Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/E1KzvYap7KA5pj9_oM0IyiN3VXA.roa
File: E1KzvYap7KA5pj9_oM0IyiN3VXA.roa (raw, json)
Hash identifier: L60nuBjUcgNIuTd+oDSqLhfl3lgG5qAqq/yEguNah70=
Subject key identifier: 13:52:B3:BD:86:A9:EC:A0:39:A6:3F:7F:A0:CD:08:CA:23:77:55:70
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0C989D15915B61B83F80389826E2EFF37
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/E1KzvYap7KA5pj9_oM0IyiN3VXA.roa
Signing time: Tue 22 Sep 2026 14:34:07 +0000
ROA not before: Tue 22 Sep 2026 14:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 5.181.20.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
195.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:89:d1:59:15:b6:1b:83:f8:03:89:82:6e:2e:ff:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 22 14:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1352b3bd86a9eca039a63f7fa0cd08ca23775570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:d3:2f:29:38:3c:f0:ba:74:5a:b0:6a:60:
75:60:e9:bd:07:c4:5b:a7:dd:f7:62:ae:00:db:ce:
d7:8a:20:75:52:2c:7b:1c:37:5e:ef:3f:e3:bb:56:
f9:1a:a7:52:90:64:01:39:de:a0:b6:83:3a:62:34:
8b:f2:96:a7:8d:99:d2:d2:ff:b8:ef:7a:ec:4f:0a:
57:17:57:2b:22:a9:78:eb:12:91:29:a5:55:32:39:
ac:21:fc:7e:4a:aa:50:4d:dc:18:00:45:bd:49:e1:
5a:06:02:a8:60:0b:70:12:66:d4:15:70:0c:c0:ef:
2f:34:65:59:51:82:80:a2:ec:90:81:14:01:ff:a7:
23:03:ca:1d:21:cf:74:e7:b0:a2:35:fd:5c:ae:05:
46:61:d9:d1:54:21:85:81:bb:70:d4:ed:04:c5:73:
98:50:4f:6c:16:a8:24:78:6b:a0:21:f4:c2:d9:19:
f8:2e:4b:09:df:3b:95:80:61:61:ad:c0:38:40:1a:
f4:87:a8:05:85:72:99:1d:01:a7:0c:c4:9e:87:24:
29:2e:95:93:75:24:c1:ef:d1:42:ae:af:a6:8b:6f:
9a:cd:2d:16:21:e1:b2:b9:97:c8:d6:53:14:58:e3:
67:26:58:b4:b7:ff:66:b1:c4:50:b2:37:78:79:13:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:B3:BD:86:A9:EC:A0:39:A6:3F:7F:A0:CD:08:CA:23:77:55:70
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/E1KzvYap7KA5pj9_oM0IyiN3VXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/24
185.74.222.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3f:a4:47:75:2e:1b:58:3e:2d:75:6c:29:77:7e:25:92:73:
c0:b7:ee:f1:3d:b0:2c:85:c5:db:7f:9f:4e:0c:91:41:f7:c9:
ff:c4:57:ac:2f:f9:78:32:39:1a:ff:9b:88:03:0f:52:aa:b4:
c3:63:1f:c6:3b:19:67:9b:59:42:a9:66:29:8e:5f:ef:40:70:
79:b7:7c:c5:a2:1e:98:89:e6:0f:5a:a7:87:f7:69:73:22:bd:
41:5c:d3:cb:b9:dc:cb:f5:de:14:9e:30:5e:95:cf:66:30:02:
11:d3:b2:39:f1:7c:8c:a8:28:ad:10:49:57:70:8c:3b:56:32:
bf:c7:ac:c6:5f:90:de:32:5e:7f:c9:2c:6d:16:06:7c:e9:20:
ea:cf:3c:46:d0:63:d6:64:ae:7d:6a:fe:1c:6e:e5:8a:ac:de:
13:54:ea:af:a0:7c:af:12:4d:e7:66:63:95:3e:eb:1a:7d:8f:
ee:a3:89:21:de:c1:71:5f:3b:f8:81:c4:80:d2:bc:b0:82:ea:
48:fc:c2:1f:ac:87:69:18:2f:a7:67:c0:f2:a0:18:34:3e:d3:
c4:9d:05:e1:65:f9:4c:ca:7d:40:db:f4:f6:ee:72:ef:c3:e5:
13:b3:34:18:5c:17:0e:74:f8:2b:46:d0:8a:1c:e8:04:d2:09:
38:91:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:08 2026 by rpki-client