Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/50r6jSn0CMuiVpA2P-b_FOjvPPg.roa
File: 50r6jSn0CMuiVpA2P-b_FOjvPPg.roa (raw, json)
Hash identifier: D5jC6zCHGCgbBXPC5sbkuztpv5UfBKKCMfOPc3Dg0Lw=
Subject key identifier: E7:4A:FA:8D:29:F4:08:CB:A2:56:90:36:3F:E6:FF:14:E8:EF:3C:F8
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019F70E579A44A618CFF3BA3CFAD04B0DBD1
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/50r6jSn0CMuiVpA2P-b_FOjvPPg.roa
Signing time: Fri 17 Jul 2026 16:25:14 +0000
ROA not before: Fri 17 Jul 2026 16:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214378
IP address blocks: 2a01:4a40:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:e5:79:a4:4a:61:8c:ff:3b:a3:cf:ad:04:b0:db:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jul 17 16:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74afa8d29f408cba25690363fe6ff14e8ef3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:87:bc:b2:ff:a9:16:07:04:89:f4:a2:3b:67:
af:5a:ea:82:55:cc:2b:f6:9c:0e:0c:32:7e:21:f2:
4a:4d:4f:a9:0e:6a:92:a4:e7:10:1e:cb:71:34:c0:
72:52:07:2d:f5:9e:c5:b0:93:dc:78:d1:6b:aa:ab:
45:e7:62:90:34:99:26:43:90:c8:8a:45:5a:df:76:
f7:f8:cb:dd:37:06:e6:e5:21:7d:14:e1:d5:aa:5d:
75:d6:8e:aa:11:57:50:ab:b0:91:71:f3:84:75:25:
d3:0c:7e:e8:e5:56:a2:c0:38:f8:d6:cb:64:28:1a:
ab:98:d6:bf:66:9e:98:b9:fc:1e:a3:45:7b:9d:8b:
1d:49:e3:48:4d:07:a9:20:0a:1a:1e:88:5e:59:9d:
52:fe:54:32:4d:e5:12:2b:c8:4e:95:86:6c:7f:41:
2b:43:14:2d:d4:8e:02:6e:3c:f5:45:7f:72:c8:a2:
69:15:0e:5e:54:74:0f:20:45:87:28:cd:cf:c6:c0:
e7:cc:4d:4f:35:7b:3d:b2:8f:76:ad:b1:18:98:84:
0d:af:8a:8f:66:d5:d5:da:6b:7e:a4:5a:6d:aa:19:
f3:09:46:72:a7:53:b7:c5:05:b0:fd:e4:03:a9:28:
c4:52:5d:2b:7d:df:8e:1b:07:32:65:71:0e:84:f2:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:FA:8D:29:F4:08:CB:A2:56:90:36:3F:E6:FF:14:E8:EF:3C:F8
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/50r6jSn0CMuiVpA2P-b_FOjvPPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4a40:101::/48
Signature Algorithm: sha256WithRSAEncryption
5d:c1:ba:06:f3:67:58:76:fe:d0:41:b5:73:90:31:3c:b1:a1:
29:17:c8:70:3e:17:04:68:53:30:fa:2c:b6:08:6f:96:38:ea:
eb:2d:ec:c5:3d:23:38:d7:e6:4b:a8:12:9d:2b:bb:c3:2b:fd:
31:59:e0:d3:25:fe:a0:af:be:ea:37:e8:02:17:b7:77:5e:f2:
f0:93:64:2e:60:ca:c0:f9:7b:d1:a6:3f:06:c2:26:26:0e:74:
ae:42:e7:4c:1b:4b:21:84:3c:33:61:d3:e8:b2:c0:65:10:11:
99:a1:c2:59:ed:91:b8:fd:20:56:8b:26:cc:5d:7b:b2:9b:c6:
41:28:58:3f:b7:97:5e:35:1b:c8:d0:b9:9c:de:3d:02:31:6c:
62:15:04:78:ca:a6:be:c6:92:40:38:4f:df:7b:9d:31:ee:6c:
f7:78:9e:42:3d:fa:da:5f:d2:5f:a9:3b:8c:ad:f4:e3:ca:01:
71:60:cc:6f:f6:f9:8b:dd:14:7b:8a:ed:76:cb:85:67:52:54:
4d:06:b9:43:a5:ad:52:82:c7:fd:0d:6d:5d:ca:01:ab:62:6f:
f4:14:13:c2:34:75:29:40:db:bb:96:ae:36:d0:73:87:04:7b:
26:00:5b:e2:11:7d:2c:ff:01:49:2f:d0:e0:58:d1:8a:6c:4f:
bc:13:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:39 2026 by rpki-client