Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/5aspwc_EZRXz1DI0gfzYlq249Jw.roa
File: 5aspwc_EZRXz1DI0gfzYlq249Jw.roa (raw, json)
Hash identifier: z9a5ybEJbOBjedVWskB8FQIQDP7WVIXqlcDq4xwBtUE=
Subject key identifier: E5:AB:29:C1:CF:C4:65:15:F3:D4:32:34:81:FC:D8:96:AD:B8:F4:9C
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01A09EE55F73AE79BC1FEDA51178A06EBCF1
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/5aspwc_EZRXz1DI0gfzYlq249Jw.roa
Signing time: Mon 14 Sep 2026 07:50:27 +0000
ROA not before: Mon 14 Sep 2026 07:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 2a0e:4346::/32 maxlen: 32
2a12:41c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:e5:5f:73:ae:79:bc:1f:ed:a5:11:78:a0:6e:bc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Sep 14 07:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ab29c1cfc46515f3d4323481fcd896adb8f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:a0:54:9d:fc:82:f9:1f:e0:32:80:39:4f:
24:11:71:cb:9f:1d:41:2f:0d:15:02:72:45:14:01:
3f:dc:83:e9:70:e2:4f:93:52:a1:4b:c8:4b:62:50:
34:3b:b9:b2:49:c4:c1:42:22:cb:e5:98:de:60:7b:
88:2f:c2:19:b8:cf:0a:fa:c2:19:ce:f5:74:ad:80:
c7:70:38:cc:60:54:12:9b:52:c4:78:d9:1d:31:d3:
5d:ee:d1:18:b3:4c:51:25:17:e6:6d:de:08:a3:a6:
db:6a:a1:62:47:1f:24:d4:dc:02:45:9d:d5:bb:8b:
71:df:2e:a8:4c:e1:ef:6d:df:1f:30:18:46:89:45:
22:e5:23:e4:05:52:d1:41:97:01:a0:32:5b:b0:84:
3f:8f:39:0f:4b:39:90:51:54:da:a6:ec:fe:78:a8:
0a:5a:b7:96:0c:b7:16:3b:4b:26:04:5d:5b:cd:6c:
9b:08:12:ab:6a:2d:7d:79:63:b2:d8:9c:98:92:b1:
8b:c8:c4:58:6a:07:e0:0c:2d:20:bd:6d:4a:7a:12:
b6:6c:93:b1:7b:69:c8:3f:04:f2:d1:8c:c8:8d:b9:
27:8b:8e:a1:e4:94:4e:aa:8d:e3:40:8f:5d:82:80:
53:7d:f9:71:75:f8:a8:71:3a:3c:ec:f8:e0:c2:05:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:29:C1:CF:C4:65:15:F3:D4:32:34:81:FC:D8:96:AD:B8:F4:9C
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/5aspwc_EZRXz1DI0gfzYlq249Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4346::/32
2a12:41c7::/32
Signature Algorithm: sha256WithRSAEncryption
0b:65:b0:6f:39:12:6f:cb:1f:f9:bf:95:0f:a5:1a:65:72:a1:
b7:7c:ab:ee:f8:3e:4b:d6:9d:3e:aa:f2:fb:9e:82:b8:d8:9a:
46:25:0c:50:c4:45:d0:f2:fc:14:42:be:bb:23:a6:0d:07:6d:
ba:d7:e3:bf:b4:81:9a:37:f9:97:71:e0:3d:30:eb:ab:94:27:
ff:5b:c0:96:be:a8:5a:af:d9:70:e0:e9:3b:84:51:42:26:4d:
12:e0:2f:74:4f:1b:87:f9:c2:1c:21:ee:c2:7e:4e:dd:53:13:
76:a8:9e:f7:bd:7a:16:74:1e:88:63:c0:2f:0e:67:2c:1d:15:
d1:0e:11:4c:6c:b7:25:7f:f5:99:6e:1c:d8:c4:a5:f7:ec:c7:
1d:19:e2:2c:8e:95:88:8d:fe:c3:62:7e:16:55:2a:94:e3:b3:
91:62:1c:7c:34:f1:1e:d8:59:9f:4c:34:c4:78:49:4a:9d:5a:
91:3d:22:d7:29:aa:a9:f3:a4:74:82:37:13:8f:48:37:90:f7:
05:b6:05:b9:85:fa:02:73:d3:eb:73:a4:61:0f:13:fc:58:7e:
e3:f9:2a:28:a0:38:c8:87:ff:25:af:0b:78:ab:b7:99:20:9f:
e0:5e:5c:a0:1a:78:ca:89:0e:75:70:cd:7f:ad:5a:eb:6f:6a:
95:87:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:28:47 2026 by rpki-client