Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1V2eWPwMoUqafAswREwesTHJcEg.roa
File: 1V2eWPwMoUqafAswREwesTHJcEg.roa (raw, json)
Hash identifier: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=
Subject key identifier: D5:5D:9E:58:FC:0C:A1:4A:9A:7C:0B:30:44:4C:1E:B1:31:C9:70:48
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019DF7AD17AAFE8090C9F992AAE1E581D6DC
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1V2eWPwMoUqafAswREwesTHJcEg.roa
Signing time: Tue 05 May 2026 10:26:49 +0000
ROA not before: Tue 05 May 2026 10:26:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59595
IP address blocks: 192.162.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:ad:17:aa:fe:80:90:c9:f9:92:aa:e1:e5:81:d6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: May 5 10:26:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d55d9e58fc0ca14a9a7c0b30444c1eb131c97048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:8a:7c:45:58:ba:4b:0f:56:6b:23:fc:d5:
2b:c4:cc:b4:94:e7:6d:01:5c:23:62:46:f6:50:7f:
8f:ac:0a:65:9c:23:27:a6:54:18:ab:37:5d:be:3b:
fc:5d:a8:34:88:ff:54:12:79:d5:25:17:bc:eb:a6:
21:63:ec:eb:07:98:50:93:75:68:f9:69:1f:ef:07:
ad:3f:fb:73:52:bc:38:b1:e9:88:81:16:bb:e4:e6:
9f:2d:8f:49:97:66:0c:b5:16:8f:a0:60:39:c1:9b:
bf:f4:b7:b0:83:8c:ba:82:e1:9f:39:78:5c:23:11:
c9:5c:25:10:0a:35:6b:6b:de:b5:c2:33:1c:d4:ac:
b6:d0:95:85:94:75:16:4e:49:fc:46:95:ae:c1:71:
54:81:db:45:71:47:bc:40:98:52:75:0b:4a:cd:25:
2f:82:99:97:c5:06:1b:8c:5d:a0:36:89:76:8f:8c:
49:5d:d2:c8:aa:73:46:57:87:5a:e0:5b:39:e2:ea:
22:1d:d8:53:1e:1c:9c:03:30:1f:35:d4:b8:1c:f6:
27:6d:f3:90:f2:49:74:3a:05:e5:9c:1f:3a:c2:39:
76:f7:07:a5:82:24:53:00:76:55:73:69:21:3f:3b:
7e:1c:8f:1d:47:02:79:46:45:61:7a:e7:6b:62:5c:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:9E:58:FC:0C:A1:4A:9A:7C:0B:30:44:4C:1E:B1:31:C9:70:48
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1V2eWPwMoUqafAswREwesTHJcEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:57:b8:e2:df:3b:5d:a5:fd:4b:87:96:28:3b:a1:05:cc:af:
ec:6c:36:e7:c9:eb:d3:48:e9:00:a4:4f:1d:58:65:d4:47:ab:
07:bf:0d:1e:c3:06:1a:5c:41:f1:78:c7:b5:60:dd:5e:22:12:
3e:5f:e5:55:6f:0d:10:94:a0:ba:f0:ba:87:e9:a9:d8:46:99:
a1:3e:d1:a8:a9:34:b6:f1:46:7d:24:d6:ad:96:51:29:06:eb:
e7:1c:68:c7:66:1d:67:3a:f1:7a:37:2a:97:95:1f:a6:67:ff:
07:c6:1c:2c:bc:6d:a9:5b:65:b0:f5:60:0b:b0:0a:b5:60:db:
d5:88:d9:b8:0e:81:61:dd:22:0f:56:e6:d0:9c:76:db:69:08:
b1:56:0e:26:4a:a2:fb:62:e7:c4:15:63:c8:18:e5:b3:62:e8:
07:90:06:13:24:69:62:85:a0:c7:a4:3c:02:24:df:fe:9e:40:
1a:51:78:88:57:76:05:44:03:4c:6c:7c:8c:18:6e:56:bc:11:
e8:e1:15:18:51:9e:7a:5c:92:58:c0:73:8f:f0:6b:66:6b:4e:
04:bb:1f:12:82:df:7b:26:69:1f:c6:2c:46:2f:5c:4c:a4:37:
93:b2:63:eb:aa:20:0e:54:31:ae:b7:b6:e2:47:1e:64:52:d7:
f2:0b:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:13 2026 by rpki-client