Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/5UeKqt91iujWrLpmveszaAeKq38.roa
File: 5UeKqt91iujWrLpmveszaAeKq38.roa (raw, json)
Hash identifier: uGfE9PLC67qvNbDJ8GUA0pov+PYaKuZOHQHTjJZLOVs=
Subject key identifier: E5:47:8A:AA:DF:75:8A:E8:D6:AC:BA:66:BD:EB:33:68:07:8A:AB:7F
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 019C41B0D18A117B57425846392A6B335069
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/5UeKqt91iujWrLpmveszaAeKq38.roa
Signing time: Mon 09 Feb 2026 09:17:12 +0000
ROA not before: Mon 09 Feb 2026 09:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12734
IP address blocks: 151.91.32.0/20 maxlen: 20
151.91.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:b0:d1:8a:11:7b:57:42:58:46:39:2a:6b:33:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Feb 9 09:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5478aaadf758ae8d6acba66bdeb3368078aab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c2:91:9e:18:ea:b3:57:74:3c:e4:68:50:aa:
4e:38:a9:ab:b3:4e:73:d4:f8:9a:63:15:41:d2:93:
93:16:50:3e:61:a5:c8:51:25:7f:f3:6a:01:66:05:
44:df:3f:2b:9e:0c:bf:14:1a:a0:fd:42:48:b4:5b:
9a:18:38:b4:9d:e1:bf:17:cb:0d:c7:35:c9:e8:1f:
79:3d:f3:5c:3c:ab:0a:41:c9:66:85:83:50:63:9e:
de:32:e7:68:8d:a7:db:02:05:f0:51:de:63:ce:b6:
9a:0a:5f:0e:fc:dc:f7:86:eb:a1:eb:87:d4:35:c4:
47:ae:54:fb:e0:61:49:82:6d:7e:1a:1a:0b:17:a4:
b3:04:cb:eb:dc:91:24:b7:9d:30:0f:79:ba:fc:e0:
ae:be:fe:dc:36:33:a5:be:78:bc:12:5e:9e:43:7a:
6f:2d:22:0d:d0:16:bc:4d:9a:44:ca:40:cf:3b:e5:
91:e5:4f:ec:6b:d7:f7:2d:85:de:4d:8a:81:78:1e:
95:49:d2:da:1b:b9:c8:9a:e2:5e:f7:1e:d4:bb:03:
58:88:85:91:11:2d:7c:4e:39:56:56:a8:f1:5f:8e:
27:18:86:47:9c:06:1b:2e:ec:d0:ab:92:12:56:9f:
6c:a9:0d:31:be:82:7e:f3:76:b0:f6:d7:72:63:ff:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:8A:AA:DF:75:8A:E8:D6:AC:BA:66:BD:EB:33:68:07:8A:AB:7F
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/5UeKqt91iujWrLpmveszaAeKq38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.91.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:43:76:42:6c:db:46:9b:2f:a1:31:e6:e3:00:58:18:51:3b:
30:fb:54:01:48:cd:82:7b:03:89:cc:e8:5a:a3:a1:c6:7f:22:
df:5d:93:b6:2e:a2:93:26:23:3b:4d:78:f8:a9:56:34:09:c1:
7e:55:4d:a2:f1:60:43:85:0a:dd:53:af:8a:1a:13:a3:15:6b:
1d:77:30:d4:94:fe:38:9c:50:a5:d3:ae:61:bd:8d:a0:55:12:
b3:c3:f4:8b:d9:b8:66:10:cf:83:4f:59:f0:a8:af:1f:8a:22:
3d:f3:a6:20:99:ec:b3:3f:7f:09:a2:54:4c:a3:41:cb:6a:c6:
75:ae:75:1d:a8:d2:c6:7b:1c:37:29:ec:c5:ba:1d:26:63:30:
94:55:f1:87:40:19:8e:16:3c:6d:41:c2:e7:cc:22:70:54:a0:
66:e8:05:fe:34:29:6d:50:3b:27:71:91:78:c0:ba:bb:a0:3a:
33:91:ae:a0:8b:17:42:eb:f2:6e:9a:21:9c:c7:c8:0f:0f:68:
99:06:16:97:90:d6:7a:ed:c0:79:35:be:f1:18:1e:2a:95:fc:
02:ac:91:4f:37:5a:e5:af:9c:f0:5a:e4:99:45:39:4c:89:2d:
9b:df:fe:d7:29:36:5e:78:7c:2c:2c:4d:65:28:f6:64:50:5f:
b6:df:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:50:55 2026 by rpki-client