Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/RYK8eSjsifr9pQT01oqnFEw57tk.roa
File: RYK8eSjsifr9pQT01oqnFEw57tk.roa (raw, json)
Hash identifier: X2sDAKLarXzKqESRnrBkLXHn/mIqSBDNzM5IMwHVcZI=
Subject key identifier: 45:82:BC:79:28:EC:89:FA:FD:A5:04:F4:D6:8A:A7:14:4C:39:EE:D9
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1BD080F69B652D5A09DEC4DD247607D90
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/RYK8eSjsifr9pQT01oqnFEw57tk.roa
Signing time: Sun 08 Nov 2026 21:19:44 +0000
ROA not before: Sun 08 Nov 2026 21:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402931
IP address blocks: 187.54.1.0/24 maxlen: 24
187.54.2.0/24 maxlen: 24
187.54.3.0/24 maxlen: 24
187.54.4.0/24 maxlen: 24
187.54.5.0/24 maxlen: 24
187.54.6.0/24 maxlen: 24
187.54.7.0/24 maxlen: 24
187.54.9.0/24 maxlen: 24
187.54.10.0/24 maxlen: 24
187.54.11.0/24 maxlen: 24
187.54.12.0/24 maxlen: 24
187.54.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:08:0f:69:b6:52:d5:a0:9d:ec:4d:d2:47:60:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Nov 8 21:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4582bc7928ec89fafda504f4d68aa7144c39eed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:46:be:1c:a4:a0:d7:32:58:81:33:7d:d2:
d5:e6:8f:68:92:a0:9c:c0:26:8a:58:11:b9:1e:53:
e0:ba:9c:6e:22:3a:0e:6c:d5:5f:43:ce:a3:8f:28:
28:d7:3b:72:1c:ca:ff:9f:fa:0e:6d:ed:1a:c1:f5:
6a:2d:0b:1d:c8:f1:26:65:2f:dc:f7:5d:51:c4:2a:
40:c1:4c:86:db:ed:d9:e3:d9:80:6f:85:5d:54:89:
93:01:75:f4:6a:7e:19:20:06:e3:a8:44:2a:b3:4b:
66:f6:a0:ae:89:46:f8:6a:8e:7d:94:d9:28:22:10:
df:91:54:6c:80:1d:91:57:a4:c5:d3:04:99:0b:71:
13:3d:16:f5:eb:0e:95:d2:0a:36:f7:32:db:24:48:
5b:35:d9:3e:72:4b:12:b4:ae:8e:73:37:80:27:98:
d0:c7:f6:7d:51:8b:5b:d8:0a:36:ea:fd:91:d9:2d:
c7:d8:90:46:8a:55:43:2c:b5:6a:88:9b:10:3c:8a:
d7:00:b1:37:d4:7b:cd:76:57:88:62:3f:c1:90:17:
00:b6:82:27:f4:50:20:d4:77:54:08:90:29:bc:b5:
36:4c:1f:d6:a2:e7:25:08:e5:04:d0:9f:4d:e9:f4:
1c:f9:8a:b9:5c:cc:f2:47:d8:c6:76:4c:04:4c:f0:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:BC:79:28:EC:89:FA:FD:A5:04:F4:D6:8A:A7:14:4C:39:EE:D9
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/RYK8eSjsifr9pQT01oqnFEw57tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.54.1.0-187.54.7.255
187.54.9.0-187.54.13.255
Signature Algorithm: sha256WithRSAEncryption
c0:36:5e:57:22:1a:aa:6f:95:1b:9c:3e:53:90:c0:79:76:a0:
87:92:ee:16:dc:c4:62:ea:18:47:c4:25:b9:1e:4f:50:01:bc:
38:d2:89:c8:08:c4:9d:3c:cf:d2:9e:19:dd:05:70:2d:76:94:
e9:8d:76:d6:f8:e8:e8:2c:45:28:65:4c:1f:e1:ae:89:d1:e6:
bc:9a:cb:92:6c:b1:e5:7b:ee:b1:33:5b:c4:69:2f:de:e1:d7:
05:1e:95:29:f5:4b:15:ed:72:37:7d:d3:a0:85:74:0a:2c:a6:
52:39:90:96:a2:68:5f:30:37:23:04:1f:c8:ea:c5:3c:78:5f:
b1:e5:41:76:8a:d6:3d:3c:5e:b7:d6:10:51:04:9a:6f:dc:a8:
81:e3:78:7b:69:51:17:2d:e5:fa:c9:c9:be:55:13:63:20:6b:
fa:4d:84:49:a8:61:ab:20:4a:7c:a6:ac:ca:5d:9e:c8:98:33:
f5:c9:12:d8:28:61:c0:bc:a7:32:84:ce:88:ae:ff:17:da:db:
50:35:b0:41:2d:db:5a:9f:e7:11:9e:e6:04:5a:43:2f:a4:46:
a1:fb:b3:65:e6:2d:d4:cc:ac:c1:4f:dd:b4:96:56:44:aa:e0:
cb:24:d3:81:a7:ba:87:59:58:d1:95:40:aa:d3:e0:89:06:90:
9d:d8:62:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:45 2026 by rpki-client