Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5YruXy8dr8Jzmk4o8uUkR0LyMj0.roa
File: 5YruXy8dr8Jzmk4o8uUkR0LyMj0.roa (raw, json)
Hash identifier: EFf8O91ALZ5Kjye0uLijwsnibY6fc6l5dQPgTY8e94Y=
Subject key identifier: E5:8A:EE:5F:2F:1D:AF:C2:73:9A:4E:28:F2:E5:24:47:42:F2:32:3D
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019EA7538B1918CEFA281251D8E89FB34CFD
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5YruXy8dr8Jzmk4o8uUkR0LyMj0.roa
Signing time: Mon 08 Jun 2026 13:02:10 +0000
ROA not before: Mon 08 Jun 2026 13:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214422
IP address blocks: 2a0d:d940:200a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:53:8b:19:18:ce:fa:28:12:51:d8:e8:9f:b3:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 8 13:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e58aee5f2f1dafc2739a4e28f2e5244742f2323d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:51:5f:36:f7:b6:0e:f3:a8:05:ad:6a:fd:
11:9f:bc:44:c3:bf:c3:13:1e:45:0d:55:19:41:7a:
2c:07:9a:64:3f:41:28:f3:92:dc:d0:da:81:a7:fc:
fd:da:00:fb:37:f1:61:2a:50:20:0a:a5:37:ae:f3:
04:11:54:82:07:1f:bc:1d:a5:e2:28:76:68:4a:5a:
7d:c7:83:17:1e:da:93:11:53:02:7d:77:d5:b7:46:
70:4e:a6:42:4c:fd:95:01:2b:f1:fd:a5:63:e6:2e:
3c:78:4b:91:b9:e4:55:7d:46:dc:5a:8f:7b:22:14:
54:b9:85:a2:76:ff:79:46:35:6f:57:28:58:3a:d6:
e1:0d:91:05:b1:91:e6:12:b8:54:e7:cf:2b:47:28:
c3:e9:d3:24:92:a6:93:75:90:18:19:c6:c6:6c:43:
51:a9:ed:29:68:c7:bc:61:a8:50:ce:56:84:a6:1f:
28:24:75:be:1e:3c:2a:32:9a:86:01:6c:e2:3e:d5:
3e:a8:81:e7:0a:5d:87:56:fc:46:8f:38:b9:5a:39:
87:58:76:a6:0e:12:21:c3:40:5a:9f:81:79:d0:44:
e7:70:ea:4f:f2:60:44:ff:55:ac:c7:59:fd:a0:db:
dc:1d:8c:2f:44:b4:c2:3b:22:83:54:6b:2a:fc:03:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:EE:5F:2F:1D:AF:C2:73:9A:4E:28:F2:E5:24:47:42:F2:32:3D
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5YruXy8dr8Jzmk4o8uUkR0LyMj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:200a::/48
Signature Algorithm: sha256WithRSAEncryption
b0:3e:47:5c:95:46:b0:25:e6:71:cb:7e:66:3b:86:d3:49:ec:
55:ac:fa:dd:b8:74:33:65:f6:d9:e9:ff:e8:eb:0f:b3:8b:b2:
1d:bb:99:6c:e3:6c:92:46:a6:e2:09:f7:0c:2d:09:f5:46:3c:
d6:99:ac:ce:78:35:02:99:31:db:b2:d7:d5:62:8c:b4:4b:f6:
fa:ff:48:2c:f4:6f:71:bb:71:90:dd:ce:d8:f9:0a:33:1b:52:
51:8a:9a:82:55:a8:e4:16:01:2b:c3:d6:97:d2:34:41:37:2b:
87:f0:f4:34:d8:98:5f:3c:59:97:47:2c:37:cc:e3:93:5a:54:
f5:35:8d:e9:37:fd:2d:c8:9a:2e:eb:53:c7:66:fb:46:e7:e0:
da:9a:29:ea:bf:37:13:f6:39:ff:fe:3b:31:ef:6a:e5:76:90:
c3:66:01:9a:dc:9f:0d:0a:8d:18:fb:d4:a7:dc:d3:10:79:49:
42:24:7f:9d:34:5e:d4:21:14:32:96:c8:63:5f:e1:34:a2:d3:
c1:0d:95:7c:e1:6a:bc:b6:ea:6c:09:52:53:e7:11:3c:b1:cb:
2d:fe:12:5d:56:ee:a2:2d:49:e4:f3:a3:14:d2:35:e2:c2:3d:
44:44:e4:cd:b7:8c:19:35:62:0a:c9:76:d3:00:45:d0:3c:89:
97:b8:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:02:57 2026 by rpki-client