Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa
File: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (raw, json)
Hash identifier: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=
Subject key identifier: E6:29:A1:27:63:67:DF:69:3B:5C:CA:9D:9D:BA:37:9D:F2:5C:62:E7
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019E1BF22EE4B65532DCCFF5E8FDE9D7BD2B
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa
Signing time: Tue 12 May 2026 11:28:36 +0000
ROA not before: Tue 12 May 2026 11:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49408
IP address blocks: 193.164.81.0/24 maxlen: 24
193.164.82.0/24 maxlen: 24
193.164.84.0/24 maxlen: 24
193.164.85.0/24 maxlen: 24
193.164.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:f2:2e:e4:b6:55:32:dc:cf:f5:e8:fd:e9:d7:bd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: May 12 11:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e629a1276367df693b5cca9d9dba379df25c62e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:e9:ed:2e:ea:cf:8b:be:09:c1:dd:22:fb:
8b:15:05:35:2a:48:24:0a:f3:e0:75:af:2a:a4:12:
11:45:9b:79:34:cc:ea:3e:e5:b9:88:db:af:6c:1d:
c4:76:87:cc:6e:35:6d:fe:a2:2e:d2:23:90:88:d1:
2b:2d:dc:da:d4:61:e6:34:28:77:1e:d8:f4:16:91:
67:c4:c9:56:18:f6:f8:e2:70:e5:e1:6b:a7:f3:53:
ce:fb:9b:16:29:20:df:33:c2:7d:0f:2b:22:35:ea:
cb:90:eb:d1:11:82:36:32:8e:32:68:a0:b2:42:4e:
74:4b:99:09:6c:36:17:c1:a7:34:8b:88:f3:df:65:
a9:bf:17:1f:43:03:ee:01:65:0c:0a:17:7d:89:18:
06:f6:d2:57:58:5b:e9:f2:0e:f1:01:bf:62:31:8e:
03:34:d2:01:ce:68:ef:16:15:a4:6f:50:e3:82:ae:
f2:90:b7:60:a2:bc:c3:12:79:b8:dc:e9:13:72:c9:
df:de:b9:22:f4:e2:c2:12:3a:96:29:d3:03:56:92:
85:2f:8e:3e:e5:5c:0a:14:fc:12:d3:01:c0:99:cd:
03:80:7d:a8:72:97:60:79:c9:9b:e4:41:d5:41:c5:
fd:56:77:1f:94:27:24:6c:aa:40:88:88:99:e8:2e:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:A1:27:63:67:DF:69:3B:5C:CA:9D:9D:BA:37:9D:F2:5C:62:E7
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.81.0-193.164.82.255
193.164.84.0/23
193.164.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fd:ab:87:3a:cc:2e:9e:0f:10:62:75:e8:14:19:47:ec:5b:
c0:a1:79:d1:09:33:18:91:c1:bf:fc:a0:f0:6e:e1:0f:08:d7:
1b:f2:74:f3:8c:43:bb:fc:13:82:7d:23:87:17:35:ff:4f:c1:
21:47:76:bb:7a:9b:f5:2a:2a:52:13:d8:45:f2:e1:14:c7:ab:
b4:ba:3e:d8:fd:0b:ee:0f:6b:2a:48:b6:0c:95:87:98:d0:b3:
9b:b5:d1:a5:ae:27:28:58:ff:10:2d:e6:d4:c6:2c:d3:73:61:
37:9c:79:16:af:0f:43:0a:df:43:06:0f:3f:ab:a0:92:00:ff:
64:84:87:08:32:50:38:75:11:5b:a8:76:c5:e6:af:73:3d:17:
a8:f5:24:51:c3:60:b3:40:ea:03:3a:f4:a4:2d:f6:3a:bb:2b:
34:38:f0:d3:72:6b:18:71:3e:97:84:29:48:97:32:b2:0c:25:
7b:57:6c:7f:23:02:98:12:cd:22:05:8b:06:36:c0:d8:13:c0:
dc:db:2c:b9:9c:41:4e:fa:c2:63:d0:04:9f:43:a9:55:28:a3:
85:3e:a9:ce:e4:fc:6a:6d:10:5b:e9:ce:cd:0a:2d:91:c8:17:
e8:e8:3b:b3:75:cf:f4:87:b3:b2:9d:79:69:e0:d9:60:a9:1c:
88:27:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:29 2026 by rpki-client