Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/e5_vLejBPA3EP_yr_mC9Szf-bWM.roa
File: e5_vLejBPA3EP_yr_mC9Szf-bWM.roa (raw, json)
Hash identifier: RYb6H9omfbHfmdu03QeSOGuQd/N/QMFTHjBVUp9L/MQ=
Subject key identifier: 7B:9F:EF:2D:E8:C1:3C:0D:C4:3F:FC:AB:FE:60:BD:4B:37:FE:6D:63
Certificate issuer: /CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Certificate serial: 019D965D27758296477B13C2C71B3071A5AD
Authority key identifier: 13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/e5_vLejBPA3EP_yr_mC9Szf-bWM.roa
Signing time: Thu 16 Apr 2026 12:56:20 +0000
ROA not before: Thu 16 Apr 2026 12:56:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12753
IP address blocks: 192.115.248.0/24 maxlen: 24
192.115.249.0/24 maxlen: 24
192.115.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:5d:27:75:82:96:47:7b:13:c2:c7:1b:30:71:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Validity
Not Before: Apr 16 12:56:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b9fef2de8c13c0dc43ffcabfe60bd4b37fe6d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:1a:fd:08:2e:3c:d1:be:53:f3:55:9a:24:
7f:04:72:90:78:a5:eb:9c:5d:65:c3:7c:ef:11:90:
24:cb:6a:74:82:5a:d8:32:83:21:ed:c3:72:88:82:
2c:d6:ca:af:78:36:54:2e:eb:0c:bc:5e:cc:d0:4e:
72:a0:e9:f6:c9:82:78:60:ff:19:3d:bb:eb:03:5e:
aa:cb:4d:1d:3e:75:d5:99:3d:10:2b:ba:92:fa:83:
92:7a:08:9b:df:38:19:25:d0:e3:05:3e:85:b0:2d:
5f:b0:3d:02:b9:ed:85:6e:d6:4c:c0:cf:68:b4:7d:
50:6d:86:67:af:da:c7:13:ec:0c:24:e3:f1:40:f6:
f8:17:6d:6a:be:e8:e8:ef:63:32:a2:5b:ce:62:5e:
15:13:7c:e3:89:ae:9a:78:f9:bb:ff:c1:18:ac:28:
44:ff:b4:11:58:47:da:b7:76:81:96:79:48:2a:6a:
c6:c9:83:79:02:f1:aa:8f:1c:9f:4b:e7:41:47:d5:
23:a9:58:fc:0a:b7:a2:4d:be:bf:d2:43:57:2f:b7:
11:bd:b8:35:56:c4:42:22:a4:d0:ba:7d:71:3e:92:
5e:ee:6e:67:83:ee:6d:e0:fe:4c:3d:9e:84:70:24:
c9:9e:86:af:ff:16:b2:a5:cd:6f:7d:d8:fb:4a:54:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9F:EF:2D:E8:C1:3C:0D:C4:3F:FC:AB:FE:60:BD:4B:37:FE:6D:63
X509v3 Authority Key Identifier:
keyid:13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/e5_vLejBPA3EP_yr_mC9Szf-bWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.248.0-192.115.250.255
Signature Algorithm: sha256WithRSAEncryption
bb:d6:87:22:20:c8:a7:ff:cd:61:d6:66:06:dc:33:1b:41:7f:
fa:c7:6f:8c:34:83:10:00:3e:db:a2:00:79:d6:08:fc:e3:d6:
cf:21:10:d0:9e:6d:61:1f:68:4f:cb:aa:00:6c:dc:e5:c9:0e:
cf:76:8c:31:51:18:0a:71:86:ce:ba:c9:67:e1:a1:81:9e:36:
11:b7:72:58:e2:fa:59:07:a5:45:cb:11:e4:8e:2d:ba:e1:52:
40:2f:3b:0e:63:69:6c:8d:e0:91:c4:b0:4c:fc:fe:d0:62:ba:
27:a0:fb:e0:df:2e:a9:81:9e:4e:19:ad:11:d9:c4:90:63:c6:
7f:d7:a8:7a:b0:5d:22:59:5a:36:d7:27:7f:79:4e:25:98:68:
d2:05:f2:6c:99:aa:9d:2d:ef:f1:4a:d3:a3:26:b9:6b:55:0a:
07:f3:51:4a:ae:ab:8a:de:82:be:9c:41:b1:ec:38:26:ab:8b:
e7:9f:ef:31:6b:07:1e:ba:88:1e:9d:5c:c2:9a:93:85:23:1f:
20:fa:49:68:1a:ce:3d:bc:32:da:08:c8:d8:54:1c:66:cd:49:
3a:f1:77:7f:7f:dd:de:d2:99:43:c2:da:a8:e8:d1:ca:47:2e:
02:fd:38:85:28:71:af:06:52:be:9c:60:be:e0:5a:2f:c2:a1:
27:90:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:12 2026 by rpki-client