Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/5n4bCVJPeFC2SO-XfvhgPItdp7s.roa
File: 5n4bCVJPeFC2SO-XfvhgPItdp7s.roa (raw, json)
Hash identifier: r6mLlfHnAnvku8G5EvNuE2VF2sLjmt8amwIg1HO0gzw=
Subject key identifier: E6:7E:1B:09:52:4F:78:50:B6:48:EF:97:7E:F8:60:3C:8B:5D:A7:BB
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01A1CF04920458F0C3F2023788EA0F84DB5B
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/5n4bCVJPeFC2SO-XfvhgPItdp7s.roa
Signing time: Thu 12 Nov 2026 09:09:05 +0000
ROA not before: Thu 12 Nov 2026 09:09:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 194.156.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:04:92:04:58:f0:c3:f2:02:37:88:ea:0f:84:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Nov 12 09:09:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e67e1b09524f7850b648ef977ef8603c8b5da7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:b4:b4:68:4e:4d:61:98:c5:6a:5d:08:f0:
e7:02:0a:37:bf:a2:79:51:a3:85:66:77:18:b5:6e:
bf:58:49:5f:4f:79:e6:cd:29:a6:88:d4:7d:c1:cb:
95:18:d6:bc:72:cc:54:f0:e1:92:57:63:12:a7:f8:
fd:ae:c9:33:10:3d:2e:9e:f2:eb:01:3c:c0:02:84:
85:1e:79:21:70:02:fe:b5:b6:a5:6b:5f:b1:ba:59:
a1:80:a6:c7:b5:75:c8:0f:82:3d:71:a3:71:f4:39:
a5:82:df:bf:79:70:eb:d1:81:46:69:9e:6b:3d:19:
f6:62:fb:c7:47:52:db:2d:7b:b8:0f:8b:ae:dc:d0:
a5:d5:a4:b6:db:21:fd:95:e8:68:e5:06:a5:02:9b:
4a:e9:17:61:93:66:76:35:32:4f:cc:20:38:bd:71:
8a:eb:dc:ff:09:c7:de:01:51:e0:08:60:fa:a6:f3:
af:56:ad:5a:49:9f:63:da:99:7d:86:5d:d1:35:d6:
4c:9e:df:29:76:07:20:ac:88:2c:d7:a0:15:c7:e0:
80:0f:ce:a8:6b:be:a5:df:00:b6:9e:0e:52:3f:2c:
a5:8e:4f:dc:75:69:cb:77:de:e2:48:19:7e:38:c2:
89:d2:c6:4c:86:b2:cc:e0:34:dd:47:97:82:11:5e:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7E:1B:09:52:4F:78:50:B6:48:EF:97:7E:F8:60:3C:8B:5D:A7:BB
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/5n4bCVJPeFC2SO-XfvhgPItdp7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:93:77:92:d5:d2:97:aa:ef:a5:69:14:fb:e7:93:d9:d1:c0:
1a:67:da:41:4e:00:cb:11:77:40:1c:a3:e4:8b:b8:86:3d:0a:
97:85:84:e5:39:92:30:64:a0:84:3d:7e:0a:20:9b:64:38:ad:
f6:f7:e7:87:c5:25:2a:2f:36:9f:89:23:43:3f:2c:f3:6d:12:
8d:93:31:17:31:fe:59:08:12:80:6f:50:56:fc:16:0e:08:1c:
bc:ba:97:a8:1c:17:35:6f:43:7b:73:57:66:db:b9:c9:8c:33:
4f:e9:63:32:34:2c:7c:eb:c1:35:ca:6f:dd:da:99:76:b9:35:
fe:78:b0:c5:41:36:d3:cd:0a:02:6a:b6:64:14:d4:53:3f:a2:
3c:d4:d0:c1:e6:08:e6:75:a2:84:6e:d0:3e:c5:e8:df:43:3d:
69:c0:9e:ac:60:42:c5:11:5a:00:47:5a:21:8b:68:76:92:7a:
db:66:86:3a:9c:3a:e5:15:d9:33:c0:af:d5:b2:d1:cf:7e:a1:
74:b1:43:36:9c:99:29:f9:59:df:6c:93:e9:f7:2a:ad:93:ed:
aa:6d:91:c6:ac:eb:fe:3e:2d:33:7b:23:40:34:c9:cc:79:70:
28:54:32:e9:d8:e0:57:f2:3c:31:7c:a1:82:7b:8d:90:12:8a:
34:56:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:08 2026 by rpki-client