Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/5Astj5lCiJQgqmhiqNTawYi-5Ek.roa
File: 5Astj5lCiJQgqmhiqNTawYi-5Ek.roa (raw, json)
Hash identifier: 9fhoBMdjLKMECTINatwLrASqD1iYNp+obxt3K9TlcMQ=
Subject key identifier: E4:0B:2D:8F:99:42:88:94:20:AA:68:62:A8:D4:DA:C1:88:BE:E4:49
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 019C94DB9F4778A78A93BE927BDC729C25ED
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/5Astj5lCiJQgqmhiqNTawYi-5Ek.roa
Signing time: Wed 25 Feb 2026 12:52:26 +0000
ROA not before: Wed 25 Feb 2026 12:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 212.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:db:9f:47:78:a7:8a:93:be:92:7b:dc:72:9c:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Feb 25 12:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e40b2d8f9942889420aa6862a8d4dac188bee449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:f0:ff:51:95:d7:73:cd:a8:98:29:8e:26:
f5:73:30:39:50:74:4e:8b:ca:38:de:e1:0a:c2:35:
91:64:b2:52:1a:85:cc:6d:f1:f2:31:4f:06:2f:99:
a7:2d:5f:1a:fc:7a:af:b7:89:45:05:81:60:10:35:
ff:90:8a:f0:3d:9c:e6:cd:01:3b:86:96:0f:8a:08:
d8:fc:e6:1e:de:ee:7d:9c:85:2a:8d:32:9e:d1:c5:
eb:76:f5:25:b4:f2:a5:eb:7f:c3:c6:1c:56:6d:d5:
91:fa:2f:79:16:11:31:9d:77:0d:df:6b:5d:22:19:
dc:87:e9:9a:50:15:af:70:af:11:64:01:54:2e:7b:
d6:7f:73:59:29:e9:fd:d7:f0:1a:2d:ac:43:30:7f:
cd:32:49:78:c4:d8:a2:c7:49:4e:3b:ee:a8:b4:69:
5f:b9:1a:6d:5a:9c:3e:e7:b0:75:25:b3:47:fc:c5:
72:7c:7b:25:f0:1f:64:a8:4c:23:1e:f1:cf:a1:da:
90:6c:e2:be:1a:66:2c:24:ac:71:ef:c9:5a:58:1b:
39:01:9e:5b:85:a5:68:f6:59:e1:b2:33:b3:05:af:
ee:34:61:83:19:21:ae:c3:40:95:68:5f:4e:3a:fa:
e4:67:6e:8a:c3:e4:45:6d:ed:28:5b:2e:56:d1:78:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:2D:8F:99:42:88:94:20:AA:68:62:A8:D4:DA:C1:88:BE:E4:49
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/5Astj5lCiJQgqmhiqNTawYi-5Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:71:d5:37:c9:45:b7:84:9d:dc:33:0e:e5:8b:51:cf:09:d7:
63:e2:4b:71:21:9e:10:e8:81:e2:93:1d:48:53:73:19:d4:19:
cb:10:bd:15:cb:f1:4b:c2:99:2b:41:50:17:2a:52:22:5b:15:
1e:88:21:03:cf:a1:44:29:45:88:88:49:81:87:18:fa:40:28:
0c:9e:39:b5:c1:22:bf:7f:73:ce:da:60:54:df:26:20:3a:2c:
13:bd:55:54:e7:0c:c0:d9:74:75:d2:be:0c:26:d1:5e:25:90:
df:d8:56:f6:82:fa:c2:c5:77:07:91:46:19:7a:be:86:20:64:
26:57:95:20:80:68:63:f1:86:c4:24:f1:87:b3:aa:b3:64:fa:
9f:19:e8:92:cb:3f:f0:e1:72:ca:dc:fa:da:21:27:a0:eb:96:
8d:24:ae:a5:b7:a9:c7:a8:60:3f:64:b4:a3:d0:df:91:59:49:
e9:5f:08:bb:e9:55:9f:c9:ab:d1:e8:3d:fa:5e:bf:8e:a3:c1:
87:59:13:d1:77:eb:5c:e7:ee:d1:f9:95:24:0b:b0:ec:df:99:
d3:1e:df:a1:34:f2:35:0a:b7:2a:99:01:e8:3a:bc:b4:18:1b:
96:4f:58:2c:0e:f6:de:ce:49:95:2f:92:4a:5d:8b:25:56:57:
09:ba:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:24 2026 by rpki-client