Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/E-5k8AuzfOcX3SqS9OTgr4Y2cGc.roa
File: E-5k8AuzfOcX3SqS9OTgr4Y2cGc.roa (raw, json)
Hash identifier: VD5MiP6Qbnp3v86PVP+7qPjjEvY1HQm23e4B10bhx0o=
Subject key identifier: 13:EE:64:F0:0B:B3:7C:E7:17:DD:2A:92:F4:E4:E0:AF:86:36:70:67
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 01A0F1D31D39B62E4407265C10EACE5F1A46
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/E-5k8AuzfOcX3SqS9OTgr4Y2cGc.roa
Signing time: Wed 30 Sep 2026 10:18:59 +0000
ROA not before: Wed 30 Sep 2026 10:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210256
IP address blocks: 91.106.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:d3:1d:39:b6:2e:44:07:26:5c:10:ea:ce:5f:1a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Sep 30 10:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ee64f00bb37ce717dd2a92f4e4e0af86367067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:96:13:e9:cb:28:2d:de:62:65:3c:79:f2:
bb:da:08:a7:84:8c:35:52:6f:32:e5:e5:d3:67:2c:
61:c8:9a:17:31:db:27:57:b5:46:01:35:b3:ee:d7:
93:9b:af:04:41:49:54:7e:b4:41:bc:6a:d1:23:e8:
83:77:86:a8:75:eb:be:34:a6:e0:c2:6a:63:ac:cc:
89:17:c4:91:a3:7f:6b:b3:2c:fa:78:9b:7e:cd:84:
8f:b9:a9:2a:86:af:e6:d0:da:3d:b2:1e:ec:7f:cc:
a8:63:0b:ac:bb:03:e7:0c:69:3b:26:ec:7f:29:53:
57:97:01:8e:ed:9f:ad:20:4d:33:bb:9c:03:d4:4b:
ae:c1:ba:74:1a:24:26:87:31:88:07:df:e6:f5:96:
6b:28:e2:24:b9:64:a6:93:73:e4:90:78:76:11:3e:
96:4b:b5:ed:56:2d:81:5d:fd:1d:dd:35:85:66:a6:
df:a5:6a:cc:24:ad:1d:9a:b9:87:b9:83:7b:6a:c5:
e0:61:0e:36:4e:8d:ee:92:3e:5c:fe:25:04:f0:58:
92:81:f4:5d:ee:82:a0:4c:07:a8:8d:78:da:e4:3a:
11:56:cd:85:3e:de:e4:66:58:64:99:f5:f5:9b:c9:
c4:5c:f5:b4:4b:a9:2f:66:f3:10:65:97:65:f7:ab:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:64:F0:0B:B3:7C:E7:17:DD:2A:92:F4:E4:E0:AF:86:36:70:67
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/E-5k8AuzfOcX3SqS9OTgr4Y2cGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.30.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f0:07:df:9e:4d:d6:5f:3f:80:a3:3e:19:ff:30:c2:12:74:
7d:75:78:5b:ee:28:7d:2a:c5:84:4a:bd:b6:fe:a4:cd:20:a6:
71:e7:94:d2:90:43:f2:d9:68:5a:f7:62:ae:cd:a3:34:2e:33:
71:a8:1b:c7:ce:b6:8e:be:02:f9:3a:32:0b:df:c3:9f:ac:26:
32:72:0f:a9:a2:91:98:09:49:44:61:c5:83:e7:55:ce:84:5a:
d1:80:28:6b:c0:02:d8:a4:64:ba:6b:74:0b:04:03:dd:11:40:
de:10:fe:52:bb:4e:4c:c8:20:55:91:73:62:7e:be:07:9d:a2:
d3:50:0b:b6:a5:3a:5f:02:a0:d6:a5:14:23:a8:a9:0c:68:f0:
08:9e:c2:d2:17:78:13:fd:b9:96:ac:54:bc:85:70:0d:45:59:
88:0f:cc:88:f6:1d:0b:6f:b6:e5:37:41:8e:15:56:78:1c:06:
5c:68:66:ba:1c:17:83:86:af:1c:7d:73:23:d7:b0:b5:28:3d:
34:f6:e2:89:e2:89:c6:1d:77:24:03:c4:16:c7:8e:91:4f:29:
01:a0:34:aa:23:d4:eb:8c:f2:f6:70:11:b4:80:bc:00:39:6d:
1c:5e:12:de:b0:ca:19:df:ea:c3:86:cd:9e:9d:8a:0e:52:ee:
60:65:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:07:46 2026 by rpki-client