Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/rQ_Dv4U9t2ulZ5Y4hq8B1EGw_cI.roa
File: rQ_Dv4U9t2ulZ5Y4hq8B1EGw_cI.roa (raw, json)
Hash identifier: gO1aqr2YvlJpKdnOGbhYJQ7wPPPCvP11RBmPDt0ntsk=
Subject key identifier: AD:0F:C3:BF:85:3D:B7:6B:A5:67:96:38:86:AF:01:D4:41:B0:FD:C2
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 01A081B5F320B6C05AC27F5C6EF69293DB3A
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/rQ_Dv4U9t2ulZ5Y4hq8B1EGw_cI.roa
Signing time: Tue 08 Sep 2026 15:49:40 +0000
ROA not before: Tue 08 Sep 2026 15:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 31.15.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:b5:f3:20:b6:c0:5a:c2:7f:5c:6e:f6:92:93:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Sep 8 15:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad0fc3bf853db76ba567963886af01d441b0fdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:5a:85:c2:c6:03:63:95:3e:67:21:41:25:
31:30:71:77:d3:3e:08:b4:02:ea:8c:64:ea:b9:5e:
95:9d:fc:a1:4f:53:58:cf:cf:09:39:6f:24:93:f9:
27:72:d7:f8:1a:3f:d2:0c:b7:bd:c5:c8:0e:f6:c4:
90:ed:55:0d:33:21:9c:17:7a:95:ea:23:db:41:1e:
8f:92:7c:9a:11:e9:47:ac:d6:fd:f7:f6:0b:ee:63:
ca:06:19:35:10:94:bc:54:74:48:3c:23:24:5b:4f:
85:47:7b:4c:0f:c6:12:d5:5d:56:2e:5d:e0:03:e1:
9f:24:57:e6:7d:b0:3a:07:d4:86:58:d7:a5:95:56:
58:ff:3e:30:ac:f4:b2:cc:b2:d5:53:90:d8:d6:b1:
66:7c:5e:d6:31:c7:2c:3f:6b:c6:b8:15:52:65:ea:
e9:07:a3:4e:f3:19:fb:5c:5c:92:81:0f:ef:b6:e0:
bc:4c:ce:93:88:d7:25:e7:20:33:ce:49:88:70:0c:
0a:db:f3:29:36:73:53:96:45:05:4b:1b:54:a3:34:
be:45:03:29:01:46:18:62:f0:cb:f0:48:f0:cc:40:
eb:bb:c9:2b:dd:42:80:ef:11:c7:43:35:64:c7:45:
2d:ff:f0:bc:7e:75:61:78:72:f5:04:a0:4d:66:fe:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:C3:BF:85:3D:B7:6B:A5:67:96:38:86:AF:01:D4:41:B0:FD:C2
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/rQ_Dv4U9t2ulZ5Y4hq8B1EGw_cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:94:58:2b:7c:46:51:81:d9:74:2f:7b:04:49:ff:e6:67:ca:
b2:12:07:ef:4f:58:48:ed:1c:eb:40:2b:77:50:d0:15:52:4f:
1c:24:7a:a3:d8:e9:1e:09:39:7b:0e:48:4a:ba:cc:75:3b:f1:
ed:02:f6:5c:98:9d:19:50:0e:c7:61:b0:f2:9f:a3:10:14:d0:
8a:9e:24:2f:05:dc:41:14:4d:7a:d4:7a:17:08:5e:8a:85:88:
72:6b:1a:bc:12:30:32:58:a7:51:89:ad:b5:cc:3d:71:10:f1:
69:25:31:59:e7:50:b9:63:e7:6a:77:39:9f:1f:81:62:44:d3:
bc:2a:7a:56:e6:17:c1:7f:32:81:b8:ff:51:77:19:18:d8:ed:
c6:a5:21:0e:01:b3:96:4d:ef:f2:97:9b:28:d0:5b:16:83:a2:
b6:ef:bd:7a:6e:44:73:8b:22:8f:88:b6:ac:29:35:e0:a4:57:
0f:6f:b1:5a:42:35:f7:c4:40:20:a6:cb:fe:ed:ba:e5:07:00:
28:8a:b0:53:49:fe:0c:d6:68:48:29:e1:d2:57:b2:35:7f:87:
95:f1:ab:da:a9:77:5c:7d:42:ee:f5:a7:c3:f1:95:ac:af:36:
bc:48:48:1b:35:b4:e2:ed:be:e6:0a:83:75:8b:77:dc:7b:d5:
3b:3c:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:37 2026 by rpki-client