Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5Hp-Af91LpymwbhJb0cWbuXVO7U.roa
File: 5Hp-Af91LpymwbhJb0cWbuXVO7U.roa (raw, json)
Hash identifier: JYaSkf5bVUN/tj0l7AGeOkr8iTxMW1gAYbx3yk8Qzw8=
Subject key identifier: E4:7A:7E:01:FF:75:2E:9C:A6:C1:B8:49:6F:47:16:6E:E5:D5:3B:B5
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019C5840E2451EB96336B58D10AFF825AE1C
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5Hp-Af91LpymwbhJb0cWbuXVO7U.roa
Signing time: Fri 13 Feb 2026 18:26:13 +0000
ROA not before: Fri 13 Feb 2026 18:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35608
IP address blocks: 91.192.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:58:40:e2:45:1e:b9:63:36:b5:8d:10:af:f8:25:ae:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Feb 13 18:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e47a7e01ff752e9ca6c1b8496f47166ee5d53bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:8e:88:79:cf:2d:c2:2c:86:49:8f:7e:22:
54:3e:33:c6:2f:c9:e1:9b:a3:02:b0:cb:b8:0c:1f:
e1:73:bf:1a:27:05:1b:52:a3:74:a7:37:0c:a4:a1:
1f:cf:3e:e5:19:78:48:1a:a9:95:32:c8:08:6f:54:
c9:a9:48:51:cf:57:67:21:96:96:f2:8f:be:2c:be:
64:28:5f:d4:6d:dd:02:fc:d9:a4:0c:da:1b:b8:49:
3f:69:3a:7e:66:10:ed:6d:db:21:61:98:21:e9:a3:
35:a9:0e:53:6b:70:56:d9:f8:30:fe:69:c4:70:1e:
c4:35:dc:a6:3f:28:51:8c:89:51:00:ed:9e:28:a4:
c0:df:ff:ac:8d:84:de:f1:ad:95:47:a8:e5:fa:0f:
16:b9:3a:0a:90:6b:17:2b:1e:e9:4d:d5:4b:f2:be:
2c:34:3b:13:63:29:e9:5e:76:7b:0f:b6:8b:7b:f0:
f3:7d:9a:fc:34:b4:80:5e:aa:ea:8a:42:3c:c4:4c:
c6:85:46:7d:05:16:09:71:76:3c:55:34:0a:60:cd:
93:3b:b2:d2:1d:f4:73:f8:20:0e:8b:6c:61:c8:ef:
84:a6:a6:2f:14:78:65:62:f1:3f:06:fa:49:5a:38:
a4:6e:87:ce:3a:82:bc:6f:8f:dd:8b:8d:16:c9:e5:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:7E:01:FF:75:2E:9C:A6:C1:B8:49:6F:47:16:6E:E5:D5:3B:B5
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5Hp-Af91LpymwbhJb0cWbuXVO7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.95.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c9:ff:65:9a:a1:b6:96:89:e1:32:c5:46:19:6c:e7:a4:24:
51:dc:f8:7a:dc:7a:04:5d:1c:97:7a:e8:20:e8:02:9b:ab:a2:
50:b4:3d:2a:15:fa:b8:23:47:db:43:41:25:52:c4:5f:b0:fa:
c9:eb:78:cd:39:85:75:1e:d0:cc:a4:56:94:23:9f:48:2f:81:
0d:04:fa:b5:2e:e6:89:0f:98:66:d3:ac:a7:ca:a0:13:2a:56:
62:d2:63:56:fb:4c:5b:b5:f3:76:c9:3e:44:2c:0e:f6:26:56:
ce:12:72:0a:8a:53:d5:93:13:46:72:e7:64:5b:92:b8:a0:c5:
0d:2d:21:c4:65:ec:fb:36:30:d5:43:d9:94:bd:d3:31:e2:51:
d4:65:94:16:f3:e6:83:47:d7:fd:f2:1a:78:83:36:3d:e9:a0:
22:e4:8e:bc:aa:a6:82:bc:55:de:3f:7e:19:84:aa:1a:cb:3d:
48:fd:4a:5d:6d:9d:75:c3:65:05:3e:a4:27:d9:06:60:4a:90:
2d:d4:4c:19:42:72:0b:dd:ba:37:40:ee:53:80:da:7f:65:9d:
2d:0f:0c:6b:9c:54:4f:a9:7b:79:9b:d4:a5:cd:52:fb:f2:18:
12:c2:b5:e2:bd:0d:ce:84:a0:1c:95:58:ad:be:54:90:09:16:
99:47:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:38 2026 by rpki-client