Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/5zZlQrVbuy95V9_g-dvn6SEsMXc.roa
File: 5zZlQrVbuy95V9_g-dvn6SEsMXc.roa (raw, json)
Hash identifier: docnOoPQs5bVmN+gWdBUoeRdhc/v8Od4pPggD+aPR80=
Subject key identifier: E7:36:65:42:B5:5B:BB:2F:79:57:DF:E0:F9:DB:E7:E9:21:2C:31:77
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 01A094B5F367B353175F87D5F7DFEAE628A9
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/5zZlQrVbuy95V9_g-dvn6SEsMXc.roa
Signing time: Sat 12 Sep 2026 08:22:27 +0000
ROA not before: Sat 12 Sep 2026 08:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48669
IP address blocks: 194.102.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:b5:f3:67:b3:53:17:5f:87:d5:f7:df:ea:e6:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Sep 12 08:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7366542b55bbb2f7957dfe0f9dbe7e9212c3177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:c6:bd:4d:4c:ad:64:9a:40:de:eb:4c:68:
c1:11:4d:ac:38:f9:a7:6b:5b:46:86:43:ca:ca:5e:
6d:d9:b4:9a:a1:c7:bd:80:db:02:43:a1:91:1a:c5:
e8:2b:9c:f2:7d:51:c4:cc:36:91:85:49:b7:45:ee:
2d:3b:23:48:96:c6:ba:54:a5:af:67:09:21:15:f3:
bd:14:34:cd:1f:a0:ae:08:23:44:4c:37:b9:5c:f3:
a1:e5:d9:f8:a4:be:2b:13:8c:6b:73:6c:be:c4:f9:
9e:68:28:6e:90:5c:eb:21:8b:86:5b:47:9d:7e:ac:
f2:59:1f:a1:b1:c3:04:d1:8d:1b:5c:85:cc:d2:3d:
0c:f2:9a:de:b7:49:9b:3a:76:b8:2c:7c:f8:ab:1b:
b3:fa:5c:db:e3:73:1a:d9:16:4e:66:18:37:cb:5e:
41:d5:dc:9f:ce:33:8a:6c:1d:27:10:cb:e9:3a:b8:
f0:0c:cb:2a:59:b8:81:ea:84:8a:5a:e8:5a:97:0c:
76:ff:32:01:c2:e0:cc:db:a3:bb:9e:a0:c6:0a:5d:
14:d4:fa:32:bb:4a:c6:38:6f:79:11:0d:8d:79:c0:
22:67:5c:c5:9c:fb:4f:b2:ae:ba:0a:90:be:0a:55:
16:01:1f:4d:60:7b:6f:9f:a0:1d:35:4d:4b:c3:39:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:65:42:B5:5B:BB:2F:79:57:DF:E0:F9:DB:E7:E9:21:2C:31:77
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/5zZlQrVbuy95V9_g-dvn6SEsMXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.131.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f7:66:04:8d:dd:9b:a1:6a:5e:34:5c:83:24:d1:02:d3:62:
42:72:49:95:25:fb:92:fc:55:c9:6c:6c:10:3c:bc:f2:92:da:
d0:a2:d8:d7:1c:8f:31:af:23:6e:a4:4e:fa:a7:4a:dd:15:17:
df:e9:52:8b:65:38:b7:37:fe:6d:e1:74:e8:6f:8f:a8:83:a6:
d2:7d:7d:ff:12:ad:a4:60:cf:bb:9c:77:67:97:55:f9:1f:8b:
3c:8d:99:a5:14:c2:70:32:cb:96:17:18:df:db:19:a1:ad:d4:
2d:c0:0b:29:42:39:43:50:7b:8c:21:70:75:fb:bd:c1:07:1f:
cd:6f:e5:3b:a9:68:80:d3:b0:1b:1f:c0:bd:55:71:97:4f:49:
67:53:e5:b6:6b:02:97:0a:6c:0e:f6:25:7b:06:f4:3f:e3:fe:
a1:5c:30:46:59:e0:b2:07:14:27:b6:61:b4:51:db:06:99:b0:
ee:c8:c2:15:31:a2:a5:3b:fa:64:98:e3:33:f0:7f:bb:18:7c:
db:b9:00:97:20:92:c3:2b:ea:84:d3:43:aa:e8:90:ee:d0:51:
d3:84:c7:c1:98:29:bc:56:81:5e:51:e2:b0:cb:e8:82:61:ba:
90:9a:0d:97:3d:db:a8:07:83:6c:10:c2:a0:80:e4:4f:4e:26:
b6:70:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:25:27 2026 by rpki-client