Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/4qwZpRbf6LDkIRhhwBn6qMN1ewY.roa
File: 4qwZpRbf6LDkIRhhwBn6qMN1ewY.roa (raw, json)
Hash identifier: EpiNl673gOx0ck9MIwb+kEF2Rhtz/BBi635AQJBBydo=
Subject key identifier: E2:AC:19:A5:16:DF:E8:B0:E4:21:18:61:C0:19:FA:A8:C3:75:7B:06
Certificate issuer: /CN=e5d0c5968ef0261893e870b75c5ecd2f0a4b6ef5
Certificate serial: 019E82CF58FBAA0AB6F1E547940BB1B39EF5
Authority key identifier: E5:D0:C5:96:8E:F0:26:18:93:E8:70:B7:5C:5E:CD:2F:0A:4B:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/4qwZpRbf6LDkIRhhwBn6qMN1ewY.roa
Signing time: Mon 01 Jun 2026 10:51:27 +0000
ROA not before: Mon 01 Jun 2026 10:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43341
IP address blocks: 193.26.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:cf:58:fb:aa:0a:b6:f1:e5:47:94:0b:b1:b3:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d0c5968ef0261893e870b75c5ecd2f0a4b6ef5
Validity
Not Before: Jun 1 10:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2ac19a516dfe8b0e4211861c019faa8c3757b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:df:c0:49:e0:69:ca:cb:99:1c:11:93:03:
a8:cf:5b:4b:9a:bf:07:85:17:ae:fe:5b:08:c2:f1:
1e:1d:b8:74:64:be:79:a7:61:c6:1d:56:8c:7e:4e:
65:d8:d9:0a:2b:35:d9:eb:2b:a5:a7:f7:2b:9e:88:
48:a1:5c:92:c3:ef:15:bc:0f:25:c8:a2:14:aa:30:
0b:5a:28:4c:1b:7d:93:5d:70:71:2d:5f:94:3b:79:
49:a1:78:23:83:8b:a3:a9:7f:48:a0:41:98:02:04:
b8:06:4d:e4:bb:46:2b:36:05:35:6b:14:a0:ed:97:
46:a9:2b:63:35:06:46:69:73:8b:44:35:42:54:fc:
2e:60:8e:22:dc:5f:b2:a3:a9:69:73:26:ea:e2:a1:
30:0a:df:f4:34:d2:8e:36:29:2a:1a:94:aa:1f:de:
d7:7f:3b:30:c5:69:13:8d:e5:95:33:c0:2c:c5:c5:
8c:fd:da:ac:fd:f3:19:c1:dd:b7:15:29:b9:e1:09:
dd:bd:7a:9f:98:45:99:a8:06:fb:17:36:49:46:fe:
53:17:8a:ce:52:74:05:0a:98:c4:6f:fd:13:1f:e6:
9d:d0:40:91:9a:ef:69:40:39:10:73:a0:d5:46:d2:
38:80:96:4d:82:26:16:2e:aa:63:cf:27:40:01:12:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:19:A5:16:DF:E8:B0:E4:21:18:61:C0:19:FA:A8:C3:75:7B:06
X509v3 Authority Key Identifier:
keyid:E5:D0:C5:96:8E:F0:26:18:93:E8:70:B7:5C:5E:CD:2F:0A:4B:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/4qwZpRbf6LDkIRhhwBn6qMN1ewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.123.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4e:1b:09:1e:ce:dc:ab:20:4e:c1:65:50:2d:91:c4:c9:a2:
6c:08:6a:14:2f:71:43:60:77:f7:04:70:61:cf:b8:88:5d:50:
e4:60:7c:b2:b1:0c:1e:68:95:74:94:10:d8:09:9d:d2:23:5e:
2f:ed:25:6c:29:0f:47:cc:22:31:de:8d:71:e6:71:4b:e5:c8:
9a:85:fc:12:9b:e6:41:11:63:f9:94:8d:83:2b:33:28:04:d9:
9c:eb:6a:24:97:fc:08:d5:f2:96:07:96:70:f5:93:c4:13:13:
a5:31:fd:8d:6d:45:27:f9:c0:59:ce:c6:cf:79:ee:9f:86:4a:
a4:b6:73:9c:37:36:15:95:49:6c:14:10:34:f2:ad:b2:28:08:
49:8b:eb:74:47:be:37:c3:d9:2e:a8:b9:19:ab:95:e6:e2:93:
3b:89:86:63:77:ae:3e:30:a8:98:81:18:d2:38:0b:c7:f1:98:
1c:a0:8e:f3:41:c7:e5:77:95:2a:97:69:0c:69:8c:7e:ab:ba:
8e:76:08:36:ce:45:77:15:00:82:8e:64:40:d7:5d:a9:da:f8:
ae:61:28:e2:bc:c6:6e:62:b6:dd:f0:52:fa:a9:72:27:1f:aa:
ff:d4:1e:48:42:69:de:a6:46:00:2e:82:82:42:02:0f:c3:11:
4c:0a:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:25:06 2026 by rpki-client