Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/S5wr06vdwGVhTbB1fKMUUZD_8Ss.roa
File: S5wr06vdwGVhTbB1fKMUUZD_8Ss.roa (raw, json)
Hash identifier: V2LpwKemEc10nxy8sjedxqwpf+S2CjsCA39qgPx1G+s=
Subject key identifier: 4B:9C:2B:D3:AB:DD:C0:65:61:4D:B0:75:7C:A3:14:51:90:FF:F1:2B
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 01A114A38FEB074C674E268929979A7AF344
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/S5wr06vdwGVhTbB1fKMUUZD_8Ss.roa
Signing time: Wed 07 Oct 2026 04:33:45 +0000
ROA not before: Wed 07 Oct 2026 04:33:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197196
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:a3:8f:eb:07:4c:67:4e:26:89:29:97:9a:7a:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Oct 7 04:33:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b9c2bd3abddc065614db0757ca3145190fff12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:6f:10:42:38:f6:85:99:2c:00:55:64:10:
40:4f:f8:e5:fe:2e:b2:a2:0f:c8:38:67:4d:70:7b:
79:e4:81:28:57:b6:66:20:06:af:3d:2f:4f:26:2e:
40:01:ee:e8:ab:f1:81:32:e5:60:d0:9a:7a:e8:78:
ae:ca:5a:ef:ff:a3:01:c7:ae:e6:0f:82:16:a3:b7:
8d:6c:c4:f9:12:d4:ff:c7:7d:9b:8c:0f:ec:e9:78:
99:b3:b5:eb:de:82:0e:b5:1b:70:91:d9:8a:35:9d:
be:0e:9a:dc:d0:ca:17:71:1c:98:2c:12:38:a7:ac:
37:1e:3e:f4:aa:bb:48:21:4b:63:a0:83:5a:ca:2e:
86:c2:20:39:c8:89:ee:23:21:ea:60:d2:cd:38:f1:
b6:00:71:fb:94:c7:85:92:d5:c4:11:c2:fa:e0:1a:
59:21:5f:44:bf:1a:16:67:d4:af:1a:35:84:f4:14:
d0:1c:d1:ef:16:2d:c5:8b:3b:ed:3a:70:16:53:3d:
d6:73:0f:dd:e4:9a:39:c9:e5:ca:61:f3:93:ed:b2:
6a:d0:c7:b7:28:ab:bc:a7:84:23:ea:a1:e5:06:ca:
8e:79:f4:72:eb:be:09:20:4e:b9:5c:c8:85:3b:be:
77:a6:f9:8e:4b:17:9c:71:22:b2:48:57:ac:c7:8b:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:2B:D3:AB:DD:C0:65:61:4D:B0:75:7C:A3:14:51:90:FF:F1:2B
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/S5wr06vdwGVhTbB1fKMUUZD_8Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:42:1f:c5:93:80:be:43:2a:ac:85:ad:07:89:0e:7b:71:50:
0c:8f:47:72:35:a3:47:70:cc:a2:3b:bc:e8:e3:bd:b3:c7:fb:
ba:af:e5:3d:c8:1c:1f:b0:52:16:19:0b:89:88:b2:c7:d9:ad:
e4:9b:2d:c0:f8:b4:78:24:d1:c6:0c:70:4a:31:1a:86:70:c4:
22:c9:fc:bb:e8:f3:f1:da:6b:57:46:f4:d2:e5:b4:58:a9:83:
3c:d0:b7:73:e4:e9:1c:30:24:7f:ff:df:d1:58:d2:fd:e5:13:
10:df:e8:1d:e6:dc:61:e6:c7:1e:95:c5:5f:93:92:a8:30:09:
81:71:31:b3:23:0b:6a:f2:c0:10:fc:74:07:8b:0c:bb:2c:7c:
b2:ec:0b:bf:54:8d:9e:c5:bb:e1:e2:28:04:ad:c9:49:e4:da:
31:25:9b:54:bb:21:6b:f4:f9:73:4c:6b:b8:48:e5:54:f8:5b:
21:57:24:21:f8:8e:57:2c:2c:1e:45:a4:25:bc:aa:23:40:9c:
9f:a5:ba:a4:30:1e:12:ee:d6:7c:8b:cb:dc:1b:61:b4:00:f9:
cf:12:ff:50:40:c1:d6:7d:3e:5e:1d:9d:e6:20:a3:a3:01:25:
e2:82:f9:f5:6c:14:5f:5d:ca:61:96:44:fd:b5:8e:bb:5e:de:
de:f2:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:52 2026 by rpki-client