Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa
File: 5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa (raw, json)
Hash identifier: 3BzgmGQESa9eTcM0ODtiMc7GJiSKtttHkfqVjBBtvdQ=
Subject key identifier: E7:22:8A:EB:BA:A4:36:76:69:FC:17:A8:2E:66:D8:EA:81:2D:6F:34
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019B7D5CA5D2E57461A9472D33021186E84B
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa
Signing time: Fri 02 Jan 2026 06:19:42 +0000
ROA not before: Fri 02 Jan 2026 06:19:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205541
IP address blocks: 185.13.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:a5:d2:e5:74:61:a9:47:2d:33:02:11:86:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Jan 2 06:19:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7228aebbaa4367669fc17a82e66d8ea812d6f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:bb:b9:dc:75:fc:37:6b:cb:46:9b:6e:e3:
14:b4:e1:eb:af:1b:11:62:4f:46:c0:3e:6f:55:cf:
47:2f:b2:c4:c5:db:74:82:8d:46:72:22:7b:38:ed:
ca:08:7d:d9:1e:bc:18:fe:c1:4d:0d:22:3a:72:fe:
b4:e5:8f:aa:dd:24:bd:5c:8d:70:d2:81:ec:6d:c1:
52:75:7c:77:ec:7e:ff:11:17:39:5f:67:d6:8b:fe:
72:d2:b3:f8:fe:0f:b3:9c:e6:a8:0f:85:6f:68:49:
01:d1:85:49:ae:12:97:4a:78:3b:17:c9:ba:70:76:
a5:9b:23:97:9e:0b:1e:cd:fa:40:21:5c:73:20:e8:
92:de:eb:af:9a:59:ae:98:ee:ac:4a:10:d5:56:ae:
91:14:ab:5b:4b:cc:e3:d7:29:55:8a:c7:1b:36:0e:
4a:a9:ae:3e:f7:9e:96:dd:b5:5e:ac:9b:03:7b:66:
9a:a9:d3:28:24:d7:d2:a3:df:cc:c3:de:bb:5c:4f:
4e:8e:56:79:8d:8f:78:4c:75:16:d5:1d:86:ec:5c:
bc:c8:a9:ae:c7:93:af:49:17:bb:bc:94:e2:3f:99:
77:0c:5f:43:e7:b8:fb:47:ca:0f:db:4b:b3:27:49:
1f:7f:cb:80:a6:b8:81:8b:8c:d5:af:18:ef:b6:5d:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:8A:EB:BA:A4:36:76:69:FC:17:A8:2E:66:D8:EA:81:2D:6F:34
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.66.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:e0:8e:b7:8f:f3:7d:d5:51:02:85:ff:d8:9a:9c:53:87:5f:
00:92:18:b8:c3:63:44:b6:ce:5d:0c:ed:03:7a:de:89:5d:70:
6b:50:03:18:03:48:19:e0:96:d7:7a:3c:79:cf:d5:f1:62:c6:
63:67:9a:10:78:9d:f4:37:1c:d7:55:dc:fb:96:48:80:9f:d1:
07:61:7b:61:d9:24:f0:f5:de:cd:c9:db:6d:9e:06:3c:6f:45:
27:fd:03:76:f9:ac:e3:d0:19:92:4f:c8:64:a4:18:1f:36:98:
77:0f:29:38:62:c1:46:e2:a1:2e:6f:8d:c7:18:c2:08:f0:b5:
8d:21:92:46:c0:ab:99:fd:b1:44:ac:77:c2:d0:1c:5f:c3:26:
97:37:08:00:60:6c:d6:a6:68:6b:e8:1b:f7:55:db:69:42:d7:
47:66:93:ca:d6:73:77:73:e8:d3:75:ed:ba:96:e1:88:2a:6d:
f5:ef:2a:1e:28:21:a5:40:4a:f9:ac:a0:ee:6d:a4:52:66:4e:
e2:1b:ec:16:f2:11:ac:e8:5a:2e:4d:f9:19:1d:ee:bd:98:d2:
4b:41:92:a5:64:78:ae:ca:f5:33:72:7b:8a:30:57:c2:e3:cf:
d5:81:13:d3:0c:a9:17:c8:bb:a7:fa:0b:c1:fb:97:64:be:9f:
4d:20:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:13:43 2026 by rpki-client