Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5fgIoWWBKvOOKue8Fz_eyMJIGm8.roa
File: 5fgIoWWBKvOOKue8Fz_eyMJIGm8.roa (raw, json)
Hash identifier: gyfm11IX57JgKdZoSJxhBcWBIhfOcmkxmyM/d67OuWQ=
Subject key identifier: E5:F8:08:A1:65:81:2A:F3:8E:2A:E7:BC:17:3F:DE:C8:C2:48:1A:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E4CEF166D4BCCA0CE6B0BDFB039C2FC3F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5fgIoWWBKvOOKue8Fz_eyMJIGm8.roa
Signing time: Thu 21 May 2026 23:46:37 +0000
ROA not before: Thu 21 May 2026 23:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215828
IP address blocks: 5.231.116.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4c:ef:16:6d:4b:cc:a0:ce:6b:0b:df:b0:39:c2:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 23:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5f808a165812af38e2ae7bc173fdec8c2481a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:a6:33:a0:e2:8d:04:77:e1:23:d0:d4:12:
35:13:68:9c:7e:df:1c:2a:7f:e9:7e:48:fa:59:29:
66:b7:8f:c7:e4:fa:fd:6f:8d:4b:de:8b:f7:16:13:
2e:cd:35:d3:d7:45:c6:dd:f2:ae:89:56:e3:85:52:
54:b4:4c:55:d9:6e:a0:44:36:b6:8d:47:99:b7:a8:
55:55:23:b0:94:91:93:a6:cf:a1:e4:c1:ad:d8:e4:
2f:fb:f6:26:ed:ed:de:59:ed:f3:0c:fe:06:a5:a4:
6a:50:a3:d8:2e:06:6d:f3:6d:24:6b:e2:35:41:f1:
ba:e4:33:a3:ab:01:fa:cd:6c:90:27:4e:8f:4c:13:
2a:ce:65:0a:18:66:18:49:34:0c:3b:6b:55:8f:80:
d7:fc:54:64:65:71:c1:a0:c6:75:aa:87:7b:5b:81:
ec:c7:bc:fa:16:de:27:e4:74:2e:97:a4:31:75:53:
66:29:ce:5e:dc:a3:47:4a:82:ae:3f:27:63:d6:5f:
97:e8:f6:db:a7:36:d4:2d:b1:32:fc:e5:99:92:b7:
2c:c6:4a:10:99:6d:d6:c9:c2:f1:79:26:b2:e5:79:
0b:1c:79:ee:17:7b:9a:8a:42:98:7d:0f:ac:a4:35:
71:4b:d7:6e:0e:52:f3:96:58:8c:5a:df:d2:87:ab:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F8:08:A1:65:81:2A:F3:8E:2A:E7:BC:17:3F:DE:C8:C2:48:1A:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5fgIoWWBKvOOKue8Fz_eyMJIGm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.116.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:44:cd:27:1c:5a:15:82:b4:0d:86:f2:0c:06:71:52:4b:02:
fa:75:59:56:32:23:8a:63:8f:1b:fc:9f:1e:ff:6c:d1:1d:c5:
ea:95:ad:44:7c:6e:a5:0d:3e:5c:5a:ec:6c:59:d6:49:4c:29:
a9:27:9f:e2:82:71:84:11:09:54:30:21:ab:4a:ba:67:1d:31:
fd:c0:9a:d6:96:98:28:d1:0f:4f:e9:59:f6:91:a9:ec:cb:d3:
21:b2:4b:0a:7f:9b:cd:73:d6:27:4f:63:7d:9c:c3:3f:f7:b6:
6d:d6:c8:ad:ed:72:48:5c:96:b2:d6:17:0f:3c:53:46:97:6e:
db:8a:1e:89:96:68:8d:b4:a1:16:c4:74:cd:b3:8e:6e:48:c1:
92:88:a8:2c:02:92:f3:d6:7c:55:c5:b6:33:61:6a:68:77:c6:
48:eb:6c:b2:fa:f5:5a:48:50:ff:68:4c:5a:18:72:79:8b:79:
cb:8a:c2:07:7d:6f:7a:f5:ef:ff:68:c6:57:d5:ee:02:35:9b:
3e:49:01:ea:ca:1b:f2:cb:79:ab:c5:78:86:71:1b:80:c5:77:
03:df:50:24:4b:a6:8b:97:31:a6:01:4b:0b:06:78:34:13:a7:
21:a1:d6:21:07:14:98:1d:fa:98:06:d8:ca:79:e1:a4:c1:a8:
7d:28:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:25 2026 by rpki-client