Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/o548aWjyv_hfBdpA1bVFK3wrNP4.roa
File: o548aWjyv_hfBdpA1bVFK3wrNP4.roa (raw, json)
Hash identifier: zUyBvFaEHdugGyGKIt6bIfLj0Nkxf9FI6lzJjaoR1s4=
Subject key identifier: A3:9E:3C:69:68:F2:BF:F8:5F:05:DA:40:D5:B5:45:2B:7C:2B:34:FE
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019D01A8C061C111F36CC5475BDC28B1FA47
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/o548aWjyv_hfBdpA1bVFK3wrNP4.roa
Signing time: Wed 18 Mar 2026 15:55:29 +0000
ROA not before: Wed 18 Mar 2026 15:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49434
IP address blocks: 87.232.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:a8:c0:61:c1:11:f3:6c:c5:47:5b:dc:28:b1:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Mar 18 15:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a39e3c6968f2bff85f05da40d5b5452b7c2b34fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:fb:2b:f0:ba:c7:91:8d:7b:ed:ac:f8:80:
da:b3:5b:bb:05:3c:a0:15:d1:a1:5a:23:90:eb:ad:
37:f6:b5:db:86:17:bb:f2:ae:ee:0f:37:12:cf:f9:
d6:09:0c:a2:69:4c:71:73:08:96:40:6d:79:44:2b:
a6:aa:e1:e7:00:65:af:85:67:2d:94:77:96:d3:ce:
4e:95:9f:e5:2e:34:db:f8:d2:04:f1:c3:bd:0d:92:
15:80:87:dd:8d:3b:94:7a:94:c3:61:54:c4:47:22:
df:be:96:7e:80:46:7b:e4:9b:72:fe:c7:c8:0a:fa:
42:af:d9:35:3d:d2:c5:12:c1:ec:49:cc:51:07:dd:
66:1a:4c:28:fc:f1:35:7f:4d:17:86:ce:99:9d:67:
ac:58:15:ce:73:65:72:8a:b2:bd:62:a5:83:2b:f2:
fb:8e:bd:66:f6:2d:b9:fb:ae:4b:e7:70:8a:15:65:
bb:9c:99:23:fe:53:0a:59:65:d8:43:6c:87:9b:1a:
f1:df:1f:67:af:61:73:f1:72:6a:32:6d:de:ed:a7:
9c:a8:e0:e3:31:3f:d2:99:d8:0a:06:ba:c7:c3:4a:
2e:2a:14:d2:46:c3:27:6b:15:4d:31:08:31:34:f6:
71:4b:c7:91:89:19:d3:fd:ba:6e:2e:1a:20:50:4c:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:3C:69:68:F2:BF:F8:5F:05:DA:40:D5:B5:45:2B:7C:2B:34:FE
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/o548aWjyv_hfBdpA1bVFK3wrNP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:06:7e:7a:ff:b9:c4:d3:29:c6:96:53:2d:45:38:b1:5d:93:
7d:c5:b5:f8:d4:c0:98:ac:28:b6:88:29:30:84:a0:66:0f:75:
30:6e:27:f0:05:f4:96:2d:aa:a8:73:69:60:15:4b:43:89:5d:
7f:68:39:5c:50:66:d2:fe:08:51:39:2d:fd:82:60:52:b3:92:
aa:79:3a:6b:0b:b6:da:26:bc:ba:16:c7:bc:62:e0:79:99:22:
fd:ac:80:19:d3:65:f0:bd:6c:e6:2c:3a:4d:5a:0e:e5:b6:ca:
4c:7a:c9:4e:71:fc:20:19:65:f5:2e:e8:a5:25:f6:8e:57:51:
44:de:d6:78:24:3c:db:41:c5:36:2e:e8:42:ac:57:9e:1b:31:
86:32:d0:ee:94:1c:95:94:60:fb:27:b7:5f:86:8b:c4:ae:3d:
4f:54:de:c1:c1:6e:a9:ca:d3:4f:23:73:1c:bb:f2:d9:eb:30:
51:7f:fb:fa:0b:7e:cb:00:af:00:39:df:05:a9:8d:1d:9d:ae:
1f:9c:11:5d:d1:5d:27:c4:a2:4b:c3:db:47:c1:ff:2b:ef:ba:
3f:93:e5:59:e1:3e:45:91:9e:9e:04:f1:17:99:fe:08:2d:3f:
29:6d:bf:1c:32:40:18:7c:bd:31:1c:b1:ad:b0:f8:7f:f9:8a:
0b:16:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:40 2026 by rpki-client