Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/5bMMnYCiOuMr6CInKxk8XanOrXI.roa
File: 5bMMnYCiOuMr6CInKxk8XanOrXI.roa (raw, json)
Hash identifier: rE5NhVQccppUaz2fcs8r5lFIY4gPBHIjf5wnNcdQD60=
Subject key identifier: E5:B3:0C:9D:80:A2:3A:E3:2B:E8:22:27:2B:19:3C:5D:A9:CE:AD:72
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 019C8B35873B5ACBE87A10EA7C4FC1CA4AD6
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/5bMMnYCiOuMr6CInKxk8XanOrXI.roa
Signing time: Mon 23 Feb 2026 15:54:26 +0000
ROA not before: Mon 23 Feb 2026 15:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 46.17.24.0/21 maxlen: 21
46.17.24.0/24 maxlen: 24
46.17.25.0/24 maxlen: 24
46.17.26.0/24 maxlen: 24
46.17.27.0/24 maxlen: 24
194.13.133.0/24 maxlen: 24
194.104.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:35:87:3b:5a:cb:e8:7a:10:ea:7c:4f:c1:ca:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Feb 23 15:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b30c9d80a23ae32be822272b193c5da9cead72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:f4:65:01:2a:77:d6:06:c3:11:39:f2:91:
78:88:93:e6:45:b8:de:2d:94:ef:c0:cb:28:7d:99:
e0:a3:17:96:70:74:a5:70:6f:60:f7:ae:4f:ac:ac:
a3:ef:dd:67:9b:c4:99:43:52:c9:69:00:f8:f9:27:
5a:49:9c:cf:70:59:9d:13:9f:a5:1c:16:38:d7:87:
ee:e2:b5:65:fa:b5:3d:dd:1f:b0:9f:41:9e:82:63:
f6:ac:ea:d9:4b:2a:d2:31:3d:e6:b5:0f:f2:55:9a:
9a:af:aa:bc:04:75:92:97:0a:94:5a:19:7c:8d:38:
5a:98:c2:7c:a7:b4:bd:ad:aa:60:c7:e2:37:40:7a:
a5:43:28:69:db:7c:9a:76:af:f6:f4:d3:24:44:0d:
f6:6b:38:f1:da:b7:54:1f:bd:7a:7f:2f:fe:65:bf:
aa:73:21:8f:f4:65:35:65:5c:b8:fa:d5:49:5a:d6:
d8:54:cd:d8:5d:18:a0:45:12:82:79:58:1b:1c:8d:
45:8c:da:ab:87:d4:e0:02:d5:6e:63:fb:b4:a9:74:
7c:1b:8f:ae:92:77:be:b6:80:50:37:97:8e:ea:e3:
22:f0:9a:28:6e:62:20:d7:af:93:3b:3c:1c:67:29:
a3:2d:84:c7:d8:77:2b:41:c1:a3:d8:f2:d8:ec:2f:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:0C:9D:80:A2:3A:E3:2B:E8:22:27:2B:19:3C:5D:A9:CE:AD:72
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/5bMMnYCiOuMr6CInKxk8XanOrXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.24.0/21
194.13.133.0/24
194.104.84.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ec:f8:48:d3:9c:98:27:dc:26:94:4f:1d:7c:f4:c6:6d:7c:
e4:fc:83:85:99:b7:09:4a:ee:ec:24:17:b7:84:78:42:ae:90:
c3:7c:7c:f4:0a:99:a5:3d:9e:65:1f:e5:2c:03:a7:d2:fc:19:
68:f8:f8:03:9b:a1:01:fa:71:05:13:c7:2c:fb:3d:c8:13:16:
1f:ae:9a:ba:a3:33:8c:02:13:16:28:63:26:44:99:9e:e2:63:
5a:e1:af:26:ea:9b:aa:4e:44:b5:c7:f2:cf:8e:93:2f:86:c9:
0d:b8:dd:4f:14:6e:50:c3:3f:34:16:17:25:09:fb:bd:dc:e9:
a8:3a:c7:6c:cf:78:de:21:ce:ff:ef:c4:f3:5a:5e:01:17:4f:
2b:23:fd:22:31:60:b1:09:53:72:f6:4d:0b:20:78:62:97:6d:
db:2c:ac:f5:12:c9:9c:6c:06:5e:eb:1b:6b:f7:92:8f:51:1b:
1a:3d:3d:7d:27:cc:ed:2e:3f:68:47:bb:b0:6d:2a:6d:87:dc:
ee:a1:94:62:fa:0f:76:4b:7a:9d:bb:6a:06:c6:e2:5c:a0:c8:
9c:94:66:49:c7:0f:f6:33:e1:db:d4:54:b0:9f:72:65:c3:f4:
70:17:02:a9:f3:0c:26:5d:4a:58:1d:7d:09:1f:98:ae:67:e6:
f0:13:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:01 2026 by rpki-client