Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5k19_lftAelH-UJ_HW-fjZyV-kw.roa
File: 5k19_lftAelH-UJ_HW-fjZyV-kw.roa (raw, json)
Hash identifier: Z8wa0AUMOAbywsrG+MvE6KQIVYDV32+n+x3XN7BKJXo=
Subject key identifier: E6:4D:7D:FE:57:ED:01:E9:47:F9:42:7F:1D:6F:9F:8D:9C:95:FA:4C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A06CD433287A9BFC87876A140B3AD526E3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5k19_lftAelH-UJ_HW-fjZyV-kw.roa
Signing time: Fri 04 Sep 2026 14:30:41 +0000
ROA not before: Fri 04 Sep 2026 14:30:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 193.124.30.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
194.87.242.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.54.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:d4:33:28:7a:9b:fc:87:87:6a:14:0b:3a:d5:26:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 14:30:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e64d7dfe57ed01e947f9427f1d6f9f8d9c95fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:b9:4c:15:f6:08:be:9a:7d:9c:cc:30:d0:
38:25:1c:45:c7:b0:30:6f:9f:45:08:de:d1:6a:51:
b3:01:69:25:9a:e6:9b:14:f2:51:14:7d:1c:4c:79:
85:db:f2:ac:41:91:44:1b:92:32:ba:93:da:19:e1:
fd:a5:d1:ae:4b:fd:d8:b5:93:ae:06:f5:44:3f:d5:
93:1c:7c:2c:55:4d:c2:d3:10:28:96:94:22:11:83:
69:f1:c0:b9:fd:53:39:d3:01:ff:a7:96:ed:91:47:
b1:7d:8a:44:c2:4b:f1:8d:82:1f:0e:0b:a4:67:7d:
32:73:ea:07:df:ce:77:b2:66:a7:b7:4b:bf:d4:39:
16:38:38:5a:4f:91:27:a4:33:0f:66:c2:db:60:00:
4e:c6:47:7d:a7:b0:4b:2c:cb:16:8d:16:a3:9d:9e:
a2:d0:7e:17:33:09:f1:e2:94:aa:36:19:47:b2:cf:
99:db:4a:2c:2b:f5:0d:38:bf:94:76:6a:ac:3c:33:
4b:32:b0:8c:f3:92:b8:56:b9:91:4c:91:58:77:3b:
c6:2d:11:dc:e9:37:9f:ce:83:74:9d:51:95:f4:3a:
6c:5d:80:e5:76:4d:8c:6e:c2:e6:fa:69:a0:39:94:
7f:35:e8:7e:80:e6:55:52:48:eb:3f:2c:48:95:96:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:7D:FE:57:ED:01:E9:47:F9:42:7F:1D:6F:9F:8D:9C:95:FA:4C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5k19_lftAelH-UJ_HW-fjZyV-kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.30.0/24
193.124.94.0/24
194.87.242.0/24
195.133.12.0/24
195.133.19.0/24
195.133.54.0/24
195.133.82.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4a:3e:fd:08:9b:40:1e:8c:e6:af:83:db:99:70:4a:a7:d6:
52:06:b9:d2:73:0f:94:c2:fb:9e:68:ed:d8:79:8f:b9:c3:22:
1c:5e:95:d8:5d:71:62:17:ac:cd:4d:6f:90:32:6f:5d:4d:25:
22:3e:6a:5b:76:39:2e:1a:c7:10:f1:d8:a5:a7:f8:02:be:f9:
29:14:9e:76:35:15:27:35:da:9a:60:52:56:50:93:34:5e:75:
1c:78:e2:10:03:81:84:7f:74:86:99:ab:ea:55:b7:5d:f2:34:
4f:ad:38:19:e5:d5:f0:a4:9a:a5:85:c5:fe:e1:0a:9a:43:00:
0f:01:d1:f7:e2:61:9a:20:4e:dc:5d:54:ed:a6:77:e1:c5:ef:
ba:4a:be:57:b1:70:6f:46:4b:ee:b8:b1:7f:a1:f7:7c:79:f0:
22:55:77:42:c2:da:43:be:60:1f:2c:a0:af:20:98:a4:2c:55:
63:a9:12:cd:c2:73:d9:46:fe:8f:86:d0:7e:4f:ef:b6:e3:a9:
65:9a:f8:e6:2a:1c:e3:1e:d7:ea:96:94:3c:b2:9b:c5:96:1b:
d0:df:f4:4e:42:0d:a5:31:d9:5d:01:4e:57:e3:c7:79:93:90:
58:e6:72:8b:01:14:09:09:05:88:b5:a9:91:b0:50:ac:98:42:
97:ff:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:07 2026 by rpki-client