Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/e3zkTMxhCP8clQpAZAhrUsMaFY4.roa
File: e3zkTMxhCP8clQpAZAhrUsMaFY4.roa (raw, json)
Hash identifier: lH0rEg0z6LL5JT+j317Y72Z5fFHRfeR3TqiBJjzkaDg=
Subject key identifier: 7B:7C:E4:4C:CC:61:08:FF:1C:95:0A:40:64:08:6B:52:C3:1A:15:8E
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019E03976FB85380B172901E81660E17EA53
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/e3zkTMxhCP8clQpAZAhrUsMaFY4.roa
Signing time: Thu 07 May 2026 17:58:36 +0000
ROA not before: Thu 07 May 2026 17:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32878
IP address blocks: 5.102.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:97:6f:b8:53:80:b1:72:90:1e:81:66:0e:17:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: May 7 17:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b7ce44ccc6108ff1c950a4064086b52c31a158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:ab:67:94:be:7c:9f:6b:f8:87:0d:3f:99:
75:b4:eb:96:8f:55:2f:d0:15:8c:77:ca:22:95:9e:
f8:36:35:1d:64:05:ce:cd:70:62:90:e8:93:13:2c:
9e:f8:6d:ba:42:78:68:00:a8:f5:f5:52:c8:10:cd:
8d:0e:3a:44:ef:99:73:15:53:27:a0:93:f6:ed:8e:
20:35:18:ea:c5:5e:70:89:00:a1:3f:d6:62:cd:3c:
c3:61:b2:c9:0b:55:a0:4e:9c:d5:f6:d3:03:09:c1:
67:dd:ff:25:21:3c:c2:44:5c:13:22:9d:d3:38:9f:
d4:46:2d:01:42:18:9d:e3:40:05:ec:91:6f:45:48:
55:02:b6:a0:83:fc:f6:c6:17:94:61:a8:b1:c1:46:
ed:69:7c:dd:4b:81:25:98:60:af:c3:08:46:aa:9b:
ac:2e:6d:70:91:89:12:99:c0:f9:f0:cd:89:ac:76:
ec:1c:4c:08:8a:4f:48:42:53:43:0b:b3:9f:d2:98:
48:11:e5:e7:ca:e6:58:b2:dc:af:58:32:ad:85:43:
9f:66:0e:e2:7b:2f:84:8e:b7:fa:c9:0b:5b:ed:d8:
a9:6d:d1:70:e5:86:aa:b3:6d:bc:2d:dd:bf:aa:50:
e3:26:b0:53:6c:a5:cb:2a:e1:ee:b0:0f:2a:d7:a0:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:E4:4C:CC:61:08:FF:1C:95:0A:40:64:08:6B:52:C3:1A:15:8E
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/e3zkTMxhCP8clQpAZAhrUsMaFY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a3:1a:dd:0b:36:e0:aa:27:d9:ec:dc:44:e8:21:b1:6d:48:
e5:1e:07:32:db:37:84:ef:06:c3:d4:f7:54:ab:da:9d:ed:87:
21:6b:4f:d5:32:02:c2:41:95:0c:de:b6:90:94:c1:7a:85:ab:
c4:de:69:37:96:01:45:05:72:68:01:82:88:55:1f:bc:29:40:
8e:53:62:3a:38:98:46:8d:64:2b:3c:d1:c6:b7:45:83:94:4d:
2a:80:2b:ea:a8:18:12:65:16:63:58:2a:56:b9:cd:40:42:49:
8f:b5:90:12:3c:48:71:28:13:d1:b2:b1:d7:fe:25:fd:bd:b6:
0c:32:41:47:f4:45:47:22:d2:53:6a:f5:ac:ab:87:a0:93:f3:
cb:de:a6:99:22:c8:75:35:39:51:ad:36:eb:a6:4c:e0:82:c9:
31:03:30:08:8a:48:5a:76:73:b5:e1:bb:b1:b1:36:76:9b:a8:
3d:34:55:8a:77:a8:6d:32:6e:0d:1f:b2:ed:24:c6:73:0c:64:
c7:05:16:21:57:ed:d7:4a:28:31:e2:d2:02:81:50:dc:d8:1e:
8a:f5:c4:19:99:1c:f8:00:87:9c:7b:db:db:34:f3:a3:f0:09:
ca:b6:12:b7:d1:d7:21:fb:03:9e:34:94:42:e7:5e:fa:ea:db:
f9:7b:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:14 2026 by rpki-client