Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa
File: t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa (raw, json)
Hash identifier: /soIDtSH0BbDEeEeE6xQsPK1zrhevJxy2QjQT/OIR/4=
Subject key identifier: B7:9F:D5:60:F6:75:95:FF:C2:29:93:01:87:56:E3:6C:43:05:4E:03
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019D2A2FAC668A5931D9777D24F6A5EB5ADE
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa
Signing time: Thu 26 Mar 2026 12:47:40 +0000
ROA not before: Thu 26 Mar 2026 12:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a03:1e84:1930::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:2f:ac:66:8a:59:31:d9:77:7d:24:f6:a5:eb:5a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Mar 26 12:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79fd560f67595ffc22993018756e36c43054e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:8b:0e:e4:c3:48:df:19:78:a3:dd:ed:74:
2b:dc:64:cd:5d:0e:e7:3b:be:6f:f0:39:76:2f:c6:
bf:ae:06:c4:03:69:27:0d:9d:28:99:af:c8:11:08:
0c:4a:e6:a0:30:8f:6d:ab:c0:7c:9a:4a:ef:77:d8:
ee:61:a3:b1:70:96:59:a3:27:54:01:5e:1c:e8:ca:
ee:b7:7b:b6:97:65:4e:23:01:e1:79:41:76:46:99:
6d:63:c9:95:46:58:58:05:90:84:e1:68:af:19:50:
d5:93:9d:f1:ab:97:be:c1:ea:9f:80:fe:4e:60:44:
a8:64:d8:fb:ff:ce:af:2d:42:9b:78:8e:2d:90:05:
64:39:1d:06:07:f2:25:f7:98:a4:8f:9b:5c:0e:52:
51:54:47:cb:7b:59:f3:63:87:00:b7:2e:fa:ab:30:
4b:05:e1:0d:ab:6f:b4:e9:2f:ca:45:59:d4:2c:46:
0d:56:aa:9f:82:72:4f:20:b4:50:bf:91:01:d4:0a:
59:80:fc:db:1a:db:a9:aa:1b:95:d4:6e:0b:9e:44:
f6:70:ee:d3:1b:ee:76:fc:c2:66:28:21:68:70:f4:
b7:a7:ed:09:86:78:c1:95:b3:b4:cf:c7:82:50:b6:
d8:96:63:a3:89:59:6a:aa:bb:c3:97:9d:8a:95:0f:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:D5:60:F6:75:95:FF:C2:29:93:01:87:56:E3:6C:43:05:4E:03
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1e84:1930::/44
Signature Algorithm: sha256WithRSAEncryption
c3:cc:78:05:1f:21:d6:db:6a:20:2c:9d:55:89:b5:8c:bf:cd:
93:a1:ba:cc:61:d3:13:01:47:c9:06:fa:87:85:95:7a:ee:b8:
a8:54:88:cb:4f:47:02:93:d7:87:c0:b2:24:f6:99:d2:46:ba:
a9:9d:6a:45:a8:9e:f6:b9:88:0d:2c:d2:7d:f7:9f:1e:a5:5d:
f8:d5:96:ef:b0:cf:0a:7f:57:a3:89:47:06:f3:4c:e2:fa:a9:
a0:51:13:d7:09:33:6f:82:16:31:ec:2a:d5:56:65:9a:f8:26:
ae:b2:f4:91:a5:4a:0e:9a:19:d3:c7:64:1b:e3:2e:79:30:c7:
fc:67:32:32:dc:b4:4b:fa:33:d9:aa:28:4d:58:93:7b:4a:a3:
12:8b:cc:14:48:17:15:50:f8:28:44:e3:4a:bf:00:76:1b:0c:
e9:af:20:cc:12:00:dd:67:a9:f5:09:aa:85:ad:f2:13:e2:9b:
ce:7d:c5:f1:78:e4:75:63:22:cf:0f:55:38:de:71:c7:c1:95:
4e:78:45:f5:5a:6c:85:41:c5:e9:8f:ee:c1:47:24:11:1d:ae:
45:13:2c:2b:80:ac:f3:99:9f:a3:2e:2e:30:b8:23:5e:4a:dd:
b4:2d:8e:0c:b5:0c:69:1b:db:ae:8e:cf:e4:1d:b6:3a:c0:e7:
98:cc:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:04 2026 by rpki-client