Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Axb5MTof7fk-anNZXzHyNvLvYvg.roa
File: Axb5MTof7fk-anNZXzHyNvLvYvg.roa (raw, json)
Hash identifier: HOYWdRZLCpSn9qcwi8QakMqzLqB9ckVUi9jVW/8+P2w=
Subject key identifier: 03:16:F9:31:3A:1F:ED:F9:3E:6A:73:59:5F:31:F2:36:F2:EF:62:F8
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01A0B560FC27F3B1712C1E2CF201FB716C50
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Axb5MTof7fk-anNZXzHyNvLvYvg.roa
Signing time: Fri 18 Sep 2026 16:37:07 +0000
ROA not before: Fri 18 Sep 2026 16:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58013
IP address blocks: 198.52.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:60:fc:27:f3:b1:71:2c:1e:2c:f2:01:fb:71:6c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Sep 18 16:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0316f9313a1fedf93e6a73595f31f236f2ef62f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:5a:08:eb:55:e3:57:b6:37:3c:d3:30:da:
a0:a0:19:92:7b:e4:87:ba:3c:62:97:e9:e1:71:eb:
b1:11:ad:7c:7e:e7:6f:0d:dc:3d:1b:f2:79:c8:cb:
df:82:93:bb:4c:b3:85:99:ca:71:00:8b:50:4b:68:
27:f0:a9:ae:ce:09:d3:50:cd:17:15:63:3c:2b:7c:
7e:18:01:19:6f:3e:62:af:e6:42:2d:fd:68:b4:44:
b3:89:c1:f5:79:8c:b1:a7:f7:ef:2b:40:ee:33:6b:
f4:4e:53:82:f2:2f:4a:c8:e1:7b:1c:bd:93:64:db:
5d:37:2d:c8:21:a4:c3:f8:33:9c:f7:a2:24:b4:4b:
35:f4:e0:72:21:45:ca:e4:35:78:2d:08:c7:4b:76:
71:71:0f:60:70:71:1f:37:cc:01:41:6a:43:d5:a4:
36:56:24:3b:23:f8:fd:d2:6b:02:a1:3d:77:40:e7:
0a:16:99:d7:64:33:4d:91:d2:5b:8f:0d:bb:25:95:
dd:14:e0:5a:8d:19:7e:f0:38:17:0c:ae:ff:49:0c:
46:01:f2:5f:41:0d:7e:2d:76:cc:01:d3:62:78:d9:
5c:e6:85:e9:48:8b:f4:03:40:d0:10:78:08:8c:57:
24:eb:d6:bc:14:3a:8d:44:7f:24:16:4c:09:58:2a:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:F9:31:3A:1F:ED:F9:3E:6A:73:59:5F:31:F2:36:F2:EF:62:F8
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Axb5MTof7fk-anNZXzHyNvLvYvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.32.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:23:77:ce:b3:52:fb:90:8e:d1:68:70:08:94:e9:95:5b:da:
13:1b:42:5d:3e:f1:39:ba:e6:b9:ce:8e:6f:93:11:14:77:37:
6b:a9:db:48:43:76:69:0b:87:8e:ff:18:77:df:d0:f0:f3:30:
2d:fc:2c:15:35:83:01:8d:d7:f8:14:10:80:0d:01:03:b6:5c:
a2:1b:b3:36:a4:09:88:ad:b9:5a:f4:c6:0e:96:e3:03:15:aa:
be:b4:02:16:13:10:66:11:03:eb:95:e6:02:74:18:b6:42:e2:
6d:fb:93:60:48:47:ce:cd:09:a6:c0:a8:e9:40:f6:96:1b:e8:
43:66:33:fa:46:73:10:da:e3:49:1e:df:f0:4e:59:74:4d:5d:
17:12:e7:d0:c5:a0:9f:dc:e1:48:6e:9a:2a:cd:0d:b0:90:55:
b0:c9:36:18:4a:d9:64:8a:e0:36:e0:93:bc:b7:b9:15:7d:d3:
3a:1d:f6:7e:80:da:b2:5b:eb:46:0d:00:bd:9f:3d:01:7f:4e:
f4:45:9e:e9:7e:f0:a6:77:16:82:d5:4f:92:54:7f:84:16:b8:
4f:34:30:bf:4d:0f:03:57:ca:73:0e:b7:5a:62:a0:ad:30:bb:
2f:93:61:a4:7f:30:89:35:7d:3f:f4:f1:16:ad:96:57:27:18:
ea:56:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:46:23 2026 by rpki-client