Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/A-PEKWh9nfRckAY_tB7SauD6cf4.roa
File: A-PEKWh9nfRckAY_tB7SauD6cf4.roa (raw, json)
Hash identifier: la32Na34jMiSb36C5r0bmaM/FJ/bKAr4KuzXqe1RW3o=
Subject key identifier: 03:E3:C4:29:68:7D:9D:F4:5C:90:06:3F:B4:1E:D2:6A:E0:FA:71:FE
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019FA7DDA6E0540A6B4BD6F4978369076D7C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/A-PEKWh9nfRckAY_tB7SauD6cf4.roa
Signing time: Tue 28 Jul 2026 08:35:48 +0000
ROA not before: Tue 28 Jul 2026 08:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47122
IP address blocks: 90.188.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:dd:a6:e0:54:0a:6b:4b:d6:f4:97:83:69:07:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 28 08:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03e3c429687d9df45c90063fb41ed26ae0fa71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:38:32:e8:53:cf:1f:d9:ac:fa:8b:02:7a:
69:b3:6b:c2:9e:09:2d:29:66:f0:50:0e:e3:e6:ff:
78:cc:9a:42:fc:59:85:ee:d3:67:ae:1d:db:e0:ae:
d9:17:5a:1d:68:cb:63:b8:a9:a1:fd:c8:86:d4:d3:
63:b5:30:e9:75:50:b9:15:2e:bd:dc:ba:bb:ed:18:
92:ad:30:13:5c:6e:71:ba:fd:ee:98:84:9a:7e:5a:
bc:e8:a5:6b:da:4e:2f:8c:0d:8c:eb:d0:c1:a8:1e:
48:18:e3:d7:9b:32:17:1d:c2:57:ad:0c:6d:1d:11:
50:f5:9c:8c:3a:df:82:08:85:e6:9b:16:66:df:a0:
77:c8:39:e4:10:0d:eb:24:b7:7b:d7:38:04:a7:92:
73:8d:05:da:0c:e4:20:36:06:98:ec:71:15:de:32:
20:26:4c:d8:4a:8d:6e:95:6d:a5:32:43:55:eb:8f:
91:58:bb:47:23:0d:22:cb:ab:3b:7d:0b:75:b6:c5:
5f:27:ad:b1:0a:65:b6:a9:cf:45:23:7d:1d:7e:c5:
46:4c:7e:34:6d:79:21:62:cc:f8:75:c6:0c:d1:c0:
d4:0c:18:d2:d6:38:d9:ff:1a:93:12:70:4e:bd:67:
1a:f3:de:91:66:37:91:d6:e8:7d:c8:df:27:81:b7:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:C4:29:68:7D:9D:F4:5C:90:06:3F:B4:1E:D2:6A:E0:FA:71:FE
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/A-PEKWh9nfRckAY_tB7SauD6cf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.196.0/24
Signature Algorithm: sha256WithRSAEncryption
13:58:f8:cc:2e:32:41:ac:bf:23:ad:e3:be:0b:74:0a:11:d8:
01:80:8f:19:82:fe:40:00:0c:ad:e3:57:0b:9a:37:71:48:aa:
7e:3c:ab:b9:6c:10:f3:8b:9f:9c:e3:5b:49:48:bf:02:47:b8:
2e:f7:2e:ff:f4:08:25:be:b5:d5:b5:00:d8:ca:40:b0:ba:f3:
77:fb:cc:03:b9:ce:7b:af:7a:c4:19:ae:08:78:ed:08:45:23:
9c:5a:1e:5c:52:bf:c7:22:af:d8:38:55:9b:eb:5f:fc:36:73:
45:00:ca:d5:31:a6:4b:2a:40:90:14:66:27:a4:4d:36:d7:f0:
52:5a:41:3e:f7:81:11:48:2f:ab:e4:be:df:b3:db:52:4e:5a:
89:83:56:d5:3f:7d:6a:75:f1:73:17:00:0a:8b:c9:6b:43:89:
9e:e9:42:56:fa:68:9a:e1:11:e6:04:e6:04:79:37:4b:32:28:
d0:90:81:da:e6:33:f5:72:67:c3:74:f3:b7:13:e0:9b:57:ce:
6a:53:46:28:e3:c6:5c:41:9c:d4:4a:18:80:77:94:bc:2e:20:
fb:ff:9a:60:87:ee:25:d5:3a:56:08:39:ea:65:59:c2:aa:9f:
28:08:cf:39:b7:64:d4:d5:5d:34:32:9a:18:5d:48:e2:26:ea:
76:43:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:38:09 2026 by rpki-client