Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/x5EHi2AetEu21DwEEnpUqLJ7LVU.roa
File: x5EHi2AetEu21DwEEnpUqLJ7LVU.roa (raw, json)
Hash identifier: iPUNP3GlPxIZYV2cT2Q9aA4fJ68X6dkXg9p6Upa/NbM=
Subject key identifier: C7:91:07:8B:60:1E:B4:4B:B6:D4:3C:04:12:7A:54:A8:B2:7B:2D:55
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C44486B2822F53DAF042CEE731574DDC
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/x5EHi2AetEu21DwEEnpUqLJ7LVU.roa
Signing time: Mon 21 Sep 2026 14:00:20 +0000
ROA not before: Mon 21 Sep 2026 14:00:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52223
IP address blocks: 91.245.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:86:b2:82:2f:53:da:f0:42:ce:e7:31:57:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:00:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c791078b601eb44bb6d43c04127a54a8b27b2d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:07:cc:04:90:15:b7:6e:88:d6:7e:26:b0:
4b:ad:83:88:5d:96:84:ef:1b:b4:0f:7c:49:e8:df:
44:48:4c:ca:2b:88:0b:12:0f:1d:25:1c:12:52:a4:
26:1c:83:31:f8:3c:9d:c2:ae:13:66:3c:b2:26:13:
8b:d7:ed:7c:b8:40:1c:31:ea:ae:07:a2:a6:5f:fe:
e2:7f:67:d0:94:e0:59:85:d8:ed:61:8a:56:4d:4c:
25:6e:17:f4:dc:bc:01:2f:dd:42:d6:c6:69:99:da:
ec:a3:07:9c:e4:30:37:33:20:55:91:fe:a7:38:8b:
2e:34:b6:37:0a:83:de:42:6d:37:8e:11:23:15:f9:
a0:cb:c6:fc:51:76:eb:21:04:0c:40:04:5f:61:eb:
36:73:8f:87:17:06:59:04:78:db:bc:2b:a5:25:3b:
e4:be:b4:f7:c4:92:0f:f2:fe:78:9f:be:84:56:48:
68:ab:b3:92:b6:c8:12:aa:be:0d:d0:40:6f:68:a7:
16:8a:fd:49:00:8f:74:80:02:1c:89:b4:50:2a:07:
d8:ea:73:b1:22:50:08:2b:46:9b:cf:cc:95:66:0b:
2a:0e:ea:7f:dd:7e:3d:09:07:7b:50:06:17:53:de:
2d:d3:90:64:7f:69:b1:b6:be:a4:2f:25:af:6f:3c:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:07:8B:60:1E:B4:4B:B6:D4:3C:04:12:7A:54:A8:B2:7B:2D:55
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/x5EHi2AetEu21DwEEnpUqLJ7LVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:02:75:a7:77:b4:eb:68:83:f6:37:b0:d7:a1:b4:49:e2:24:
59:86:06:ca:f0:ed:68:8e:03:90:58:a3:fd:88:ef:d9:2f:e0:
ec:e8:0d:79:21:9a:2f:20:9f:6a:00:a3:57:73:f8:a7:ff:d1:
df:d3:8c:8a:89:4a:10:51:33:f9:80:0b:c0:22:6e:8b:83:f6:
2b:a4:d9:38:8f:6c:36:54:c2:a3:28:44:c2:0f:0f:2b:1c:87:
b4:11:21:9e:50:c8:76:bc:da:29:50:5e:8c:2c:fc:dc:45:4c:
2b:1b:a5:8c:29:d6:28:00:b1:cd:54:58:d4:46:eb:e0:ee:18:
7c:12:69:3e:ae:a9:d3:3c:8d:1b:ed:61:e7:c8:1c:09:95:fc:
c8:c7:2b:be:d3:2e:d0:a9:f7:3f:88:a2:83:fb:ab:5c:dc:0e:
8e:44:a7:3d:01:70:40:f2:05:18:4f:b5:f6:86:4f:7f:4f:a6:
ff:15:5c:9f:7b:52:34:dc:39:8a:6e:b3:03:fb:94:89:b8:7e:
61:0d:31:25:17:49:e0:f7:86:50:59:19:87:8b:d2:c6:59:df:
9a:0f:fa:32:e5:34:67:8d:57:49:f8:e0:58:ec:7f:df:c7:a0:
67:21:1a:f8:68:5f:72:b5:ae:db:ff:e7:9e:06:99:15:37:89:
ef:03:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:24 2026 by rpki-client