Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/5rV79TdCd96VfUHDtEL8kY8JFyQ.roa
File: 5rV79TdCd96VfUHDtEL8kY8JFyQ.roa (raw, json)
Hash identifier: 9559mNpoJluSL8HWBIIQXSGs4fDHvjvB6vc3WVaBGKM=
Subject key identifier: E6:B5:7B:F5:37:42:77:DE:95:7D:41:C3:B4:42:FC:91:8F:09:17:24
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A19CE4D26C9773EF96D9084EE6AFAEBEC2
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/5rV79TdCd96VfUHDtEL8kY8JFyQ.roa
Signing time: Mon 02 Nov 2026 15:33:24 +0000
ROA not before: Mon 02 Nov 2026 15:33:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395839
IP address blocks: 46.8.98.0/24 maxlen: 24
109.248.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:e4:d2:6c:97:73:ef:96:d9:08:4e:e6:af:ae:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 2 15:33:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6b57bf5374277de957d41c3b442fc918f091724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:4b:7d:b4:fe:d8:b2:b5:b4:39:87:1e:42:
14:04:16:c9:f7:92:03:3f:5a:09:82:8b:34:4d:03:
80:78:33:37:05:bd:40:7c:aa:ca:6c:ba:f5:21:5a:
a3:b8:64:0f:6e:9f:cf:bb:b2:63:0b:64:2b:02:65:
28:a8:77:a2:a6:91:98:61:87:a8:20:41:e9:21:48:
9c:53:65:50:d1:d9:dc:d2:f5:8f:51:0a:91:a9:bb:
98:71:30:c5:15:e7:d2:56:ef:e3:e5:f3:01:61:4a:
88:6d:56:37:3e:f7:42:8d:72:9c:d2:60:56:52:90:
90:5c:03:a8:15:be:6f:ce:1b:c7:fe:16:65:bc:83:
cd:ba:ea:57:c2:93:be:32:e8:72:a8:91:63:21:7f:
11:c9:4e:55:30:35:67:1f:01:83:f7:7c:e3:36:48:
7b:6d:47:05:79:87:76:01:7e:b4:cd:92:74:61:53:
1b:e6:c0:ae:3b:2e:1f:f3:f2:fd:3d:9c:11:79:2a:
3f:6a:88:a9:25:b4:38:1d:ab:17:b9:ee:e5:80:20:
29:7b:e4:8b:d5:c0:af:fd:b4:91:b7:8a:6a:dc:0f:
c0:d5:4d:de:b3:a7:00:6b:b9:72:01:2e:4a:9f:fa:
69:df:ed:61:b1:a7:e3:21:95:b1:8e:50:77:a9:97:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:7B:F5:37:42:77:DE:95:7D:41:C3:B4:42:FC:91:8F:09:17:24
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/5rV79TdCd96VfUHDtEL8kY8JFyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.98.0/24
109.248.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:50:dd:1a:f6:3c:25:28:cb:c2:c3:bf:d3:45:05:a7:cf:d5:
e0:e7:f8:bc:ca:fc:57:d2:95:02:d1:8e:ee:48:61:ca:2e:9f:
b2:27:df:b9:af:ec:1b:9b:0b:dd:1f:2e:23:d8:44:7a:56:c6:
53:b9:7b:83:2f:bb:a9:a6:57:4f:f0:25:0e:9a:7d:0d:78:17:
d7:29:04:08:f7:c1:2b:06:99:17:6b:93:5c:40:7c:3a:e4:09:
02:50:f6:84:89:39:39:52:b6:33:9f:65:7f:bb:09:18:6d:b4:
78:fd:bc:6d:97:b6:3a:2f:48:16:31:d4:1a:c4:1b:97:0d:52:
e3:a5:70:80:60:a6:7e:77:62:47:f7:09:63:67:a5:87:47:3b:
80:dd:80:19:4f:f1:96:0d:59:87:bc:dc:55:7a:1b:6f:ad:93:
77:4f:d8:9b:f4:f1:d1:60:6f:04:8a:59:31:72:11:87:d0:9e:
a7:14:83:a5:90:50:86:78:d2:69:ec:65:18:ef:17:83:54:e1:
a9:be:11:bb:5b:36:c2:ba:4a:eb:5d:b8:9f:b1:b4:d3:04:71:
05:af:2d:f0:dd:32:fa:1d:df:5b:77:d9:ab:2d:a7:24:ce:b0:
a7:a2:e0:56:89:ea:ea:3b:a4:6d:43:da:18:c3:84:35:cd:7d:
e2:cf:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:45 2026 by rpki-client