Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa
File: 5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa (raw, json)
Hash identifier: 8jRo/6ysSzkjLks/pza54/NHIMmLzqF2Z1dcDNEC0e4=
Subject key identifier: E5:25:AD:09:11:6D:E9:6B:0E:8D:BF:AD:74:9D:E3:E4:D5:0D:8F:4B
Certificate issuer: /CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Certificate serial: 019F23682DE4C5E227F2237231E1D3136225
Authority key identifier: AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49478
IP address blocks: 91.234.164.0/22 maxlen: 32
194.150.254.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2d:e4:c5:e2:27:f2:23:72:31:e1:d3:13:62:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e525ad09116de96b0e8dbfad749de3e4d50d8f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:d5:f2:e7:48:06:00:10:e2:b7:14:78:0d:
a2:39:80:44:93:7c:a4:0a:74:3e:10:bc:55:a1:63:
4e:80:d3:90:45:02:02:60:9b:3b:18:8e:8e:3b:98:
dc:5f:4c:5b:f5:7e:b4:a9:ca:30:21:1d:79:70:8d:
83:cb:f2:07:5e:ed:37:6b:55:c7:8e:ce:77:3a:71:
93:db:ab:77:65:dc:2e:dd:22:b1:87:7b:38:c4:ed:
ac:d5:f7:21:28:e5:7b:2c:a4:e7:12:47:c1:93:12:
b2:a0:93:5c:cf:30:4d:9d:d9:bf:76:a8:9e:6a:53:
bc:d4:91:23:50:22:3e:da:80:4f:f1:25:75:f3:9d:
23:44:71:66:39:25:a4:51:f8:52:78:3f:16:92:0d:
09:8e:df:1c:00:c0:ac:82:a8:d4:8b:0d:f0:72:e4:
f0:9a:5b:ef:81:09:3a:4b:e2:be:d7:96:35:78:33:
e9:65:20:fd:32:09:1a:80:9a:79:b0:19:43:b9:d6:
d8:e4:6a:b5:ec:8c:8d:60:2c:64:b2:cd:ae:80:0e:
c1:94:00:ce:60:9e:0d:a6:51:3a:47:71:82:53:78:
d7:c6:55:6a:c3:7c:77:6a:45:b6:fd:98:36:fb:c8:
2a:00:ca:5c:15:55:09:68:e0:12:28:b5:d2:9d:53:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:AD:09:11:6D:E9:6B:0E:8D:BF:AD:74:9D:E3:E4:D5:0D:8F:4B
X509v3 Authority Key Identifier:
keyid:AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.164.0/22
194.150.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:2d:85:0c:e8:eb:4b:42:6f:c4:ec:1d:0e:1e:82:88:65:a1:
3d:dd:8e:ab:a5:07:bb:a5:3a:0f:10:e6:3c:c4:8b:9f:fe:8e:
f5:28:29:71:3a:77:85:14:e3:a5:68:b7:b0:4d:3e:18:e5:09:
80:c9:1a:c7:7d:90:f3:1f:2d:d9:54:4d:dd:53:98:07:64:68:
c0:d8:f6:e9:3f:e6:f3:61:d1:f1:59:92:3e:2f:1f:16:e1:b3:
73:48:cc:e9:a7:a8:64:cf:db:20:73:db:bb:62:72:d9:df:72:
0b:85:6f:b9:16:9b:58:d0:e8:10:07:11:a4:53:91:9e:1b:54:
56:18:70:76:8c:84:61:17:63:7e:aa:8a:a2:6c:28:5a:4f:5f:
8b:7c:7e:5b:6b:af:15:0c:50:bc:ec:b0:e6:30:73:9e:9c:37:
3b:88:f5:bc:7c:f9:28:28:b6:4e:73:d6:b9:de:72:76:d2:a8:
da:4e:e5:e3:17:e8:e7:4a:fa:4d:e0:a8:a7:5f:5d:f6:ec:7a:
38:06:8b:07:9f:0f:a4:89:86:28:e0:74:7b:e1:77:0a:d7:f1:
01:08:5e:b0:ce:26:0a:98:6d:d3:65:b2:a8:ef:d1:89:de:2e:
e3:90:32:25:9d:b8:4d:69:3a:48:6a:83:dc:0d:a8:af:79:fe:
03:d3:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:03 2026 by rpki-client