Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5B52rZbF516fVNZtxIxJjzS9q7M.roa
File: 5B52rZbF516fVNZtxIxJjzS9q7M.roa (raw, json)
Hash identifier: qB/yaTGNS0vhR3qpwg7SETBfuhgqE92MVDb1kzpHhY0=
Subject key identifier: E4:1E:76:AD:96:C5:E7:5E:9F:54:D6:6D:C4:8C:49:8F:34:BD:AB:B3
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019FA42325C637730E582436FF5E2F49E459
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5B52rZbF516fVNZtxIxJjzS9q7M.roa
Signing time: Mon 27 Jul 2026 15:13:14 +0000
ROA not before: Mon 27 Jul 2026 15:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402394
IP address blocks: 2a07:dd80::/29 maxlen: 29
2a0c:b500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:25:c6:37:73:0e:58:24:36:ff:5e:2f:49:e4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 27 15:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e41e76ad96c5e75e9f54d66dc48c498f34bdabb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:a0:8b:b1:39:04:fb:71:69:2d:1f:96:a3:
9c:a3:a6:99:7c:58:ad:d1:31:21:50:37:89:b4:de:
36:0f:b1:bd:f6:0e:e2:e5:13:6e:e3:f6:5b:70:1a:
92:9f:44:1b:ab:88:09:9e:44:26:f3:70:8e:92:fe:
26:d0:08:27:80:00:65:ab:16:74:1c:9e:8f:84:ea:
15:d7:65:4e:f9:8e:73:e1:a2:32:3e:0f:58:ef:dc:
f0:e4:8d:6d:36:0b:bf:fb:5d:1e:f2:5f:30:dc:f1:
ab:b6:0d:69:31:e1:0b:d5:9e:10:57:1e:9a:b5:41:
75:f3:f3:28:de:59:43:31:55:94:56:d8:54:b4:15:
4f:9d:a2:cb:6e:21:84:f7:6f:af:09:a5:2e:11:b7:
d9:f7:8b:ff:3c:28:fa:1b:26:64:e1:ce:e3:22:04:
48:06:bf:57:65:03:90:3f:a7:2d:1b:1d:38:f4:de:
0e:10:e6:8f:c8:a5:f5:f9:f4:dc:01:98:24:01:e5:
27:3a:25:fd:68:c3:34:84:53:99:4d:4c:34:f1:f0:
77:ca:c4:50:8b:0e:76:27:fa:00:86:2e:86:a6:15:
4f:3c:2c:69:dc:95:78:61:46:22:5e:4d:c3:7c:f9:
39:98:e9:a8:77:14:18:95:2c:9b:3c:ba:13:95:a7:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:76:AD:96:C5:E7:5E:9F:54:D6:6D:C4:8C:49:8F:34:BD:AB:B3
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5B52rZbF516fVNZtxIxJjzS9q7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:dd80::/29
2a0c:b500::/29
Signature Algorithm: sha256WithRSAEncryption
12:63:53:53:9c:2a:b4:39:3d:3f:55:a2:79:1b:a1:36:27:56:
8e:fc:8f:ae:71:92:6f:ab:36:47:97:65:31:04:41:b4:1a:08:
60:9a:66:6c:9e:f3:92:07:af:82:74:24:6a:a4:68:5c:fb:d7:
31:46:e7:32:61:fd:1c:21:27:74:a4:9c:b8:bc:9c:c0:0c:9c:
1c:75:25:74:dd:dd:b7:51:24:0c:e9:5c:a9:1a:a8:df:be:c3:
2c:55:21:d5:e0:ff:52:84:71:49:c7:c7:46:70:03:d6:61:11:
40:6f:82:94:1f:c3:1b:2e:cc:aa:91:5c:13:71:1a:a2:02:0c:
8e:55:1e:f1:fc:02:8d:d4:5d:76:f4:ce:0e:74:6d:3a:ca:4c:
e2:92:13:f6:91:21:41:cb:5a:c6:b9:15:5d:7d:e7:d7:12:24:
66:ca:8a:6c:4c:ef:ba:51:9b:b7:7d:57:20:72:9a:0c:80:37:
b9:79:24:48:fb:7e:c6:16:e8:01:29:ea:4a:bc:ce:52:0c:17:
71:62:c4:9f:0f:bf:69:50:7d:92:54:bf:b1:66:2e:5d:21:9e:
0f:54:82:d6:ff:21:50:3d:92:21:ca:53:fa:6a:42:1c:e3:02:
8b:dd:eb:cd:47:a1:6a:0e:c6:e7:34:9f:2d:8e:26:77:8d:9d:
a5:45:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:08:12 2026 by rpki-client