Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5e2ugPUPxaSeiD5ij4OxwM1PjEc.roa
File: 5e2ugPUPxaSeiD5ij4OxwM1PjEc.roa (raw, json)
Hash identifier: mugAxfnq0I00dYxeQDOOopWj4Ta0W+HBIr/Eh2y0wV8=
Subject key identifier: E5:ED:AE:80:F5:0F:C5:A4:9E:88:3E:62:8F:83:B1:C0:CD:4F:8C:47
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D6FCAE0A18DB7B33916DED457EF4
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5e2ugPUPxaSeiD5ij4OxwM1PjEc.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a11:a900::/29 maxlen: 29
2a12:e600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:fc:ae:0a:18:db:7b:33:91:6d:ed:45:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5edae80f50fc5a49e883e628f83b1c0cd4f8c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:9e:a2:1c:c9:76:d6:ef:d5:45:ea:6d:5e:
4f:55:5f:21:d4:3e:24:ba:83:c9:12:9a:46:51:6d:
1d:16:ef:bd:a3:15:d0:6e:e2:29:15:31:81:43:2d:
3a:60:e3:ff:71:67:86:29:90:0c:5d:ad:b9:d8:ea:
22:7c:b7:c7:11:dd:0f:21:d9:57:e8:43:db:cc:5e:
4d:d0:c9:81:63:47:79:f9:49:09:fc:03:0c:23:0d:
af:fe:a3:6a:78:bd:79:86:dc:16:a3:e8:9a:1a:17:
66:c9:74:e9:6d:cc:1a:2f:9e:92:46:2b:20:99:4d:
b6:5c:2a:fa:01:36:68:0f:91:fe:9c:96:37:c0:fb:
03:a1:db:fc:89:7c:c9:94:2c:18:26:eb:a0:16:71:
16:f7:3e:8d:d0:91:51:ab:b7:f6:7b:07:19:e8:9b:
fe:e2:4f:39:9f:68:ac:2f:5c:4d:ea:4b:37:d3:ef:
ee:30:eb:e4:53:6e:f2:05:ae:93:b1:5d:bb:00:af:
6d:1f:51:3e:46:41:e0:9e:68:0d:8a:ae:78:ff:97:
bb:51:6f:04:1d:da:41:65:f8:dc:c9:a4:b1:10:da:
d5:25:40:7f:dd:4f:e8:ec:a4:1a:eb:28:30:36:7e:
b9:ad:f8:13:77:45:95:09:f4:a5:44:3b:80:e6:f8:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:AE:80:F5:0F:C5:A4:9E:88:3E:62:8F:83:B1:C0:CD:4F:8C:47
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5e2ugPUPxaSeiD5ij4OxwM1PjEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a900::/29
2a12:e600::/29
Signature Algorithm: sha256WithRSAEncryption
73:11:67:47:7b:f0:33:b9:20:21:fa:eb:da:1e:17:de:13:c4:
d9:98:e1:c2:0a:57:de:e0:2f:c1:7e:cf:9b:ad:5e:57:58:81:
9b:30:31:00:a1:be:41:dc:a8:91:66:24:8d:95:4e:84:a2:30:
79:a5:ad:f5:2e:08:27:f0:29:9a:91:3f:e9:d7:61:c3:a9:aa:
b8:3f:9c:42:fb:bf:e5:69:c9:e0:be:66:7c:f5:14:60:c4:b5:
14:82:00:61:10:bb:7c:27:6d:57:db:05:1f:7a:74:26:1b:9f:
6e:95:af:31:55:e6:8b:9f:7e:15:a5:b4:9d:a0:4e:ba:09:71:
9b:ce:be:ed:65:dd:59:c2:38:86:38:71:51:db:ea:d2:8d:45:
6a:2c:c9:eb:cf:6f:a6:d5:a3:fa:68:01:1c:44:43:fd:3e:3a:
a4:65:be:0d:28:31:ce:42:1f:7e:68:2b:ac:df:4c:78:f7:9c:
3b:12:fd:42:9f:fa:d9:9f:50:8c:af:4f:63:a8:27:d1:ae:c1:
47:7b:bf:c5:c8:12:a4:0d:60:4e:aa:05:82:77:e3:9d:02:1f:
0d:ca:e5:72:50:05:8c:dc:29:45:c4:cf:7e:ef:e5:df:e1:d6:
2a:9d:30:ce:bd:a4:0f:8a:a7:f9:0c:91:59:9d:14:e4:20:ae:
fb:03:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:37 2026 by rpki-client