Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/tF-2EeR_Sloua9VRcDrOJtjCE4c.roa
File: tF-2EeR_Sloua9VRcDrOJtjCE4c.roa (raw, json)
Hash identifier: SRucPtbp0q4X2q4N9kPCOOMgbw4idYsb5wYcEAqop+Q=
Subject key identifier: B4:5F:B6:11:E4:7F:4A:5A:2E:6B:D5:51:70:3A:CE:26:D8:C2:13:87
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 01A05C4D1C968493F06395C7CCA4CF542066
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/tF-2EeR_Sloua9VRcDrOJtjCE4c.roa
Signing time: Tue 01 Sep 2026 09:29:12 +0000
ROA not before: Tue 01 Sep 2026 09:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196646
IP address blocks: 5.11.88.0/21 maxlen: 24
5.11.88.0/24 maxlen: 24
5.11.89.0/24 maxlen: 24
5.11.92.0/24 maxlen: 24
5.11.93.0/24 maxlen: 24
5.11.94.0/24 maxlen: 24
5.11.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:4d:1c:96:84:93:f0:63:95:c7:cc:a4:cf:54:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Sep 1 09:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b45fb611e47f4a5a2e6bd551703ace26d8c21387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:fb:d1:53:76:48:12:55:c1:ce:8f:06:d5:
ec:99:83:8e:f6:29:5c:11:5f:84:d9:a3:5f:6b:8b:
72:c9:bf:52:09:93:0e:39:6e:41:b2:9e:80:93:9e:
ef:e2:0c:6e:2d:4a:5c:59:00:f1:7a:49:b9:db:53:
e7:c3:7f:1f:53:90:af:ab:80:e4:0b:a8:04:0c:bd:
1f:2a:ee:e0:ee:9e:58:34:8c:c5:25:8b:3d:e3:bf:
60:df:dd:db:ed:94:ee:c4:83:54:8b:41:c1:74:03:
13:67:30:30:c5:ca:4d:f1:3b:53:a0:18:25:63:bf:
44:72:3d:47:e3:4b:c3:9b:4c:80:35:50:95:1c:70:
61:b1:c4:75:af:9f:01:10:97:a0:ca:f6:8f:a9:7c:
9c:2d:09:42:0d:72:00:c3:2d:1f:cf:26:f3:91:0a:
c3:0b:20:92:2a:95:e7:a2:59:b0:17:26:77:14:69:
1b:f3:ac:8f:d5:3b:57:53:6f:c2:e7:bf:24:03:14:
7e:ff:09:c4:ac:b3:89:23:d5:e5:8d:bb:07:82:6b:
2f:85:2c:19:a0:be:21:97:38:72:dd:ee:51:9f:72:
52:9f:9a:d9:94:ed:13:ee:c3:b2:d1:9c:26:1f:3a:
55:be:a0:85:62:df:6b:8d:34:54:9e:96:68:1f:3a:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:B6:11:E4:7F:4A:5A:2E:6B:D5:51:70:3A:CE:26:D8:C2:13:87
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/tF-2EeR_Sloua9VRcDrOJtjCE4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.88.0/21
Signature Algorithm: sha256WithRSAEncryption
15:52:80:12:e8:5d:3d:34:b3:c9:25:99:67:9a:16:42:57:ff:
28:f9:19:c3:82:c1:24:6d:b4:31:74:5c:d6:42:00:a4:25:d2:
57:8a:cd:c5:db:fe:73:4a:90:af:37:2c:de:82:f8:e4:d9:c3:
2b:b0:15:e3:db:4b:b5:08:32:e3:f6:e9:30:0b:4b:d4:db:36:
a3:8c:7a:12:da:bc:cf:51:ae:2f:1d:a6:63:26:a1:8f:80:83:
b9:b4:56:2f:ac:27:73:bc:85:ba:5b:07:22:41:8c:b8:ee:b1:
2b:f3:88:23:c3:f7:5b:c7:ec:aa:b8:fb:d4:86:ac:02:29:68:
a6:0e:50:9c:23:1f:bb:dc:26:e3:f7:17:46:5e:94:f9:f9:4c:
58:f2:c1:a0:f1:75:7b:54:f6:87:6f:71:8a:38:30:0b:c5:28:
6b:47:b4:f8:63:80:19:1b:ea:05:47:c0:88:4e:10:80:e9:5e:
95:4a:bc:ae:8f:8c:e3:e5:ad:df:18:00:d7:d1:74:db:ed:ac:
25:c6:a7:51:83:80:63:29:b3:37:05:15:7e:24:b0:3a:bd:e1:
0c:db:70:30:be:5c:37:df:0c:3d:47:34:f6:57:b5:29:73:2c:
23:4e:d6:36:76:09:74:21:d4:69:69:91:b4:d1:a3:4b:d8:7c:
7d:ae:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:25:09 2026 by rpki-client