Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/N5n0ytLXV6oUrTqSyTln_9PGiRU.roa
File: N5n0ytLXV6oUrTqSyTln_9PGiRU.roa (raw, json)
Hash identifier: X+Nw+EmTUCTqldwF7msA1+WaeJ9/NHAcZvVwnOkFNEk=
Subject key identifier: 37:99:F4:CA:D2:D7:57:AA:14:AD:3A:92:C9:39:67:FF:D3:C6:89:15
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019D97B64EEA672ABE47B22882E1F37D8AD3
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/N5n0ytLXV6oUrTqSyTln_9PGiRU.roa
Signing time: Thu 16 Apr 2026 19:13:20 +0000
ROA not before: Thu 16 Apr 2026 19:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210501
IP address blocks: 194.69.167.0/24 maxlen: 24
2a0f:5e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:b6:4e:ea:67:2a:be:47:b2:28:82:e1:f3:7d:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Apr 16 19:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3799f4cad2d757aa14ad3a92c93967ffd3c68915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:89:95:d2:52:f1:f5:2e:99:e6:2b:d0:1d:58:
af:4d:b2:90:75:a1:50:4a:2b:63:01:3c:23:8c:65:
ee:38:db:f9:fd:d0:3a:64:36:a8:3c:3d:3f:91:33:
42:11:43:6c:bb:02:4e:44:ca:0e:26:6d:82:64:8f:
bd:7e:8a:9f:29:40:05:88:c1:f2:74:b6:f0:b9:7a:
b6:86:68:a4:dd:1e:d5:4a:a1:75:e7:93:86:33:a6:
c7:d3:f5:fd:2c:5f:9f:43:7a:53:63:54:01:f0:c3:
eb:55:37:70:54:e1:43:8a:15:8f:df:44:3a:4b:0c:
c7:f4:a6:85:1d:43:9f:21:b4:18:06:87:b7:be:d1:
6c:f7:3a:79:e4:4c:e2:9a:02:70:92:36:5a:be:64:
aa:e8:eb:8d:57:b4:d1:03:f9:24:2d:cc:41:ef:15:
1e:a1:26:12:72:8b:39:c4:bb:37:37:b3:3b:f6:4d:
bc:ef:24:1b:38:db:60:21:02:ea:fd:c3:8e:a5:8e:
c6:b8:c9:72:0e:7f:dc:49:0a:8f:7a:3c:fa:db:9c:
e3:bc:70:39:8c:73:3b:96:14:58:fb:a2:e7:fe:78:
b5:42:83:dd:d7:93:c9:30:3f:13:53:51:0e:8f:5c:
8f:1a:67:75:88:1e:b4:17:76:09:87:df:2f:e3:df:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:F4:CA:D2:D7:57:AA:14:AD:3A:92:C9:39:67:FF:D3:C6:89:15
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/N5n0ytLXV6oUrTqSyTln_9PGiRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.167.0/24
IPv6:
2a0f:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
7d:14:58:a6:7f:87:6d:41:c5:75:2c:24:0c:fc:24:b7:3a:24:
b1:ae:55:b8:13:21:5e:94:b2:b1:65:6f:45:ba:bc:82:80:45:
35:76:9c:a4:16:9e:1d:78:6a:8d:ab:e7:9a:64:07:09:2a:38:
28:42:2b:de:64:f0:16:b2:14:4a:63:fc:d3:b3:71:0a:7f:ab:
5c:12:4e:cb:07:d3:69:ff:ca:22:73:29:b7:8e:33:62:0b:7a:
7a:e3:50:13:cd:18:b2:82:b6:aa:fb:e7:9e:90:11:e1:a9:54:
e5:0c:c8:59:b5:a5:b9:f6:47:30:06:60:91:3b:33:38:f0:28:
0a:2e:95:5b:3a:e2:d6:5e:30:4b:1d:66:86:c5:d5:c6:c2:fb:
2b:be:53:b6:50:86:94:d7:45:d4:b9:be:dd:c6:f7:28:75:a6:
34:25:7e:00:15:da:b5:45:58:e7:19:c4:13:bd:76:6d:e8:03:
1e:91:20:f1:73:96:ec:25:b8:03:28:8b:a1:ec:86:bc:c9:81:
1d:e3:43:83:bd:3d:3a:e3:22:bb:e9:6d:1d:44:63:9f:fc:f3:
20:16:22:c7:11:cb:6c:00:82:23:ed:ea:fa:ee:1f:5e:91:3d:
10:56:af:8b:25:4e:ee:e6:09:64:4e:b5:0f:18:0e:aa:d7:af:
74:b5:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:47 2026 by rpki-client