Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa
File: 5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa (raw, json)
Hash identifier: QUgenxmjnt6hLRphe+QYqG3ci12uKtkz5r9TvSluXps=
Subject key identifier: E5:3D:6E:B5:AF:D6:E9:1B:77:CD:E5:A2:C7:74:ED:97:3D:DF:3E:B4
Certificate issuer: /CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Certificate serial: 019F2368ED5C7987E28511EDAA899CDE2EB3
Authority key identifier: 66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 91.208.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ed:5c:79:87:e2:85:11:ed:aa:89:9c:de:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e53d6eb5afd6e91b77cde5a2c774ed973ddf3eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:e0:3e:80:43:e0:c9:9e:9b:89:35:54:fc:
5c:6a:09:26:e7:8a:5b:c2:87:43:61:46:48:8d:d3:
b9:97:1f:e7:f5:7e:e6:33:58:85:c5:aa:80:55:c0:
a7:2c:e2:92:40:26:ee:76:89:1c:4e:25:98:9d:36:
18:ce:15:cd:78:af:04:bf:6a:d0:2a:08:45:db:25:
99:68:57:0a:fa:3e:4d:bf:1d:35:f8:55:c3:32:bb:
07:98:80:44:f9:7d:6c:e3:c9:05:67:8b:02:b3:52:
5d:64:b9:4d:d6:23:a4:2e:8d:27:9d:4f:7d:88:18:
2f:e7:3a:19:16:ff:2d:43:b4:1a:7c:2a:fa:ed:cb:
17:28:c9:73:47:cf:60:7e:04:9c:b3:75:8d:df:77:
d2:76:85:84:72:c6:af:64:2e:35:89:7f:9a:85:55:
fe:ae:d3:53:24:3b:c1:fc:2e:52:3c:a2:3f:c7:4f:
31:de:5f:7f:88:66:87:b6:0b:df:09:f1:da:cf:57:
19:b7:ce:53:73:68:48:cb:2b:5a:ea:1c:5d:7d:d0:
35:1e:5f:55:1d:79:73:0e:17:25:74:32:77:80:72:
82:f8:d2:91:54:e6:fe:9d:1b:c9:7c:38:be:f2:1d:
e6:3f:ae:84:84:66:43:36:85:89:6e:02:90:39:11:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:6E:B5:AF:D6:E9:1B:77:CD:E5:A2:C7:74:ED:97:3D:DF:3E:B4
X509v3 Authority Key Identifier:
keyid:66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.124.0/24
Signature Algorithm: sha256WithRSAEncryption
93:47:9c:a1:c1:89:30:ab:e3:51:fc:2d:34:79:52:26:2b:c5:
37:78:ac:7c:b7:f1:6d:df:17:10:d9:49:02:bf:f2:a9:fd:3e:
59:ff:09:e4:8d:87:77:7b:53:b1:a2:21:8a:80:4d:7f:04:20:
a0:db:7f:f4:e5:f9:51:fd:60:44:47:f6:f5:fb:c7:e8:fb:d2:
0a:82:64:eb:e3:0a:72:dc:7d:ee:2b:22:cf:c2:c3:73:a5:9f:
0a:98:a2:73:93:4c:99:b9:0c:69:b0:c2:3b:2b:42:ca:5d:65:
b6:02:47:30:d0:3e:59:ef:d9:4c:6f:a8:8c:0c:18:59:c3:69:
c5:df:c2:47:e1:39:f5:98:b4:7b:1a:e3:72:24:f8:46:21:85:
2e:31:10:6f:f3:76:61:ed:fa:be:92:09:43:2b:b6:4d:eb:35:
e1:a8:a4:69:67:66:87:8e:09:34:d0:77:1a:c6:88:dd:4c:42:
4e:c3:57:ed:e0:bd:fc:e6:fd:10:9e:f2:5e:6e:77:03:2d:5f:
41:6b:02:bf:8e:e4:b4:11:45:4b:61:45:13:52:67:d1:1e:7b:
ee:34:63:20:f8:3e:ec:66:04:c3:9a:6e:c7:c7:17:2e:23:9d:
51:6f:d2:69:7e:6b:62:07:42:62:36:9a:e8:f8:e8:db:c3:c5:
0e:a3:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:24 2026 by rpki-client