Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/BR6ncsWkhB2qv0oqp59JLRJ22t8.roa
File: BR6ncsWkhB2qv0oqp59JLRJ22t8.roa (raw, json)
Hash identifier: Sr6aWOFkIZvhFz7mwZ8Ee2XNqfnohzUvlNMsgOtw6Iw=
Subject key identifier: 05:1E:A7:72:C5:A4:84:1D:AA:BF:4A:2A:A7:9F:49:2D:12:76:DA:DF
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019CF1BBEA7EA96A65DCCCF7CB7EBAF310DC
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/BR6ncsWkhB2qv0oqp59JLRJ22t8.roa
Signing time: Sun 15 Mar 2026 13:42:30 +0000
ROA not before: Sun 15 Mar 2026 13:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 5.39.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:bb:ea:7e:a9:6a:65:dc:cc:f7:cb:7e:ba:f3:10:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Mar 15 13:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=051ea772c5a4841daabf4a2aa79f492d1276dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:85:8a:96:d7:b1:bf:9a:85:4e:39:c3:95:
b5:5a:b5:3c:2c:3c:c6:50:c1:9f:4f:14:87:55:ac:
c4:08:0f:06:40:b1:b6:a1:e7:eb:0d:14:94:6e:33:
8e:aa:19:a7:ed:c2:32:61:24:7d:b5:8d:69:ea:39:
6a:c9:69:70:fa:20:5b:9c:86:b8:a5:ba:3b:57:d7:
5c:2e:9d:b2:f1:aa:94:16:94:5b:b7:31:2b:16:59:
5e:3c:15:dc:d3:e7:fe:ba:38:3d:bb:57:5d:83:50:
f2:1f:84:7e:02:28:b0:3d:a2:5e:e6:0f:43:49:e8:
ca:8d:99:e1:ca:cd:e8:c7:20:2f:dd:18:32:bf:fc:
5e:3f:c4:2f:10:d9:5d:db:0a:46:2b:47:53:4c:21:
1a:45:03:81:e3:89:18:00:2f:bb:fd:3a:69:de:ae:
9e:50:cb:e6:18:6a:ad:8a:cb:78:c2:7b:f3:91:dc:
63:e2:da:fe:6d:c7:41:06:2c:a4:95:15:d9:83:d6:
b9:6b:0f:ff:11:3e:0a:cc:1c:5f:77:51:47:ac:72:
37:dc:d1:9f:31:9c:b5:24:53:be:8e:5a:08:c0:e4:
21:05:dd:27:a3:a1:f5:cb:08:24:b7:6f:7c:ad:34:
20:a8:7e:c0:31:de:0d:6b:40:d6:6a:83:4b:db:45:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:A7:72:C5:A4:84:1D:AA:BF:4A:2A:A7:9F:49:2D:12:76:DA:DF
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/BR6ncsWkhB2qv0oqp59JLRJ22t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:e0:0c:27:8b:62:41:0e:b5:5b:81:aa:2b:39:98:1c:a2:0e:
6b:09:7e:4c:9e:7d:00:26:d4:51:ae:1f:ff:ff:a5:11:f7:47:
29:03:56:0b:ff:eb:45:91:0b:37:da:35:ae:ba:46:28:28:27:
da:47:76:b5:15:c7:e1:84:cc:ba:b1:8b:8d:d1:b2:0c:84:e3:
db:bb:c1:03:26:70:85:31:35:08:41:fa:c7:0a:9b:8f:ba:37:
96:86:d0:40:f7:31:25:2f:b1:9a:ec:6a:00:20:bb:16:56:6c:
a3:b0:9d:5b:62:5f:fb:95:b8:08:19:0c:26:2f:f2:ad:66:fe:
71:b6:ba:45:de:12:3a:ca:77:9e:ea:39:a3:c9:a1:c7:c7:e6:
69:2d:49:13:0a:a0:7c:2d:cd:57:fa:24:ad:c0:a7:63:04:76:
1d:8a:36:e9:14:a9:77:2c:3e:a7:82:b7:75:30:35:11:c2:34:
b5:15:ae:20:30:06:ce:e1:ea:0e:a3:6e:71:3d:2e:f7:af:df:
d5:16:1a:3b:d7:99:ef:82:80:f1:8a:d7:9c:e0:d8:5e:64:5f:
0f:d2:5d:a2:6f:8a:ae:3d:6a:34:35:6b:8a:0c:2f:b5:cf:5f:
95:1c:23:c1:bd:b2:bd:a4:92:86:be:42:14:ef:9d:dd:90:66:
5c:02:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:22 2026 by rpki-client