Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa
File: eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa (raw, json)
Hash identifier: YlsuBpQ4jmohvQqxKmhcIgBvEbbXIh+AX1kjTabOK9c=
Subject key identifier: 78:E5:E9:40:80:3A:A8:BB:52:44:A8:B7:ED:A6:81:7F:67:CD:F8:DC
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 019D0B5ABEFF6EB8EB38AD00F467E564E0B2
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa
Signing time: Fri 20 Mar 2026 13:06:29 +0000
ROA not before: Fri 20 Mar 2026 13:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25154
IP address blocks: 5.252.200.0/24 maxlen: 24
5.252.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:5a:be:ff:6e:b8:eb:38:ad:00:f4:67:e5:64:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Mar 20 13:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78e5e940803aa8bb5244a8b7eda6817f67cdf8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:f5:6f:18:c1:5b:cb:bf:5d:85:e6:41:ab:
fc:3b:ce:4d:5f:16:d6:a3:c0:90:39:c2:80:26:6c:
85:c3:8f:90:05:3b:60:80:73:19:b0:09:e9:ec:48:
6d:18:d0:11:47:2f:96:98:5a:5b:99:aa:f8:2b:d5:
04:03:55:63:54:0b:48:8a:0c:d7:7a:51:f7:8b:a1:
c3:7a:80:31:42:e2:5c:e7:7e:7a:f6:4e:99:68:e2:
ed:f6:ef:ea:68:70:70:e9:d3:8c:ba:bd:81:59:55:
4b:77:0b:72:e4:54:3b:f6:dd:62:59:9c:26:ae:40:
d2:75:1b:62:f1:a3:50:92:54:12:87:b8:95:eb:f7:
5b:1c:6c:46:ad:b7:74:62:f6:a3:cb:4e:e4:84:66:
cd:ac:07:f4:3a:7b:df:0b:eb:cb:5f:ab:0d:ea:b6:
21:55:a0:7c:51:0c:e1:b9:75:7c:3b:1f:81:96:02:
b1:2b:2b:ab:c5:24:c9:df:d5:d9:a8:41:b1:54:8c:
c5:dc:19:60:52:71:03:61:63:dd:b7:26:26:f3:ad:
ab:23:95:7c:51:c6:bc:51:ee:f0:14:a5:25:a8:73:
50:4f:b6:c6:8b:79:8f:5b:03:ae:bf:c4:fe:db:b3:
f3:5c:6f:23:ae:55:ee:45:c2:ae:dd:5d:ce:66:d5:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:E9:40:80:3A:A8:BB:52:44:A8:B7:ED:A6:81:7F:67:CD:F8:DC
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.200.0/23
Signature Algorithm: sha256WithRSAEncryption
09:0f:93:93:d5:7c:08:14:5d:99:2a:23:c5:17:ab:a3:ce:41:
95:d3:74:fe:9b:96:33:83:40:9a:81:45:d1:c8:b4:92:ff:c1:
b0:cb:be:b9:16:6f:d6:c2:24:bb:50:c4:24:95:26:02:46:38:
6a:8b:b6:a1:5c:4e:f6:e1:71:2d:ee:64:f4:b5:4e:ef:32:18:
51:78:d0:33:20:00:dd:81:46:cc:e2:5c:61:8d:21:a7:bb:00:
ca:88:4e:a5:c1:97:fe:94:ff:e6:c6:7a:ae:22:9d:66:bb:d8:
4b:98:87:37:5f:d9:2e:15:69:d3:c6:a9:61:b7:ec:e9:58:5a:
ea:83:db:64:db:98:63:4b:26:ad:6d:b5:5c:73:40:01:11:ea:
97:25:ea:a0:7b:bb:95:df:f7:27:59:47:e7:7e:bd:39:6a:41:
f6:0f:b3:82:39:36:94:bc:e3:19:fe:82:49:3c:95:79:c8:40:
fd:4a:5f:99:68:cf:27:6d:91:3f:b9:49:3c:18:eb:ce:cc:08:
b1:16:ab:aa:92:80:23:3b:9c:58:6b:cc:2b:aa:e5:76:c4:d1:
9a:ff:89:25:43:08:6b:71:04:cd:2f:9d:61:49:d0:0c:f8:d8:
03:3c:3f:b6:88:da:93:05:dd:e3:e0:4f:ac:0a:47:47:07:4b:
7e:31:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:11 2026 by rpki-client