Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/5mT67kFjlP1wkk9g_jI3qMhMAos.roa
File: 5mT67kFjlP1wkk9g_jI3qMhMAos.roa (raw, json)
Hash identifier: TtmKjHns8FuXUxAAkflnuu+59X1NLHR2HU6aq/7SgEY=
Subject key identifier: E6:64:FA:EE:41:63:94:FD:70:92:4F:60:FE:32:37:A8:C8:4C:02:8B
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019E455EBB22F0A9CB61C632BD6DC1744658
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/5mT67kFjlP1wkk9g_jI3qMhMAos.roa
Signing time: Wed 20 May 2026 12:31:36 +0000
ROA not before: Wed 20 May 2026 12:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199531
IP address blocks: 2a0d:9841::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:5e:bb:22:f0:a9:cb:61:c6:32:bd:6d:c1:74:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: May 20 12:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e664faee416394fd70924f60fe3237a8c84c028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:c4:a4:53:a7:5b:9e:17:c9:72:85:80:92:
35:44:4a:84:0e:09:39:21:9a:a9:f5:ad:61:e3:10:
0b:44:a3:13:e7:89:62:a0:c2:43:ad:94:6d:0d:10:
45:cc:c2:62:0e:39:42:f5:16:69:c3:f8:4d:ad:78:
8d:d0:6e:57:e5:c0:46:5c:52:2b:07:0e:d9:c3:f9:
66:f9:94:16:0c:c3:13:62:bf:38:96:6f:de:33:06:
f4:da:cc:a1:e0:bb:e0:3a:89:02:4d:11:87:f0:e5:
76:63:4b:2c:03:41:3e:ba:e0:2c:85:5c:9d:c0:a2:
93:d8:76:94:48:48:64:29:55:46:52:6b:c6:43:df:
87:1d:59:ca:26:10:c5:73:c4:49:48:e6:c1:28:37:
9d:9b:1e:f4:a4:8b:12:1c:4a:c0:ce:6f:1c:14:f1:
67:ca:45:d7:4e:e6:f6:69:94:90:89:5e:18:27:c9:
67:52:95:69:00:84:a9:ad:7b:34:d3:e2:50:ba:35:
e9:11:c4:f8:a0:e3:88:d6:18:94:19:52:f9:ae:d9:
07:93:cf:b7:59:fc:3f:bf:07:73:bf:71:6f:2f:62:
de:c9:b3:7b:11:5b:1e:c9:31:d6:4e:ea:f6:a7:e6:
6e:fc:db:b3:91:55:81:43:ef:28:7d:90:69:ef:7c:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:64:FA:EE:41:63:94:FD:70:92:4F:60:FE:32:37:A8:C8:4C:02:8B
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/5mT67kFjlP1wkk9g_jI3qMhMAos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9841::/48
Signature Algorithm: sha256WithRSAEncryption
64:6b:38:e8:8a:06:a6:b7:e8:c4:e0:76:dc:9a:15:e7:9b:36:
05:04:c4:40:ca:6f:b9:96:d3:08:91:5d:65:c8:87:0f:73:65:
f2:9d:56:d9:42:9a:da:71:ac:15:73:b3:a4:8f:6a:eb:ce:e9:
66:89:d7:d7:ff:dd:20:df:75:36:62:75:81:d8:b9:e9:ca:b8:
f9:ed:ab:2b:b6:c5:a7:36:05:d2:78:c6:69:b0:0d:79:e3:a3:
23:29:3a:fa:06:f8:bb:30:2a:be:7e:36:3a:9d:cb:3c:2b:59:
8a:c0:c1:8d:32:23:4e:cc:12:88:f9:a3:26:3a:9f:30:15:37:
df:81:89:39:a4:75:7c:a1:83:89:65:90:f8:c7:ae:16:04:ec:
36:54:eb:4c:f4:e4:c8:48:51:b9:b0:fc:96:1e:20:1a:74:8a:
97:0c:ff:0e:2e:30:06:27:cb:87:8d:78:4e:c9:46:3b:8f:fd:
91:45:22:4f:be:96:55:42:96:d9:24:ae:18:a5:bf:65:75:b0:
39:4c:1d:1e:23:b2:10:36:db:c4:80:7b:b8:68:14:30:7c:76:
fb:7a:fd:b9:c8:f1:9c:8a:e1:c8:a9:fa:a7:d6:3d:94:92:6f:
6a:d3:ae:c2:3e:88:21:cf:de:a6:46:44:95:1d:e1:e9:05:90:
63:09:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:34 2026 by rpki-client