Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5W0-ra53TPlyrkH_8scYXGoQnSQ.roa
File: 5W0-ra53TPlyrkH_8scYXGoQnSQ.roa (raw, json)
Hash identifier: 7mJWw5WXjc5SMaPTt7Tx+0uYg/99DmpGBOHkDsLBe2Q=
Subject key identifier: E5:6D:3E:AD:AE:77:4C:F9:72:AE:41:FF:F2:C7:18:5C:6A:10:9D:24
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FA52554E18C3B1B73F5F3D54DD4361A5B
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5W0-ra53TPlyrkH_8scYXGoQnSQ.roa
Signing time: Mon 27 Jul 2026 19:55:14 +0000
ROA not before: Mon 27 Jul 2026 19:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 83.245.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:25:54:e1:8c:3b:1b:73:f5:f3:d5:4d:d4:36:1a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 27 19:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e56d3eadae774cf972ae41fff2c7185c6a109d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:d7:cd:af:d4:4b:1d:4a:f1:85:b7:5e:cc:
33:4a:8d:cb:f7:e0:56:d8:82:2a:b9:c5:35:ce:92:
32:c8:bd:fb:c1:91:39:7d:c0:9f:cc:80:6e:8b:13:
31:31:c2:c7:ea:4c:bb:ed:25:5f:96:19:a6:5a:28:
7a:df:9e:f8:d1:ba:d7:c6:d8:5d:f8:ca:5e:f8:d0:
20:8e:6c:2d:ec:a6:80:fc:7d:8f:47:30:0e:7b:99:
e8:db:34:1c:58:1c:6a:55:2c:55:8b:8b:48:f5:b9:
e2:1d:14:fe:eb:9f:9a:a5:65:79:8c:c0:14:e5:a1:
3d:1b:37:1f:a3:3d:68:0c:33:66:bd:97:81:b8:a7:
27:61:08:dd:28:12:08:a0:56:39:8a:33:ce:59:82:
ff:b9:12:a6:d4:3e:b6:05:86:e3:fc:54:51:31:bd:
1d:1b:c2:02:3c:f9:f6:c0:d1:1a:b7:a3:40:e9:47:
c6:7c:fd:ba:bc:e2:ee:18:36:e1:c9:b2:c0:16:3e:
34:87:9b:dd:67:b6:68:eb:d1:c7:7d:5a:02:df:5b:
ec:63:ca:64:28:70:4e:20:fb:4a:9c:1b:18:17:aa:
a7:75:d7:e0:81:04:03:98:46:2c:9b:84:2d:98:77:
5b:da:44:a7:98:de:01:c4:ce:18:ec:12:a2:90:07:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:3E:AD:AE:77:4C:F9:72:AE:41:FF:F2:C7:18:5C:6A:10:9D:24
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5W0-ra53TPlyrkH_8scYXGoQnSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.13.0/24
Signature Algorithm: sha256WithRSAEncryption
31:93:41:01:1b:37:5f:da:22:07:de:0a:6c:12:98:bf:0e:e2:
6f:ff:43:93:47:b3:ef:9d:9a:19:9e:ae:2a:40:15:1a:90:f9:
e0:51:61:3e:59:60:f9:18:37:e5:ea:09:71:57:c8:31:8e:80:
51:d9:b4:ec:0d:d8:0c:a7:e4:3c:67:c0:43:13:f5:08:52:85:
ec:92:90:9d:64:ab:f8:0b:48:0b:7d:93:58:47:20:ce:f2:6e:
3a:6c:8c:50:2a:cb:b6:23:d3:67:c2:32:7a:8b:8b:50:b2:fd:
28:fa:5f:21:30:ac:e1:4e:47:61:ec:a8:88:df:e5:1f:85:fd:
3c:41:ca:20:be:fe:18:66:c4:28:fa:00:81:a1:3e:d8:bb:7a:
3c:4a:89:e7:d0:68:19:10:09:40:eb:d3:b9:95:33:2b:50:36:
92:de:92:55:b5:a7:1e:12:3e:c4:c7:b4:0a:b2:f3:0b:a9:ad:
a6:8d:ba:ce:c0:b0:e1:6c:63:0c:b5:9d:20:25:75:6c:93:68:
d1:1a:75:8b:4b:01:b3:1e:97:61:f6:73:1e:92:9a:e2:5c:03:
90:15:ca:b9:95:f4:68:24:4f:53:e9:6a:fc:60:9f:f7:68:1f:
4e:9a:72:a6:97:d5:96:c5:db:ef:30:7f:74:67:53:83:3e:fb:
ed:4c:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:31 2026 by rpki-client