Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/5s08qvtxu5kbTXtLwFi7v9aGHaY.roa
File: 5s08qvtxu5kbTXtLwFi7v9aGHaY.roa (raw, json)
Hash identifier: BJGago2uFSQjoC1tJOqQgCqqprBXKW62J2ZndZct5iU=
Subject key identifier: E6:CD:3C:AA:FB:71:BB:99:1B:4D:7B:4B:C0:58:BB:BF:D6:86:1D:A6
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019EB186A42C23145DB2CA039645030CF39E
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/5s08qvtxu5kbTXtLwFi7v9aGHaY.roa
Signing time: Wed 10 Jun 2026 12:34:11 +0000
ROA not before: Wed 10 Jun 2026 12:34:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50396
IP address blocks: 77.91.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:86:a4:2c:23:14:5d:b2:ca:03:96:45:03:0c:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jun 10 12:34:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6cd3caafb71bb991b4d7b4bc058bbbfd6861da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:df:69:a5:07:50:df:77:70:6e:c8:0a:3e:
13:99:7b:fd:70:88:55:e5:cc:69:77:c7:47:e0:d1:
0f:2e:1b:48:f5:06:9c:ef:53:8d:07:f1:dd:5a:48:
ee:47:05:6b:53:9a:f5:32:ba:c8:e8:45:54:6d:bf:
1b:c5:9c:6c:65:33:fe:45:e3:df:30:be:90:e3:69:
e6:1a:e5:e5:ce:2b:26:4a:57:17:35:22:3c:2c:5b:
59:ed:b2:cf:60:14:66:74:10:50:6b:8e:04:a1:50:
9d:49:5a:ba:49:fc:61:e9:d7:fa:08:0a:eb:42:84:
7e:69:25:64:8b:36:7f:57:b2:d7:d1:db:ab:14:a7:
58:a4:ee:c9:9d:13:d2:ec:ad:1c:f2:92:39:46:00:
47:77:45:01:67:c7:56:6c:fc:78:06:43:35:97:74:
88:f8:66:df:e2:8b:d6:86:c8:01:6e:12:8a:70:21:
f2:9b:9a:4e:91:65:83:31:fa:fb:9e:b8:a5:b7:71:
1b:57:7e:eb:5e:c8:f5:dc:98:b1:3d:7e:8c:23:de:
cc:3d:4a:64:12:b3:36:26:3f:3b:f0:6a:29:0c:b8:
d5:53:a4:1e:5f:39:c3:d1:8e:0f:92:37:85:d4:59:
be:60:08:91:ce:96:76:5a:97:8f:59:2d:54:a6:93:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:3C:AA:FB:71:BB:99:1B:4D:7B:4B:C0:58:BB:BF:D6:86:1D:A6
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/5s08qvtxu5kbTXtLwFi7v9aGHaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.64.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7d:e2:74:24:ee:a5:72:e6:da:5f:5b:1e:9a:6a:7e:7d:36:
ed:74:2a:d5:ee:67:9e:00:f9:1c:8e:39:10:49:dd:a9:81:ee:
a2:74:85:e0:60:9b:1a:6e:bf:dc:84:86:31:97:7d:6a:48:64:
52:f4:2a:91:8e:c2:6d:14:f0:cd:ac:12:a2:61:65:21:13:04:
8c:68:ec:03:5d:16:c4:6a:e2:06:92:96:d4:ad:85:83:7f:a0:
f9:76:2f:bc:4a:27:c9:7c:9a:98:a5:8a:3d:ea:48:c6:5f:bc:
a8:99:d1:93:b0:12:a3:96:a6:69:38:77:57:61:1c:5d:3b:7b:
bc:e4:ab:ed:55:da:1f:c5:40:2d:50:cd:db:8a:c5:40:e7:46:
6d:0c:a0:4b:6a:b8:48:39:0f:09:11:8b:8b:8f:45:67:b1:1a:
ca:55:94:46:a5:5f:27:76:d0:17:d3:5f:87:f4:63:2c:99:c1:
65:a2:99:1b:68:b1:9a:84:8c:1c:aa:6f:49:c2:eb:b8:56:67:
a1:1e:58:b8:4e:5d:19:f6:fa:91:5c:55:88:48:77:70:e5:89:
e1:1c:ce:82:d2:62:cd:26:bd:52:f5:0a:35:62:cc:14:ad:8b:
cb:3c:65:f8:93:77:c6:c9:42:a5:07:96:34:a8:78:1f:94:74:
ac:4f:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:55 2026 by rpki-client