Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/5-XXkJnoSv_A8Qd17OtJN5i2rPk.roa
File: 5-XXkJnoSv_A8Qd17OtJN5i2rPk.roa (raw, json)
Hash identifier: rBTciEGp1PgrUjVxBEytWIpO/WAFqjVb6jKVmXXYoDU=
Subject key identifier: E7:E5:D7:90:99:E8:4A:FF:C0:F1:07:75:EC:EB:49:37:98:B6:AC:F9
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019F8009CEC5214CD2AE5EDD7F004EF76887
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/5-XXkJnoSv_A8Qd17OtJN5i2rPk.roa
Signing time: Mon 20 Jul 2026 14:59:14 +0000
ROA not before: Mon 20 Jul 2026 14:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51411
IP address blocks: 31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
178.236.32.0/22 maxlen: 22
178.236.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:09:ce:c5:21:4c:d2:ae:5e:dd:7f:00:4e:f7:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 20 14:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e5d79099e84affc0f10775eceb493798b6acf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:a0:26:01:fb:58:73:66:f2:74:bf:9d:31:
df:11:f0:e8:31:fd:0c:8b:a1:ea:be:89:2f:51:27:
3c:3d:ab:42:d9:27:75:28:bf:6f:8c:54:8e:e0:ae:
f8:20:67:63:27:7a:4b:8b:34:4e:87:7e:31:30:29:
4d:b5:ea:e8:94:4c:42:15:61:fe:bd:eb:ef:4a:0d:
f8:c1:eb:79:94:e0:62:6d:ed:56:1e:1d:b6:2d:ee:
b1:21:60:22:56:2e:cb:6b:66:42:7d:db:aa:c5:85:
a6:0e:c5:2b:7e:5e:de:9a:b2:bf:2b:6c:18:90:37:
9f:73:5b:15:4a:cc:31:42:5d:dd:89:3a:b6:0f:8d:
c9:fb:52:b8:fd:b3:49:7e:a7:b6:ad:24:8e:d6:8b:
e1:cb:3a:19:45:25:17:71:dd:c1:9e:5b:8c:6e:2e:
13:5c:00:2b:07:aa:24:7b:90:c5:5c:35:3a:49:33:
57:ed:98:ce:38:cd:01:36:91:80:cf:24:60:bb:d1:
64:e6:6f:d4:2c:e4:76:4d:4f:8a:5a:f5:ce:bc:ff:
71:c5:3f:48:ee:55:05:63:de:16:06:7d:19:3a:b0:
64:0b:86:72:62:ce:7c:74:41:54:a2:1a:42:fe:a0:
3b:a3:f8:b8:05:b4:0d:6e:31:1a:26:f7:5a:8c:27:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:D7:90:99:E8:4A:FF:C0:F1:07:75:EC:EB:49:37:98:B6:AC:F9
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/5-XXkJnoSv_A8Qd17OtJN5i2rPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
26:77:44:eb:82:83:68:a9:c8:9b:e7:3a:d3:c5:76:ef:94:50:
d8:31:20:c9:86:4f:14:d6:77:30:81:75:4c:d9:0f:15:8d:6a:
52:69:e1:82:cc:a5:11:d1:55:26:77:c4:bb:12:fa:1e:2b:ae:
be:1c:ac:bf:0d:21:fe:8c:c7:9d:6f:b0:b5:8b:62:3a:65:ea:
91:0a:63:76:c9:78:d9:d1:b7:ff:a9:64:00:2a:bd:8e:c5:e2:
b4:7a:33:f9:d8:f5:e8:70:b1:80:d0:e7:a2:38:fa:68:6d:9d:
62:7c:19:e8:a2:a0:cb:9b:20:5c:b7:f5:a3:8f:10:64:d5:89:
75:5d:b7:17:3c:e3:c1:ba:f9:ec:d4:16:ca:36:c0:9d:c2:d0:
5a:bf:36:84:ac:8e:ae:28:e5:63:3f:a3:87:cb:6a:29:03:63:
ff:a2:df:2f:43:37:fc:21:7e:73:d2:49:36:f2:98:5f:91:7b:
c9:a0:82:94:0f:b3:24:37:af:84:28:71:ba:fd:7b:fe:28:ff:
ad:f1:9c:93:6d:8a:d2:d4:1e:4a:54:db:ef:27:6b:d6:ca:16:
cf:ce:f1:2f:ac:44:38:01:fc:62:f2:86:3a:65:c0:94:66:f0:
10:df:83:e3:ea:11:eb:b8:02:89:c2:d8:a8:ae:c6:b3:da:11:
37:1f:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:57 2026 by rpki-client