Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/h5DIp02VidThuOHraMPFCodvygs.roa
File: h5DIp02VidThuOHraMPFCodvygs.roa (raw, json)
Hash identifier: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=
Subject key identifier: 87:90:C8:A7:4D:95:89:D4:E1:B8:E1:EB:68:C3:C5:0A:87:6F:CA:0B
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019B78A31DC76A2D5DCA69101664715E6941
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/h5DIp02VidThuOHraMPFCodvygs.roa
Signing time: Thu 01 Jan 2026 08:18:34 +0000
ROA not before: Thu 01 Jan 2026 08:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42426
IP address blocks: 194.1.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:1d:c7:6a:2d:5d:ca:69:10:16:64:71:5e:69:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jan 1 08:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8790c8a74d9589d4e1b8e1eb68c3c50a876fca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:a7:85:2f:8a:a9:cb:7a:24:a2:bd:ac:5b:
19:62:60:ca:0d:59:a5:96:39:a5:21:72:16:81:12:
e9:97:8b:0f:e2:cb:e3:7f:a1:ea:b3:73:08:c1:63:
d7:88:dc:27:a1:6f:79:cf:36:e3:42:81:5d:5d:02:
63:4f:eb:15:99:12:d8:6a:1e:57:02:f5:6f:75:72:
4a:53:a5:40:d3:80:90:d9:52:0a:37:cc:f1:e0:52:
77:3b:2b:05:92:08:ae:c5:de:35:1c:de:dc:a1:d9:
22:19:bc:08:63:a3:61:93:d5:15:ad:0c:3e:ad:8f:
22:6c:04:d5:a1:bf:8d:73:36:8e:04:1d:1b:25:93:
de:41:39:a9:53:f0:b5:d9:12:40:85:fd:99:ce:32:
21:9b:0e:cc:80:46:b7:61:f2:aa:d1:3c:74:e7:ac:
02:f2:a6:99:62:03:2f:80:f3:59:d7:bf:7c:02:c6:
33:87:0e:be:fa:9e:64:bb:38:fa:fc:71:89:0a:12:
aa:b4:5c:0d:2a:13:4f:99:85:22:4a:0e:23:cb:e6:
cd:2c:df:41:9f:35:e5:08:d1:5d:79:54:99:e0:27:
f2:e1:da:57:46:73:31:17:52:ce:e5:10:15:de:4e:
7e:b0:34:ec:56:d3:60:7f:10:4f:0e:62:38:9c:0c:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:C8:A7:4D:95:89:D4:E1:B8:E1:EB:68:C3:C5:0A:87:6F:CA:0B
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/h5DIp02VidThuOHraMPFCodvygs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:55:69:4a:80:cc:12:a5:86:50:6c:8b:24:4c:c3:cf:bc:34:
fa:69:a3:8c:7a:eb:f4:9f:03:14:ca:aa:29:73:c2:9f:6c:c8:
8c:48:db:ba:35:49:ba:93:92:72:f0:c9:c3:db:99:5d:76:f7:
83:31:d7:86:0a:45:aa:b2:5f:2f:57:38:fa:ae:ac:da:99:79:
6a:73:47:69:d1:0d:9b:5e:6d:3a:19:25:ce:3b:f1:53:a8:e3:
1a:80:fa:a3:88:6a:83:5e:42:04:6e:7c:12:0b:60:90:55:a0:
b8:dd:cc:fd:c7:4f:3d:32:fb:2f:b9:41:97:d3:fc:eb:2d:b5:
ca:8d:b9:74:71:7c:66:8e:8b:84:8c:65:70:a9:7c:45:90:48:
58:88:58:b3:65:59:83:a2:f9:5c:d8:ef:e3:8b:41:6a:02:fa:
4e:04:12:d4:61:83:92:fa:dc:a2:6f:c5:d4:49:ca:23:7d:61:
c7:15:f8:92:06:9f:38:c7:40:e7:46:64:bd:70:c0:3c:76:45:
f5:5b:79:81:80:e4:3b:e2:5e:bf:9b:63:74:0c:21:aa:51:b2:
3a:27:1a:b9:c0:86:06:bd:37:d0:7f:3b:af:b4:28:09:7e:a7:
dc:8d:00:09:50:08:2a:d7:11:88:d8:c0:9f:2b:c7:bd:f2:4d:
1a:95:af:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:32 2026 by rpki-client