Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5f_np1voV0VTk_Bq6I4yP9HaoSo.roa
File: 5f_np1voV0VTk_Bq6I4yP9HaoSo.roa (raw, json)
Hash identifier: ePPGhIWDDT1zXwwCQDBZWoeNqacSSkY24CbVPHkvaWQ=
Subject key identifier: E5:FF:E7:A7:5B:E8:57:45:53:93:F0:6A:E8:8E:32:3F:D1:DA:A1:2A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2A042DCED538159C497CD19A4E8584BD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5f_np1voV0VTk_Bq6I4yP9HaoSo.roa
Signing time: Fri 03 Jul 2026 22:05:44 +0000
ROA not before: Fri 03 Jul 2026 22:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214322
IP address blocks: 2.26.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:04:2d:ce:d5:38:15:9c:49:7c:d1:9a:4e:85:84:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 22:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ffe7a75be857455393f06ae88e323fd1daa12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:36:87:c1:08:27:da:c7:d3:97:be:1f:54:
cb:ec:d6:a8:99:23:b6:5b:f7:f8:24:79:58:67:3b:
ed:80:bc:35:c0:46:93:f7:a0:3d:df:52:56:31:9d:
a7:5e:40:4e:bd:a9:7e:63:19:39:57:4e:c0:c1:a9:
69:9d:d5:e3:ee:4e:4e:3d:b0:88:5c:99:3d:25:61:
65:19:89:31:51:a0:b9:4a:6f:e1:09:5a:40:1c:14:
24:98:d1:f4:c9:9d:70:c7:98:4f:40:60:4c:47:6d:
10:e2:dd:05:38:f6:3f:00:16:46:32:7e:c4:b2:78:
08:50:b4:de:d7:72:18:cf:36:c4:a9:2e:b4:8a:17:
36:5d:e1:d9:9a:2b:4e:d6:e2:9f:bd:65:27:94:05:
7c:25:ba:2b:5a:07:86:f7:44:31:d8:81:fa:ec:20:
ba:c7:91:60:43:44:dd:61:f4:47:f2:ab:a8:79:44:
6a:d9:d3:8a:50:ca:8e:aa:59:4c:a1:51:4a:0d:09:
ad:ff:47:73:f7:57:80:40:12:dd:7b:73:6b:b2:46:
5c:56:73:59:e6:af:73:a9:cb:80:85:1c:25:ee:b4:
cc:33:d3:32:7c:9b:a6:41:a5:6c:cf:cb:74:c2:ba:
86:9f:b1:fb:42:73:ec:11:44:1a:47:99:10:df:21:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FF:E7:A7:5B:E8:57:45:53:93:F0:6A:E8:8E:32:3F:D1:DA:A1:2A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5f_np1voV0VTk_Bq6I4yP9HaoSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.179.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2f:37:03:35:7a:84:e0:a1:0e:0b:fc:db:eb:c5:09:f8:a1:
9a:59:cc:a4:48:0f:0f:6a:1d:d8:eb:74:2b:0d:cd:88:1d:26:
7f:c9:b7:11:33:e4:ea:09:60:84:38:f8:ec:81:bf:66:7d:ba:
65:0a:c7:75:4e:85:61:46:a9:55:94:3e:64:04:08:37:39:b0:
79:9b:17:36:ef:44:06:6e:16:48:7f:d3:58:62:68:ab:fe:49:
64:61:13:b1:fe:7b:88:37:5b:11:dd:1f:62:57:a5:6b:f8:d3:
c8:70:5d:31:c1:5f:66:57:38:bd:f3:6b:89:74:78:ff:0a:41:
39:6b:fa:cb:fb:19:62:eb:56:3e:2a:ab:0c:41:64:d0:dd:4c:
36:22:b1:e7:6a:37:5b:f3:84:b3:42:ab:3a:5b:e4:5a:31:de:
74:ed:f8:b8:cb:a4:ab:ba:43:5a:1b:9c:04:ba:6c:e2:32:b1:
8f:dd:c7:a7:f1:80:65:e6:2c:d7:88:cb:20:67:e2:3d:36:3a:
c9:9c:a4:01:f4:60:2f:42:5a:17:8f:b2:65:74:2d:5c:d0:fb:
e3:fb:0b:50:3c:01:44:5e:94:7e:c5:d3:0f:cf:24:93:ca:8c:
a2:bc:14:bd:0a:76:8e:f1:fc:ca:eb:70:39:4e:82:ee:d9:b6:
0e:63:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:07 2026 by rpki-client