Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5MNfsMAcjQ6zarBUKlIkK0-Cx6A.roa
File: 5MNfsMAcjQ6zarBUKlIkK0-Cx6A.roa (raw, json)
Hash identifier: CdJf8fmu1PtUl2FdZK1dGopS5VjYd67XWLD6zV5+yLo=
Subject key identifier: E4:C3:5F:B0:C0:1C:8D:0E:B3:6A:B0:54:2A:52:24:2B:4F:82:C7:A0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FC0A65EEBC1E3B7C6C6F7CE56DF6508F9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5MNfsMAcjQ6zarBUKlIkK0-Cx6A.roa
Signing time: Sun 02 Aug 2026 04:05:56 +0000
ROA not before: Sun 02 Aug 2026 04:05:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219478
IP address blocks: 94.249.229.0/24 maxlen: 24
94.249.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c0:a6:5e:eb:c1:e3:b7:c6:c6:f7:ce:56:df:65:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 04:05:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4c35fb0c01c8d0eb36ab0542a52242b4f82c7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:c2:41:4c:af:8e:4b:12:c7:44:65:7b:7d:
bb:dc:fc:c0:32:fe:13:5e:eb:34:3a:63:a4:b8:c8:
39:1b:7e:05:1d:8d:50:34:62:98:a5:dc:cf:f2:1a:
83:09:41:67:12:6a:90:e3:47:c9:48:6b:1d:80:74:
89:e1:0d:1a:28:f8:6c:81:dd:24:92:4f:ed:c2:27:
eb:04:ae:bb:8f:3e:ea:e5:ae:8e:af:0c:b6:e7:47:
9c:06:e5:fb:3c:f6:3b:f8:32:25:4d:a3:1a:a3:7d:
4b:8b:94:06:7e:d2:8a:31:bc:ad:ad:ba:c0:fe:b1:
78:3d:c5:4b:0c:41:d3:1a:6b:6a:f0:ae:7c:a4:be:
b3:b9:91:78:49:11:d0:18:80:a6:8b:16:21:10:6d:
49:06:3e:29:65:79:a4:42:9c:7e:85:1a:25:1f:06:
aa:33:70:29:8c:0a:45:40:ae:d7:cb:3f:c9:cc:e8:
7f:b0:21:6a:fe:c8:ad:1e:14:7d:3d:94:2a:bf:55:
51:b1:e2:87:b7:3a:dc:56:76:15:ca:ae:29:d6:28:
51:05:20:75:2a:97:d8:f4:fa:28:6f:7a:16:07:ba:
44:75:7f:f2:be:dd:35:ab:19:1e:e6:db:c4:5e:25:
35:ea:37:58:4e:fa:f3:ad:b6:e9:ff:54:a3:81:63:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:5F:B0:C0:1C:8D:0E:B3:6A:B0:54:2A:52:24:2B:4F:82:C7:A0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5MNfsMAcjQ6zarBUKlIkK0-Cx6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.229.0/24
94.249.254.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:9a:80:27:f5:99:a2:11:89:63:4f:7d:3a:e0:ec:e2:26:96:
37:9c:65:49:0a:8f:77:12:6d:d9:0f:6f:c1:bd:3f:08:f1:a3:
a7:17:92:d7:db:e2:3c:5c:99:9a:64:2f:e0:f5:73:14:10:0a:
b4:b2:bd:3d:a5:44:8b:cb:51:55:a5:35:27:cd:8f:00:16:57:
d3:b6:6e:74:95:ae:29:20:00:6c:75:b2:2c:e6:e0:e4:65:57:
af:ed:c2:b7:1a:7e:4b:62:0f:27:79:14:01:81:61:2c:ba:7a:
41:be:f6:53:a3:87:30:52:43:48:36:fb:0f:11:07:e6:75:42:
48:7a:62:7e:4a:a1:1f:1b:87:2f:6b:dd:3b:db:95:95:59:1c:
84:e6:db:fa:a0:2c:9e:46:47:d0:31:54:91:ab:6b:5c:29:ea:
83:8a:8c:20:48:50:4b:81:3c:8a:51:e7:b6:df:8a:80:f1:28:
4b:47:4a:5b:aa:07:61:bf:fa:82:ee:16:c5:3f:b8:88:68:bb:
a3:fb:8c:e4:e4:32:2d:7f:cf:55:4d:fb:c0:e4:82:db:16:17:
4c:e8:a8:28:6d:e1:f0:ef:4c:6b:4f:36:65:3f:45:5e:12:f3:
1d:40:6e:0f:20:fb:a5:98:66:d5:69:12:93:2b:c7:64:17:bb:
60:15:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:40:06 2026 by rpki-client