Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa
File: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (raw, json)
Hash identifier: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=
Subject key identifier: E4:08:BF:B0:86:50:24:1F:1A:16:DC:EA:62:F4:AB:F4:1E:C6:B8:E5
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019C90860098F21F1D54F8E851C2DC1F0E9B
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa
Signing time: Tue 24 Feb 2026 16:40:26 +0000
ROA not before: Tue 24 Feb 2026 16:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 212.119.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:86:00:98:f2:1f:1d:54:f8:e8:51:c2:dc:1f:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Feb 24 16:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e408bfb08650241f1a16dcea62f4abf41ec6b8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:55:10:31:0e:7b:8f:11:80:e4:db:d9:98:
d5:4f:51:ef:95:bd:33:77:d9:bb:7a:ce:54:a0:ec:
ad:4a:8b:f4:23:ca:d0:0f:00:c2:de:40:d8:4b:12:
23:a4:37:d1:cc:a3:35:08:8b:58:8c:e9:a0:cd:55:
d4:0c:d2:b7:cc:3c:0a:77:1d:2f:f6:51:7e:47:99:
14:a3:b3:49:ed:db:94:ee:27:55:b5:31:d9:c3:2f:
3d:22:5d:bf:e1:e1:87:c4:1d:29:81:6c:ee:1c:9e:
a7:4b:52:e5:8d:85:cd:b9:0d:84:72:eb:1a:9e:c8:
c4:4d:91:43:50:93:1b:4b:9d:21:f5:ab:40:42:d7:
c9:75:42:a5:d6:e9:60:7e:85:4d:e9:16:3f:f9:af:
82:09:f1:ad:1e:d7:b0:ec:34:74:be:1a:3e:66:14:
09:12:02:cd:71:b0:b1:4c:43:90:4c:f5:2e:e0:04:
66:72:81:f5:46:38:cc:e7:d6:20:f9:6f:ac:31:e0:
0f:79:8d:0f:ca:2c:21:8c:30:d3:48:e6:f8:60:1f:
df:31:1a:59:19:a6:8e:1a:fc:c9:c2:88:e9:5f:6b:
f7:9e:d6:e1:31:57:f4:d0:ad:d2:2d:89:22:62:e4:
24:e7:2d:98:e9:78:67:5c:33:e7:02:74:d2:23:30:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:08:BF:B0:86:50:24:1F:1A:16:DC:EA:62:F4:AB:F4:1E:C6:B8:E5
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.42.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d9:ef:9c:62:26:7c:0d:fa:c2:2f:54:39:c9:a6:6a:d0:4f:
9f:2a:5b:97:fc:f2:b4:d3:1e:2d:9d:69:c7:e5:85:7c:d0:d5:
08:ba:5e:20:23:5c:e8:ab:fd:eb:3a:7f:f7:6c:10:85:cc:4f:
0b:d2:7c:6e:ea:21:8d:32:a9:16:2d:ce:40:ba:81:74:05:ae:
5c:df:2c:de:ed:42:6c:f5:d9:d1:34:bb:3a:9e:2a:7f:dc:5b:
89:92:1d:34:57:fe:d3:bf:b3:05:e3:3a:5e:9e:c1:2e:98:4b:
39:86:19:30:a0:b4:c0:96:6a:a1:c9:8b:60:44:c3:1d:dc:78:
08:65:1d:c1:95:7b:9a:cc:f9:fb:57:29:b3:62:64:21:72:0f:
22:ba:04:50:40:05:07:13:fb:fe:52:77:86:3c:3f:c0:67:e0:
32:fe:77:60:e7:38:0f:98:49:02:45:06:cf:dd:22:1a:ae:9d:
c5:a9:f3:65:20:be:55:82:fd:ed:78:f5:1e:d4:cc:74:ea:c9:
01:38:01:5b:ae:5d:b5:73:7a:72:b1:fb:8b:90:bb:cc:7e:ba:
84:a6:e4:6a:9b:15:56:26:b6:34:be:98:22:d4:b6:05:14:3d:
60:df:05:7a:89:8f:2c:43:52:03:a7:e8:cd:f6:d1:5c:89:fa:
73:8b:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:53 2026 by rpki-client