Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/S5WP8cxv-JzG_qeqgk-6amMxqcQ.roa
File: S5WP8cxv-JzG_qeqgk-6amMxqcQ.roa (raw, json)
Hash identifier: c7WqUJc7ccQZqlA/vTRH2y6VC0pIJvI7uYjZx1RXLpI=
Subject key identifier: 4B:95:8F:F1:CC:6F:F8:9C:C6:FE:A7:AA:82:4F:BA:6A:63:31:A9:C4
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A12FCB10BD31FC9BCC8D2E677834685AB1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/S5WP8cxv-JzG_qeqgk-6amMxqcQ.roa
Signing time: Mon 12 Oct 2026 11:06:39 +0000
ROA not before: Mon 12 Oct 2026 11:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:cb:10:bd:31:fc:9b:cc:8d:2e:67:78:34:68:5a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 12 11:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b958ff1cc6ff89cc6fea7aa824fba6a6331a9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:66:49:e0:c0:28:69:0e:69:08:63:65:6c:
d0:9c:d9:8a:24:e2:73:7e:04:d1:39:2a:b9:24:dd:
e6:a9:41:45:fc:04:3b:71:7e:ae:a8:d3:eb:a3:aa:
6e:f5:56:61:b3:52:2f:dc:2a:34:ec:9d:6e:2d:e6:
82:e2:f9:cf:24:52:fa:04:6e:6b:df:f8:e1:09:49:
2b:40:db:5b:e5:a1:e1:a8:9f:84:01:3a:52:17:7c:
c5:b4:0f:41:d2:d0:30:65:4f:bf:40:d6:6d:36:69:
c8:20:b3:2f:64:91:2c:ce:07:21:cd:7d:f1:6d:40:
f5:41:a5:07:53:69:97:76:23:bf:8f:b0:47:e5:4b:
57:6b:43:da:b8:72:32:2a:30:78:b8:a8:ad:9e:10:
d7:3a:37:a8:5a:b2:15:87:2d:8a:ef:9d:8f:f1:90:
bb:14:42:d7:37:c6:17:af:20:ce:68:2a:1d:af:f6:
00:8c:67:61:c1:bf:88:90:a9:28:4b:7a:a7:e2:22:
63:f4:93:0f:27:63:f4:61:a0:34:fd:c6:d0:b3:cb:
61:85:df:0e:e4:ad:3f:ce:bd:9a:9e:ce:60:62:aa:
62:1e:41:68:30:f7:85:7f:ab:3f:66:31:8c:cd:b7:
5c:99:38:88:62:de:64:f4:d6:35:25:17:f4:d8:46:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:8F:F1:CC:6F:F8:9C:C6:FE:A7:AA:82:4F:BA:6A:63:31:A9:C4
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/S5WP8cxv-JzG_qeqgk-6amMxqcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c5:e9:da:eb:1c:9d:4c:47:fa:d3:9d:f0:2b:9c:c1:92:74:
18:ec:54:42:15:db:ff:e5:84:92:8d:84:e6:51:9b:f2:5a:cd:
08:b5:fb:02:8b:6c:1d:de:70:c9:b5:0d:84:ff:95:86:14:55:
67:cc:01:69:7b:94:b0:29:38:58:b3:6e:03:45:9b:70:df:ad:
d1:45:0b:64:47:d7:1e:df:ce:26:1c:50:d8:db:f2:04:07:50:
60:96:2f:1a:0c:45:10:8a:b9:7f:3f:dd:e1:df:cc:92:f2:af:
39:07:78:cd:3e:8c:94:6c:75:04:7c:14:bf:f4:dd:37:4e:17:
50:2f:a0:58:9d:80:e9:00:41:3a:18:b4:9d:fc:d7:8a:ba:c9:
f3:9a:13:f1:3b:08:20:18:47:56:98:fa:6b:ef:09:ed:4c:5a:
ed:ad:f8:c6:a5:a3:cb:41:95:c7:e9:21:35:67:59:1c:eb:ef:
83:1d:fd:cc:4b:a2:5a:21:96:91:b2:cb:05:02:4e:52:75:38:
28:f0:0b:1d:8c:44:9f:6e:8c:60:58:b6:4f:1b:a7:80:b4:03:
c9:ab:e5:ac:a0:1e:c4:96:14:34:c3:57:20:06:e5:4f:c3:65:
e8:38:b1:fd:a3:d9:03:48:19:02:4d:98:f8:f8:ec:08:b4:04:
6d:14:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:24 2026 by rpki-client