Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/IM5_eIuCChOU0hAdp1zJIv4yOMs.roa
File: IM5_eIuCChOU0hAdp1zJIv4yOMs.roa (raw, json)
Hash identifier: VA5/Mu9B9mqKC3R4eDVMT7aNe6I5GNd86uRr7j7Zj64=
Subject key identifier: 20:CE:7F:78:8B:82:0A:13:94:D2:10:1D:A7:5C:C9:22:FE:32:38:CB
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019D728D0F6CD239D1D7113B7A4ACB169504
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/IM5_eIuCChOU0hAdp1zJIv4yOMs.roa
Signing time: Thu 09 Apr 2026 14:02:20 +0000
ROA not before: Thu 09 Apr 2026 14:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 82.206.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:8d:0f:6c:d2:39:d1:d7:11:3b:7a:4a:cb:16:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Apr 9 14:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ce7f788b820a1394d2101da75cc922fe3238cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:4f:ab:c8:0f:f1:dd:49:40:ad:fc:f9:e5:
4b:ba:72:c6:46:3b:fd:ff:b2:9a:2b:79:07:56:7b:
75:34:be:57:ab:a3:78:70:f6:d7:2e:8d:d9:a0:55:
1b:f2:b4:b8:32:04:b0:66:c8:1b:49:1a:1a:c4:ac:
df:0b:a8:59:0d:ff:cf:75:0b:ad:19:80:cc:f8:ea:
58:a0:b5:0d:7b:ea:64:00:1f:a1:3f:2b:37:6a:29:
a6:da:5f:1f:c6:07:24:16:dd:ff:22:19:6d:2a:c3:
6c:82:a5:0c:cc:73:40:3f:e3:34:4e:d9:7a:62:5a:
5a:04:1f:8a:f8:82:da:7a:61:ce:90:da:4f:da:99:
08:e3:17:53:5e:9f:8b:7d:c5:c0:dd:00:cf:f8:0f:
37:03:6c:a7:99:53:da:a4:ca:42:d4:8d:81:62:3d:
c8:35:52:f9:f0:84:26:c3:14:69:09:72:35:b6:09:
e4:d1:34:d9:89:36:06:20:f8:58:66:85:47:a1:69:
c8:c1:28:82:61:8c:3a:f0:b6:25:28:f8:56:38:14:
bb:33:59:35:7b:c8:a7:38:61:1f:9f:3b:e5:8f:48:
04:91:1d:15:b7:c0:45:c4:e2:70:3d:5a:74:5c:3b:
b2:51:9c:c0:4b:1a:a2:1c:5a:e5:54:f3:81:dd:5b:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:7F:78:8B:82:0A:13:94:D2:10:1D:A7:5C:C9:22:FE:32:38:CB
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/IM5_eIuCChOU0hAdp1zJIv4yOMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:02:03:de:5a:46:83:b6:3f:bb:b2:b1:43:c3:b8:4e:f9:f1:
60:48:03:fa:79:62:c3:c0:cf:86:7c:c9:64:64:d4:39:15:01:
77:fb:76:a8:02:6a:a0:5d:ca:ec:76:f1:37:2e:ec:7d:52:41:
41:bf:ae:52:80:da:ab:08:b2:0d:80:7c:3b:e2:c3:e6:fd:5a:
d5:64:d5:a4:07:24:bf:74:95:9a:c1:7f:2d:23:1e:0f:b9:af:
97:35:c1:19:b7:ab:70:e1:f0:0d:53:f6:a0:b7:d6:4d:76:b1:
cf:26:b5:52:35:d2:d3:67:8b:45:eb:2d:2a:36:e9:2b:03:bf:
a4:3d:f8:0e:5c:97:c5:54:24:3b:8d:d1:e2:2e:0f:d4:d5:fb:
43:f3:5b:8d:8a:e5:1e:75:1e:ca:f9:59:c2:b5:d6:88:24:d4:
6c:2d:96:fd:78:8d:a8:94:aa:df:a5:46:ca:79:9f:71:5e:35:
fe:09:94:d4:c9:3f:6b:59:5f:e8:21:d7:18:6a:33:61:08:05:
5f:47:ed:00:b0:a2:d9:28:ef:40:4f:c6:3e:fb:f1:9f:ea:00:
33:f8:c7:48:38:6f:3c:8f:7b:af:b5:8e:ad:0a:e9:0b:4f:c9:
c1:4d:3f:0c:00:69:c6:76:d2:0f:b4:e4:1d:98:c9:54:09:f0:
81:f3:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:33 2026 by rpki-client