Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/5M_KwgEpGB_wTUnEs5KgK0u-puM.roa
File: 5M_KwgEpGB_wTUnEs5KgK0u-puM.roa (raw, json)
Hash identifier: 1WXrU5af8c9IUXVeRilbTvTk9Z0TVLWoEf8fzrPe7J4=
Subject key identifier: E4:CF:CA:C2:01:29:18:1F:F0:4D:49:C4:B3:92:A0:2B:4B:BE:A6:E3
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019C485FF07EA6E79702DF53FAA7E1C03795
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/5M_KwgEpGB_wTUnEs5KgK0u-puM.roa
Signing time: Tue 10 Feb 2026 16:26:12 +0000
ROA not before: Tue 10 Feb 2026 16:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207843
IP address blocks: 2.58.164.0/24 maxlen: 24
2.58.165.0/24 maxlen: 24
2.58.167.0/24 maxlen: 24
2a0f:91c0::/48 maxlen: 48
2a0f:91c0:1::/48 maxlen: 48
2a0f:91c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:5f:f0:7e:a6:e7:97:02:df:53:fa:a7:e1:c0:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Feb 10 16:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4cfcac20129181ff04d49c4b392a02b4bbea6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:fa:d9:69:ec:d9:38:60:d9:73:19:a6:54:
5d:69:26:8d:7b:a2:4c:8f:9d:78:cb:36:2b:61:73:
4b:2e:92:65:27:c2:78:e2:b5:e4:a0:dd:11:e6:50:
30:a1:81:a8:30:8e:6b:99:f4:90:ed:87:35:66:ef:
5f:4f:25:a3:07:91:f4:7d:da:12:3c:54:29:f8:6e:
55:05:25:28:50:91:80:65:cd:81:a3:19:88:c7:2d:
37:74:77:e9:56:6e:f5:b9:9e:c5:e0:2e:ab:fa:8f:
80:63:4f:34:cd:8b:41:54:38:24:46:55:2b:2b:a0:
8b:33:a8:47:6c:1c:ce:54:27:c1:4c:42:57:87:0d:
b1:25:5f:8b:31:eb:dd:10:39:2d:3e:52:80:b5:fc:
71:38:c0:e5:5c:e6:ac:7c:1e:a9:44:c8:3b:33:f1:
07:e5:c0:df:37:2b:e9:91:9d:b8:2d:00:23:99:ab:
c3:bd:e7:9f:11:30:c0:d1:fa:cb:9b:21:1a:d0:4e:
f1:06:52:36:2a:12:cd:51:9f:1b:d2:e1:aa:32:30:
c8:56:d7:dd:50:8c:0d:92:ef:57:c8:a6:9e:09:80:
9b:25:79:9d:31:6f:55:7e:75:21:37:3c:f6:a5:97:
ce:e9:fc:28:7f:b5:7d:4a:31:01:96:db:07:20:b4:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:CA:C2:01:29:18:1F:F0:4D:49:C4:B3:92:A0:2B:4B:BE:A6:E3
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/5M_KwgEpGB_wTUnEs5KgK0u-puM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.164.0/23
2.58.167.0/24
IPv6:
2a0f:91c0::-2a0f:91c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:0f:80:fe:34:98:97:fc:43:f9:dd:df:3c:ee:32:c4:7b:d4:
ec:cf:cb:15:e8:f1:f2:a3:40:73:a7:39:5c:4b:b0:02:2a:a5:
a9:96:dd:55:9d:4b:76:56:52:3b:6e:3d:e5:ee:f2:6f:2a:8a:
cc:a7:f4:cd:14:d0:e0:93:af:d0:ea:fc:38:ac:8a:50:7f:08:
b2:dd:26:ab:f7:22:92:f9:6c:6c:8d:ae:59:82:bf:0f:30:1d:
4e:02:1a:7d:ef:72:f1:61:7c:a0:87:26:4d:a2:ef:6e:e5:1e:
9b:a7:0f:60:a1:24:91:f9:57:8d:aa:28:16:b4:49:0a:0c:d8:
95:3e:f6:2e:36:1c:51:e7:97:11:24:60:10:aa:b3:9c:41:f3:
58:7e:8c:13:1e:0b:91:72:5c:7b:19:1b:e0:44:b9:d9:ca:fa:
01:f2:b8:9f:65:17:9e:a3:00:04:53:a6:01:b7:9d:c0:a2:5a:
6a:d1:6e:27:33:8b:16:85:47:ab:33:35:ed:99:ee:9a:16:74:
27:74:b2:36:e3:66:b6:02:2e:6e:aa:e3:ad:f3:5c:a0:b8:49:
da:c5:d3:c0:5f:e0:8f:84:29:b7:22:38:f1:04:7b:ad:1d:96:
e8:6f:c4:e4:b7:b5:60:91:dc:4f:4d:ba:16:3f:a0:14:a4:79:
03:ef:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:46:23 2026 by rpki-client