Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa
File: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (raw, json)
Hash identifier: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=
Subject key identifier: 3E:84:48:37:47:55:48:0A:9A:01:62:A7:F4:42:DB:09:43:CD:EC:98
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019C9AF75742E5678B21333FD26B9280F231
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa
Signing time: Thu 26 Feb 2026 17:20:26 +0000
ROA not before: Thu 26 Feb 2026 17:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213488
IP address blocks: 2a11:5dc0:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:f7:57:42:e5:67:8b:21:33:3f:d2:6b:92:80:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Feb 26 17:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e8448374755480a9a0162a7f442db0943cdec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:d0:fc:00:de:4e:54:6a:49:a7:72:4b:2a:
0f:91:37:30:6a:9a:ab:d1:d9:9f:d4:8d:16:02:ce:
e3:f4:71:14:10:19:79:8a:79:bb:99:b1:fd:2d:84:
a1:1e:b9:2a:df:8a:7d:57:90:fa:d2:02:a0:05:2b:
a7:99:cd:0b:a2:fa:8b:76:76:df:dc:88:7b:c6:d7:
31:e5:99:d9:86:cf:ac:b5:bc:37:e9:1c:23:3d:79:
93:01:e7:54:eb:fa:5c:51:f2:13:6e:83:1d:60:1f:
76:55:cb:56:9e:14:74:a7:6e:87:51:6f:34:86:39:
ae:dd:da:b9:2d:52:d1:f2:78:5c:7e:ee:e8:57:cf:
65:31:c3:9c:7a:01:0d:63:35:a5:d5:d3:91:bb:90:
b2:20:d0:ec:58:91:73:38:c5:b2:30:19:53:d3:57:
ac:f1:2b:bc:3b:fa:36:0c:03:95:c8:9c:8b:39:00:
ab:32:4b:1b:7d:77:dd:4f:01:9e:62:2c:b5:b7:9b:
85:b6:d1:e9:99:a3:01:0e:0f:78:96:78:2e:bd:77:
9e:a0:bc:16:63:69:be:d2:a2:63:91:26:79:c0:7d:
7a:4f:b0:1c:73:d5:73:93:d6:f9:1e:4b:17:87:73:
77:f2:07:fa:23:31:f5:0f:9f:bb:ec:e4:b2:af:8c:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:48:37:47:55:48:0A:9A:01:62:A7:F4:42:DB:09:43:CD:EC:98
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5dc0:51::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a5:11:11:c0:71:08:de:a4:a2:56:e9:e0:15:2f:3d:56:81:
82:3b:97:b2:14:f2:7d:52:91:ad:d3:9c:2e:a3:cc:2d:8e:3c:
80:90:f0:bf:e5:3e:e3:3f:91:b9:e3:d9:d4:3b:80:dd:38:83:
35:8b:4c:48:81:d2:10:38:f8:0d:c8:00:6e:74:01:d3:58:00:
62:18:4a:b2:bd:04:6d:cc:70:a8:60:8b:e6:c8:b8:a2:1d:68:
b2:e0:eb:0b:64:f1:ca:e2:b0:c4:af:7c:59:22:1d:1f:c0:30:
67:72:80:aa:59:d2:8b:60:82:03:02:76:8a:be:1a:96:e5:8a:
51:93:33:0f:fc:31:96:4c:da:e3:c7:67:21:10:62:89:47:9d:
2b:62:3c:88:36:40:7d:d9:1a:16:b5:5e:2b:50:71:db:ea:02:
ac:79:63:55:47:2c:fe:9a:2f:6a:05:22:80:26:b0:3e:3f:85:
25:26:83:9e:07:9b:71:05:1d:54:67:99:d5:35:cb:f0:62:c0:
a5:e2:4d:a7:4b:39:fc:af:91:b4:8a:2e:fd:bb:44:94:b4:c4:
5c:33:a1:18:27:20:56:a1:67:21:35:68:53:64:55:fb:23:64:
08:ac:6c:8d:bd:bf:69:eb:82:11:37:2e:dd:8f:3a:12:4c:a6:
14:a8:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:02 2026 by rpki-client