Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/R5S--utC9laYMZLaK8e5y0xU4YE.roa
File: R5S--utC9laYMZLaK8e5y0xU4YE.roa (raw, json)
Hash identifier: TDBMDGa2/0sxnlzLOujaeEN+d/Z+bRBFPSV66wTIH5k=
Subject key identifier: 47:94:BE:FA:EB:42:F6:56:98:31:92:DA:2B:C7:B9:CB:4C:54:E1:81
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A08BAE3E20E0990B380A4BD8EF9F826056
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/R5S--utC9laYMZLaK8e5y0xU4YE.roa
Signing time: Thu 10 Sep 2026 14:17:27 +0000
ROA not before: Thu 10 Sep 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38186
IP address blocks: 91.200.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:ae:3e:20:e0:99:0b:38:0a:4b:d8:ef:9f:82:60:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Sep 10 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4794befaeb42f656983192da2bc7b9cb4c54e181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:a9:1c:36:2d:df:ea:65:cd:cc:1c:23:d8:
a0:83:64:f6:8d:26:ee:e5:e0:cd:e8:00:22:5c:49:
40:af:93:c1:eb:b5:8a:18:22:77:63:b1:3e:71:ab:
3d:88:5c:01:83:5d:55:6f:e0:a3:e4:8e:08:50:6e:
7b:a1:86:83:03:78:e0:54:ec:e8:9a:45:31:54:d3:
ac:a7:6d:40:7e:8b:1e:0b:b4:7e:e9:26:b1:df:2b:
fd:18:78:f3:33:2d:97:de:9d:e6:cf:60:b2:cd:fd:
fc:3f:a3:74:26:19:59:8a:94:89:72:9c:70:31:97:
85:1c:c8:e6:bb:2b:bf:4c:68:ce:7b:fb:2c:f4:82:
1d:8d:35:74:56:ed:af:b9:2b:d2:f7:2b:c1:0c:28:
cc:fe:be:bf:2d:77:4b:e5:ac:0f:c9:f2:67:a3:9f:
60:ac:0c:b2:47:a9:df:d8:33:b7:13:90:f6:36:e2:
71:df:79:14:84:c5:5c:8f:2e:fe:0d:e0:d9:4e:30:
47:25:03:92:f7:d0:bf:49:c0:b3:8a:8a:88:52:9d:
ed:bb:f7:f8:c6:59:98:e9:0d:9e:d3:9b:89:de:36:
89:8e:b9:fd:e1:0e:b0:78:0e:d5:5d:40:dc:2f:22:
9e:ac:ed:6f:c3:98:5f:4f:b6:f9:68:d9:cc:13:de:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:94:BE:FA:EB:42:F6:56:98:31:92:DA:2B:C7:B9:CB:4C:54:E1:81
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/R5S--utC9laYMZLaK8e5y0xU4YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5f:24:95:9e:63:07:2f:a9:9e:ef:83:99:ad:10:be:1a:dc:
d7:49:a6:e9:d0:dc:a1:b3:cd:ae:ce:9b:10:75:7e:d0:a5:39:
1c:b3:4e:51:a8:e7:a3:ae:30:39:e4:f5:14:2d:f6:f1:92:58:
d3:5a:06:f2:fb:4b:83:a9:c1:1c:27:68:3f:7c:ae:ce:12:22:
d4:50:78:52:82:81:af:d4:a4:85:9f:b0:d2:f4:e5:c8:22:71:
10:8a:7a:96:73:a9:00:66:69:18:1b:df:c1:8c:93:9e:7a:ad:
5e:47:63:11:3a:dc:02:77:2c:34:87:77:8c:0c:3a:fe:b7:d0:
42:0b:17:b8:db:61:e3:bb:b0:dc:ea:fd:02:73:c0:68:94:a4:
4b:79:d4:77:30:14:4c:fe:63:68:73:1a:ec:77:8e:4e:d4:ca:
e9:95:ab:ed:00:f1:33:f9:3d:30:d9:fc:3c:e0:10:4c:e4:19:
b4:cd:10:2d:97:a4:8b:4a:f2:a2:49:f6:5d:f1:e4:02:58:9b:
77:c0:ef:35:fb:8d:42:36:cd:65:8d:b9:25:a7:b6:ce:93:41:
99:f9:b7:3d:da:9e:8d:14:51:67:b9:35:07:f2:30:be:8b:c3:
70:a2:95:36:aa:a8:f3:96:08:5d:15:c3:86:68:95:39:6a:37:
57:84:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:29 2026 by rpki-client