Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa
File: 5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa (raw, json)
Hash identifier: VjN+Ml3RUlvEn8Cd/Fyc6zoAe8Gd9xzPezlsNJZIkRQ=
Subject key identifier: E6:95:FC:90:98:89:08:F5:66:33:59:71:46:C9:7F:79:F2:99:27:A1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0B45FB8F2A3BBEE5BEEDAC50392691A99
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa
Signing time: Fri 18 Sep 2026 11:56:07 +0000
ROA not before: Fri 18 Sep 2026 11:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202973
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:5f:b8:f2:a3:bb:ee:5b:ee:da:c5:03:92:69:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 18 11:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e695fc90988908f56633597146c97f79f29927a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:ed:b6:d9:d9:63:9d:bc:63:4a:52:84:17:
b1:6b:b1:ee:c4:da:b1:e9:08:64:40:38:a0:95:d2:
a6:d7:82:54:0d:1f:d5:0d:2b:32:b2:36:d1:b4:b4:
dd:04:2b:4c:90:8a:62:eb:13:74:17:ee:58:64:c9:
de:2a:e4:d3:7b:bb:41:64:77:60:30:e3:e3:27:01:
51:07:b2:5f:9a:dd:1e:cd:8a:ab:b8:a3:fa:ac:78:
b4:08:06:d0:cb:8e:3d:7a:e5:95:a6:6c:4c:ef:12:
9d:26:35:fa:9f:35:eb:44:43:a9:e3:08:7a:93:4f:
80:f8:bb:bf:69:60:84:a0:ff:16:ee:9d:ca:3d:4a:
24:ba:c6:d3:05:8f:77:46:0f:48:c5:56:ec:54:75:
20:c2:ef:9d:28:2c:60:ec:e1:f6:12:a9:a1:26:e4:
22:9c:e6:ab:eb:12:4d:a9:b5:bf:ac:73:e1:3e:75:
dd:a4:01:10:c5:94:5b:d6:61:c4:65:f1:ac:69:12:
75:67:81:06:06:b6:b2:ff:94:e3:1e:c8:13:95:21:
1d:d8:1b:a2:e8:a3:ea:e9:8b:84:43:8a:92:3b:14:
d8:2b:f0:88:47:51:ba:37:ba:aa:ff:c2:fa:ab:eb:
16:39:94:6a:21:63:ce:9f:8d:f5:4a:86:34:cf:2b:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:95:FC:90:98:89:08:F5:66:33:59:71:46:C9:7F:79:F2:99:27:A1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:00:cb:a5:f4:ca:a9:6a:72:82:89:f4:25:24:37:40:fe:ec:
c9:83:a2:b4:05:0d:6a:c6:6b:ca:a0:a7:e8:9e:eb:3e:c8:b4:
a9:fe:e1:62:5d:c3:63:49:ca:bf:5a:b8:ed:a1:62:9c:67:90:
e0:1e:39:a6:ec:c9:6d:25:fe:1f:74:33:d0:32:07:05:c3:56:
2a:58:e3:7a:be:3a:0b:1d:ca:37:3d:0c:74:31:12:eb:d1:99:
a9:55:b3:8e:5b:3b:98:15:d3:20:72:46:e5:10:54:09:27:dc:
3a:2f:65:85:af:90:5d:ce:de:eb:2d:e9:04:cf:77:6d:b3:12:
91:a9:10:e1:4d:77:69:a4:6d:db:95:60:81:12:2e:73:00:2e:
d4:ae:54:ec:72:4e:c5:1f:81:2b:ac:2b:58:1d:d9:d1:db:fe:
a9:31:c2:9c:42:41:2c:fe:dc:d7:77:09:6e:c4:cb:64:00:33:
a6:47:b4:d3:95:10:d9:8f:c4:04:86:2a:cd:c7:97:d6:fc:16:
fe:30:65:9c:e8:3e:71:f8:07:d2:9f:74:28:fd:84:a9:0b:9d:
59:76:f6:50:65:42:6a:7c:6d:f6:5a:20:7d:bb:b8:7b:68:16:
8a:76:c3:89:4a:11:54:ba:33:69:05:fa:e9:c9:2a:f1:5d:a4:
7c:f1:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:42 2026 by rpki-client