Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/R5FetDBo6K4IYeGDvx_LPqRJBrw.roa
File: R5FetDBo6K4IYeGDvx_LPqRJBrw.roa (raw, json)
Hash identifier: B7qTH6qY4bLMmZF5TLX4eqc3FTAqtcGzNySX7i/vi40=
Subject key identifier: 47:91:5E:B4:30:68:E8:AE:08:61:E1:83:BF:1F:CB:3E:A4:49:06:BC
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A19EE49ABCB38FFA6FA545618A3C47BBBF
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/R5FetDBo6K4IYeGDvx_LPqRJBrw.roa
Signing time: Tue 03 Nov 2026 00:52:24 +0000
ROA not before: Tue 03 Nov 2026 00:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:e4:9a:bc:b3:8f:fa:6f:a5:45:61:8a:3c:47:bb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Nov 3 00:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47915eb43068e8ae0861e183bf1fcb3ea44906bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:95:2c:be:b1:83:ea:17:2c:28:c0:80:38:
3f:ef:ae:1a:2d:ab:af:05:16:93:5e:ef:2e:1d:e3:
8c:8e:49:65:9a:46:3b:73:cc:57:ed:3b:87:35:9e:
89:df:8a:a3:91:29:f1:db:d7:c0:c2:c2:84:8f:99:
c9:38:a3:5c:7e:38:ab:b5:50:2b:04:1c:7a:92:78:
d7:99:bc:cf:c2:c5:7a:6e:18:f5:d4:c8:e9:bf:c6:
c1:a7:fe:16:db:a2:f3:24:6e:71:bb:d4:13:03:70:
c9:69:f7:8e:69:5b:5d:f4:52:57:ca:51:6d:25:b0:
ac:c2:2f:32:e9:7b:29:b8:14:10:59:62:d5:15:88:
d7:1d:80:90:f5:dd:11:f0:06:a5:83:06:69:64:e5:
7a:57:46:c1:09:88:ea:cf:be:56:00:c0:34:c9:c6:
d5:07:4b:d5:15:8c:0d:21:ca:41:2d:e8:cd:e3:ad:
e0:dd:0f:9d:e1:8d:93:12:4f:5d:36:35:13:fe:27:
11:90:af:9c:cb:49:ca:53:6c:d1:0e:27:6e:7c:c7:
db:cb:73:10:bc:a7:90:af:fe:2d:96:c7:90:18:f6:
53:64:f5:84:c7:51:54:13:7b:6c:e8:39:2b:5d:fd:
75:83:58:3e:b7:74:8e:c9:3a:37:41:bc:22:1c:66:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:5E:B4:30:68:E8:AE:08:61:E1:83:BF:1F:CB:3E:A4:49:06:BC
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/R5FetDBo6K4IYeGDvx_LPqRJBrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.14.0/24
89.187.18.0/24
Signature Algorithm: sha256WithRSAEncryption
61:91:7c:bc:18:a3:d3:08:9b:e1:62:25:39:34:b6:d4:9b:5d:
ec:d1:05:6d:5d:2e:92:af:e7:07:1c:f9:30:f4:a0:8e:27:a3:
21:29:81:a7:e9:4d:1e:d6:6f:97:6b:a4:68:c9:97:5e:7d:fb:
db:6e:96:6c:6d:b7:f3:85:45:91:ff:a5:c8:99:27:1d:37:0b:
f2:60:8b:bd:d3:3b:35:70:91:fd:5e:62:ad:7a:dd:09:18:8d:
eb:10:02:07:e9:c1:ac:93:b4:f9:1c:fd:36:d1:08:f2:8e:fc:
8d:fb:71:95:24:18:31:fc:f9:68:15:1d:d1:ae:b9:52:88:a5:
cd:df:42:7d:38:aa:23:4c:d0:c1:59:f8:d0:c4:c7:27:ab:f6:
c1:40:e6:a5:46:f2:df:4d:4a:44:ab:07:18:7b:8b:9f:27:90:
88:d7:8b:df:66:89:cd:35:ce:39:04:f0:c7:25:07:4b:03:23:
d1:f4:26:6b:00:34:ac:b2:d9:df:64:90:d2:f0:c0:45:7e:a1:
18:06:f6:56:14:7c:eb:10:9f:2e:fa:f8:35:73:0f:3c:d3:a6:
f7:3d:1c:21:2e:db:24:c6:bb:33:a3:4b:11:3c:63:70:6d:b4:
e0:85:ed:bb:62:89:28:dd:af:8a:a2:09:71:b3:50:03:af:8f:
72:61:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:09 2026 by rpki-client