Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/gCEAfeGtC7sCDWjwRgdE41W_tBw.roa
File: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (raw, json)
Hash identifier: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=
Subject key identifier: 80:21:00:7D:E1:AD:0B:BB:02:0D:68:F0:46:07:44:E3:55:BF:B4:1C
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019D065BFF623F16E46673BA585FABDD5CE0
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/gCEAfeGtC7sCDWjwRgdE41W_tBw.roa
Signing time: Thu 19 Mar 2026 13:49:45 +0000
ROA not before: Thu 19 Mar 2026 13:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a11:5dc0:666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:5b:ff:62:3f:16:e4:66:73:ba:58:5f:ab:dd:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Mar 19 13:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8021007de1ad0bbb020d68f0460744e355bfb41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:56:67:1f:0b:19:fb:81:5b:68:5e:11:23:
a6:d7:25:d5:6d:6d:08:db:f2:22:2e:c9:d0:d0:81:
96:2b:d6:9e:f5:13:5a:03:50:58:b0:5d:f2:71:2f:
5f:5a:26:15:f0:de:9d:0b:23:a5:39:73:12:1b:84:
3c:69:de:06:71:35:dc:d2:ea:5f:13:67:ee:16:ba:
dd:19:5e:59:8f:6c:dd:c7:2c:4f:18:84:3a:b6:f4:
9a:7f:6f:ef:0f:60:d8:f0:23:33:5e:2b:a9:54:c5:
72:b2:71:48:7a:01:87:56:42:37:7d:17:bc:45:b3:
b3:80:96:d6:5a:b7:32:22:bf:58:d7:c9:82:dc:d0:
03:9f:c9:5e:ee:d9:07:02:2f:b3:46:fa:4d:06:62:
36:11:31:28:4d:21:9c:ad:37:c6:9d:46:3e:1d:d6:
a9:fc:1d:d9:e4:43:54:3f:2a:ad:89:51:a2:42:c6:
c3:91:01:02:81:5f:68:5f:c9:a1:a6:52:f6:a5:23:
53:bc:b2:8e:e0:05:8a:0c:be:26:8d:db:7c:c1:81:
9e:19:d7:3a:ee:23:65:91:f3:de:a4:d0:c8:4e:e3:
c9:c8:91:90:2a:68:03:60:da:3f:6f:fd:4a:8a:dc:
ba:c8:83:1d:25:5e:73:7d:55:32:ea:4a:67:a1:18:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:00:7D:E1:AD:0B:BB:02:0D:68:F0:46:07:44:E3:55:BF:B4:1C
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/gCEAfeGtC7sCDWjwRgdE41W_tBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5dc0:666::/48
Signature Algorithm: sha256WithRSAEncryption
c6:62:97:5d:a4:97:c5:f4:56:a2:ef:3d:89:56:bd:a0:6f:96:
3e:39:ed:e1:4d:b4:f4:a7:e6:7d:3e:2a:ea:33:7a:8a:aa:67:
40:57:c8:f2:c1:d5:32:38:ee:eb:33:0f:4a:de:d2:40:58:94:
a1:e9:ad:c0:3b:01:d0:d9:6f:11:51:b5:82:69:ad:59:1b:ab:
9a:af:88:1b:37:7a:ee:9d:bf:54:4c:d5:ad:6c:9c:91:71:ac:
4d:d1:0c:1f:2a:02:26:62:40:37:63:c6:81:b9:1a:64:09:90:
b0:71:61:5d:57:93:9f:0a:33:bb:a6:f5:08:80:65:6b:42:31:
0f:70:2c:3c:6c:41:01:2b:94:40:4b:bb:2c:a5:a8:24:75:d7:
3e:41:e5:5d:f0:e8:b4:5f:09:2e:ea:63:7a:21:2e:bb:87:95:
77:26:bc:af:19:8f:d4:94:f0:e3:cb:18:9d:c1:a9:6d:26:91:
80:bd:df:dc:8f:22:2d:52:d4:a8:ca:e8:a4:79:04:f9:c5:0d:
d4:64:ee:7d:fa:26:48:af:22:81:3d:ff:0f:fa:1f:ac:a1:3c:
94:d8:3a:9e:87:66:37:7b:82:87:30:8d:5c:64:aa:c5:4f:b1:
5e:eb:c0:2b:4e:44:f7:b6:4b:6b:c3:f6:97:ab:1a:c0:de:76:
32:22:48:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0GW/9iPxbkZnO6WF+r3VzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTg5ZDllYTgyZDVmYmI2NmQ2YzExZjE4NzYzMzQ3NjAz
NGUwZGUwHhcNMjYwMzE5MTM0OTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDIxMDA3ZGUxYWQwYmJiMDIwZDY4ZjA0NjA3NDRlMzU1YmZiNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmZWZx8LGfuBW2heESOm1yXVbW0I
2/IiLsnQ0IGWK9ae9RNaA1BYsF3ycS9fWiYV8N6dCyOlOXMSG4Q8ad4GcTXc0upf
E2fuFrrdGV5Zj2zdxyxPGIQ6tvSaf2/vD2DY8CMzXiupVMVysnFIegGHVkI3fRe8
RbOzgJbWWrcyIr9Y18mC3NADn8le7tkHAi+zRvpNBmI2ETEoTSGcrTfGnUY+Hdap
/B3Z5ENUPyqtiVGiQsbDkQECgV9oX8mhplL2pSNTvLKO4AWKDL4mjdt8wYGeGdc6
7iNlkfPepNDITuPJyJGQKmgDYNo/b/1Kity6yIMdJV5zfVUy6kpnoRgDjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIAhAH3hrQu7Ag1o8EYHRONVv7QcMB8GA1UdIwQY
MBaAFLUYnZ6oLV+7ZtbBHxh2M0dgNODeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81ZTYxZDgtZDFiZi00ZjJhLWEzMmUt
ZjVkNmI3NTJhZTM0LzEvZ0NFQWZlR3RDN3NDRFdqd1JnZEU0MVdfdEJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81ZTYxZDgtZDFiZi00ZjJhLWEzMmUtZjVkNmI3NTJhZTM0
LzEvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhFdwAZm
MA0GCSqGSIb3DQEBCwUAA4IBAQDGYpddpJfF9Fai7z2JVr2gb5Y+Oe3hTbT0p+Z9
PirqM3qKqmdAV8jywdUyOO7rMw9K3tJAWJSh6a3AOwHQ2W8RUbWCaa1ZG6uar4gb
N3runb9UTNWtbJyRcaxN0QwfKgImYkA3Y8aBuRpkCZCwcWFdV5OfCjO7pvUIgGVr
QjEPcCw8bEEBK5RAS7sspagkddc+QeVd8Oi0Xwku6mN6IS67h5V3JryvGY/UlPDj
yxidwaltJpGAvd/cjyItUtSoyuikeQT5xQ3UZO59+iZIryKBPf8P+h+soTyU2Dqe
h2Y3e4KHMI1cZKrFT7Fe68ArTkT3tktrw/aXqxrA3nYyIkjm
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:13 2026 by rpki-client