Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/5supAJphl0r8bbob-Kiwa2s9Q0E.roa
File: 5supAJphl0r8bbob-Kiwa2s9Q0E.roa (raw, json)
Hash identifier: 3BmLyzQOS+6Kk+ZKBpt8B4neQYPPKen9M6XG2H5jhLc=
Subject key identifier: E6:CB:A9:00:9A:61:97:4A:FC:6D:BA:1B:F8:A8:B0:6B:6B:3D:43:41
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 019B79107692CE2B8E77B19627255AD7224E
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/5supAJphl0r8bbob-Kiwa2s9Q0E.roa
Signing time: Thu 01 Jan 2026 10:18:00 +0000
ROA not before: Thu 01 Jan 2026 10:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61415
IP address blocks: 185.7.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:76:92:ce:2b:8e:77:b1:96:27:25:5a:d7:22:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Jan 1 10:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6cba9009a61974afc6dba1bf8a8b06b6b3d4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:f6:26:c7:40:10:17:42:b6:7c:2b:5f:75:
1d:23:b5:4f:3a:69:76:f3:cc:37:89:55:64:1d:c0:
c2:ed:f5:0a:66:64:90:36:8d:99:67:dd:b1:93:92:
d0:af:d1:88:c2:71:2e:31:25:b5:6b:36:9a:18:14:
08:c2:5d:fd:cf:d5:78:27:62:bf:cc:0b:62:9a:26:
2a:f0:41:b2:47:38:91:4f:c0:50:b1:57:c8:c7:f6:
4c:f3:c6:63:15:a4:b8:ff:da:a9:92:f1:e3:9f:7b:
b3:c7:87:2d:f9:3f:1f:fd:7f:ea:49:91:9b:aa:c0:
35:aa:47:83:cd:cf:c5:35:50:f3:93:26:79:10:53:
31:d4:72:20:38:90:4b:6c:2d:bb:93:36:e1:4d:49:
a4:59:b5:3b:51:22:ea:a6:6b:90:e9:be:c8:85:4c:
a2:65:3e:de:8d:ea:c4:ff:bb:05:d6:90:a1:2b:1d:
fa:8f:59:1a:fa:4f:9c:e3:4d:14:fd:d7:bf:82:80:
07:ab:aa:01:60:b4:a8:a4:79:31:c3:db:c4:4c:37:
41:3d:a6:b6:f7:2e:31:d0:d4:37:a1:f0:f2:bf:c6:
84:a2:f8:0d:bb:d3:a9:ff:b2:b1:14:41:bf:e3:32:
8c:d3:73:b8:38:57:d9:6f:87:24:83:6e:b3:88:4d:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CB:A9:00:9A:61:97:4A:FC:6D:BA:1B:F8:A8:B0:6B:6B:3D:43:41
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/5supAJphl0r8bbob-Kiwa2s9Q0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.56.0/22
Signature Algorithm: sha256WithRSAEncryption
74:8f:b1:e0:6d:7f:e2:0e:4d:15:c8:ab:24:af:bf:22:92:12:
bc:71:25:df:21:92:7e:f5:45:ce:4b:6f:4c:dd:88:52:18:21:
b3:fc:45:82:fd:03:ab:9a:41:cc:3a:84:fb:38:a0:e0:30:b7:
f4:96:66:1a:20:e6:9a:64:ad:b8:ba:64:0e:50:35:c4:83:66:
40:c7:8f:27:b3:be:c6:0e:f3:d8:e7:6e:45:9c:15:73:eb:0a:
ae:b2:6d:33:33:ca:f2:f2:c5:7d:b1:1d:75:ff:1c:77:6c:53:
95:7b:38:77:3b:c6:e2:3a:b7:ea:97:82:99:15:03:45:46:45:
2c:10:13:fa:10:50:d7:48:90:9b:1a:73:5a:07:5b:76:95:34:
1e:35:6b:9a:1e:e1:a5:56:24:2d:4c:5b:6f:c3:f2:de:ed:fe:
43:5f:af:b8:5e:fb:18:50:ff:94:53:ad:c3:78:4b:61:0e:68:
9d:c5:67:c6:b1:1e:f7:dd:c9:c5:2f:a6:8f:f8:9a:b8:73:6d:
6c:4e:9f:12:2f:64:7b:5b:0e:5e:bc:1c:62:bc:b8:92:83:1c:
61:42:0d:7c:fa:83:03:5b:06:db:ec:7e:93:c4:4e:38:8b:5d:
32:b8:33:7c:de:f6:88:23:b7:da:f9:bb:af:f7:26:c5:2d:eb:
30:cc:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:55 2026 by rpki-client