db:5e:40:83:d3:94:57:9b:f6:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520536fe776691837728a7fe455a732555b91125
Validity
Not Before: Jan 2 04:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e547ff77efaeef747de575067d6dbdbad9f907ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:5c:ff:35:b1:8a:1e:9a:dd:3a:3b:c1:8f:
1d:03:35:e9:af:7f:4a:9f:87:e1:05:3a:fd:7f:cd:
0d:16:4c:c0:c4:21:4c:88:49:a3:68:e2:59:07:79:
7e:89:c8:03:cd:5b:b4:26:0b:3b:26:d3:3c:fc:64:
a7:1b:a1:16:52:d2:3f:b4:ad:8d:3a:53:ba:6f:14:
4c:23:01:dc:af:21:02:e7:dc:89:4e:64:91:13:af:
3e:ec:7b:27:07:9a:29:59:7a:46:41:b0:4c:3c:e9:
36:02:be:63:d2:e5:28:eb:63:25:ca:d3:81:ec:b7:
47:2d:6f:6f:bc:80:a9:bf:bf:45:3c:6a:c9:30:64:
12:be:79:e9:74:da:db:db:c9:62:37:e8:d9:16:3b:
c5:f5:03:f0:b7:2e:20:de:7c:6c:27:e1:c2:c2:28:
66:27:d5:d4:82:93:a5:88:97:0e:cb:6d:1c:90:5d:
15:f3:63:8e:5a:46:44:6a:5d:9d:2b:df:c7:a5:67:
20:25:e4:71:0b:89:0a:e7:b3:e3:ff:ce:3c:57:59:
d0:bc:ee:5a:d6:7a:ff:1b:7f:6e:b4:74:e0:a6:12:
8c:9c:31:c1:1d:2e:1a:e2:a8:82:4a:12:f3:a9:6c:
c6:bc:7e:ae:42:6f:86:c8:e6:e4:12:66:0b:60:de:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:FF:77:EF:AE:EF:74:7D:E5:75:06:7D:6D:BD:BA:D9:F9:07:AB
X509v3 Authority Key Identifier:
keyid:52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/5Uf_d--u73R95XUGfW29utn5B6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:98:eb:af:4c:48:a0:0f:d2:d6:d8:67:86:d3:4a:10:83:ca:
2b:9b:45:32:b3:54:ed:53:5e:38:52:68:05:b4:58:7f:bc:86:
e1:cb:a3:8a:2a:ac:44:2c:09:73:a9:a1:87:38:31:f8:8d:e9:
0d:ee:15:b2:c1:79:b2:a0:46:82:45:73:2a:3b:da:ab:b6:4b:
09:52:ed:12:9b:48:b4:e6:4d:ed:81:dd:5a:07:a8:f3:03:52:
cd:4b:7d:45:2d:2d:f6:2a:37:dc:43:3b:63:c6:93:34:07:03:
3c:02:b3:90:78:99:39:05:4b:fa:75:26:af:0c:bd:b8:27:51:
56:7d:46:f7:15:bb:38:e0:ea:b3:5b:a2:cb:5e:fd:6d:2a:45:
6c:ed:83:8d:da:2f:dc:43:37:03:ee:d3:a2:d7:2d:f6:5d:48:
3b:27:06:e4:b9:fc:7c:0d:06:52:cc:e5:10:32:26:64:04:c8:
02:06:48:b7:13:de:e5:73:e8:9c:b5:ca:a3:9f:54:58:e7:6c:
8b:7a:60:91:ca:87:19:0d:4a:54:ae:e8:59:ee:2e:d5:5f:1d:
ba:f0:73:f3:9f:76:f6:9d:be:40:0f:09:40:e9:09:54:f9:6e:
d4:39:5b:3e:36:3a:79:a2:18:45:e3:c0:42:ae:58:32:6f:9e:
fb:12:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:40 2026 by rpki-client