Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/VOm5yHFwSApfOtVfU5yjdIrNdMM.roa
File: VOm5yHFwSApfOtVfU5yjdIrNdMM.roa (raw, json)
Hash identifier: IH3EFQSyEO93Hdd08AqPhOaHQkZOsQVnzxDqaMHNObo=
Subject key identifier: 54:E9:B9:C8:71:70:48:0A:5F:3A:D5:5F:53:9C:A3:74:8A:CD:74:C3
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A15AEEFCDB06C1ED339E86BFAC61B70B3F
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/VOm5yHFwSApfOtVfU5yjdIrNdMM.roa
Signing time: Tue 20 Oct 2026 20:09:34 +0000
ROA not before: Tue 20 Oct 2026 20:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213367
IP address blocks: 187.7.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:ee:fc:db:06:c1:ed:33:9e:86:bf:ac:61:b7:0b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 20 20:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54e9b9c87170480a5f3ad55f539ca3748acd74c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e2:20:74:43:83:16:77:e2:04:7c:da:4d:81:
66:69:e4:fd:b9:b9:74:db:ac:7a:0c:05:57:de:08:
09:cf:af:d0:62:8e:f1:69:90:85:e9:f2:a1:a3:26:
e9:45:d4:3f:c0:c8:13:82:43:b1:74:b4:ae:0a:8e:
da:8d:29:7f:e0:fc:c2:f4:d1:05:ba:98:7d:b8:b8:
a8:08:3a:d8:e1:66:a3:2e:32:7f:e6:3b:09:81:da:
72:ea:2f:57:51:39:22:20:14:7b:b6:c4:d2:2d:2a:
1e:36:66:f3:a5:b1:90:82:d7:9e:36:59:ab:95:ff:
5c:e7:5c:05:14:0e:fd:94:49:b7:8e:68:4a:5b:ba:
1f:ec:e7:12:c8:82:e0:50:72:08:e8:65:1f:9d:3d:
df:10:1e:79:23:77:e2:75:9e:d8:99:1f:cb:83:64:
34:d1:55:da:e5:b0:19:4c:79:72:2a:69:23:96:db:
72:28:21:cb:3f:1d:97:a3:82:76:33:19:41:c5:15:
57:a5:4e:d6:2c:78:19:4a:44:d7:33:83:7e:35:18:
78:66:02:fe:10:30:43:3b:9f:ef:8a:ac:c2:a2:d1:
d0:4b:a4:20:d0:95:23:c7:65:78:21:ac:03:65:cf:
57:43:7a:08:38:a1:9a:32:90:92:b7:2e:1b:ca:78:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E9:B9:C8:71:70:48:0A:5F:3A:D5:5F:53:9C:A3:74:8A:CD:74:C3
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/VOm5yHFwSApfOtVfU5yjdIrNdMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:33:7a:bf:76:24:1f:16:1d:25:e2:9f:67:93:bf:1d:50:3f:
c4:b0:ea:4c:e5:ac:ad:11:34:4c:32:ac:d5:fe:c7:b6:7f:2b:
2b:3d:a4:d4:0b:53:3d:4d:e0:67:8a:aa:4a:23:f8:ec:20:5a:
24:a4:79:a5:21:e3:9e:b6:1a:d6:b4:a4:6e:bd:36:fe:e3:67:
02:30:8a:61:31:89:23:15:97:61:cb:36:0b:ee:c0:f0:97:87:
89:3b:97:8c:85:f7:00:ad:c0:44:43:15:e7:5c:a1:18:5b:de:
f3:af:4c:8f:2a:6b:ed:a0:3c:84:04:8a:b2:b7:c8:fc:a7:72:
af:62:1e:db:f6:e6:89:07:8f:ca:cb:9b:43:1b:1f:d5:c9:09:
d5:4f:92:98:1e:27:2c:c7:8a:73:03:25:98:18:69:43:af:49:
e9:a6:ab:46:24:77:01:ba:ca:41:22:b5:19:1f:e8:9b:e6:e8:
13:1a:1f:12:7e:6b:73:b7:8b:e1:ca:c3:4e:81:ed:81:8d:2b:
00:6f:9f:ce:33:38:7a:49:96:96:7b:1d:41:9a:1b:b2:78:fc:
30:f6:2b:df:7d:22:af:e9:62:db:70:59:d2:a7:ce:83:e9:eb:
e1:27:eb:7c:f5:f5:8c:63:fb:9e:5c:de:e2:ff:ff:a3:d7:3f:
1b:8d:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:53 2026 by rpki-client