Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/p5QtUDUOXRCHEi75VPDwcQNdTZk.roa
File: p5QtUDUOXRCHEi75VPDwcQNdTZk.roa (raw, json)
Hash identifier: X0pIlV9euFff1IdP2cwi41n9OTYkfNV7NgihjfP7w30=
Subject key identifier: A7:94:2D:50:35:0E:5D:10:87:12:2E:F9:54:F0:F0:71:03:5D:4D:99
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A07B5052F8D258D580F8BB94B63B265162
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/p5QtUDUOXRCHEi75VPDwcQNdTZk.roa
Signing time: Mon 07 Sep 2026 10:00:56 +0000
ROA not before: Mon 07 Sep 2026 10:00:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 194.64.88.0/24 maxlen: 24
194.163.71.0/24 maxlen: 24
195.180.148.0/24 maxlen: 24
195.180.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:50:52:f8:d2:58:d5:80:f8:bb:94:b6:3b:26:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 7 10:00:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7942d50350e5d1087122ef954f0f071035d4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:fe:34:c4:1a:23:00:52:bf:13:d7:3c:fd:
d0:e7:e0:c1:5b:dd:ac:e5:79:e0:43:2c:ba:c3:0f:
20:5e:6e:5b:57:36:34:46:ef:be:6b:8b:6d:c5:98:
d9:96:7e:ac:a9:8a:5c:66:bc:ee:96:d7:7f:a2:f7:
ee:a2:69:ef:b3:25:56:77:1b:56:5b:44:3a:34:f9:
76:93:cd:34:bf:71:ba:c3:f0:bd:03:72:10:2e:08:
69:6b:4d:08:3e:39:9e:9d:7b:50:27:bd:ce:f0:ab:
da:d4:55:26:60:a0:55:9b:ea:38:47:e6:c5:4f:79:
64:9d:f9:a0:4d:76:ee:e4:2b:f6:fd:da:bd:f1:02:
19:da:f5:83:d2:c6:35:5c:03:de:1a:47:ff:a5:7e:
07:dc:a8:8f:a1:f0:f3:c1:56:f2:e8:8b:5f:57:c2:
d8:11:a1:64:d7:b1:a2:66:08:46:f4:3b:f4:42:1d:
18:36:0e:06:db:2c:fe:76:ac:ad:59:8c:1e:fe:f8:
ba:c5:90:9e:51:48:ea:ce:dc:6f:fa:63:0d:6e:d9:
9c:e1:bf:0e:38:a2:f5:c7:c3:c9:37:a7:fd:c6:e4:
ab:c3:8d:02:cb:dc:f4:e4:35:73:73:2c:c7:f5:6f:
f9:77:66:fd:75:f9:bf:79:f5:6b:4e:f1:48:59:8a:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:2D:50:35:0E:5D:10:87:12:2E:F9:54:F0:F0:71:03:5D:4D:99
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/p5QtUDUOXRCHEi75VPDwcQNdTZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.88.0/24
194.163.71.0/24
195.180.148.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:47:fa:3b:ec:b2:f8:28:15:20:f7:e8:75:fa:c4:1c:ae:37:
df:0a:1e:16:86:7a:ec:12:d6:8c:8c:9f:62:0e:5d:88:06:e2:
c9:9d:5a:07:c9:05:f1:46:53:8c:cc:d3:3d:2a:dd:67:62:11:
0a:51:b3:7f:ee:9f:c8:a3:87:b6:2f:82:07:b7:8d:d1:4d:4c:
ad:9c:7c:3d:46:c0:6b:ed:c7:e2:ba:c0:22:90:ba:92:63:bf:
a5:2d:19:0d:d3:3e:64:92:b2:6b:eb:1f:a7:b9:c7:49:2d:9c:
3c:c4:47:60:b1:e0:6e:c1:6a:3b:22:6e:3e:25:ee:53:41:1e:
eb:70:7a:86:cb:45:88:93:8c:60:ba:96:62:f7:ef:aa:9c:21:
f6:0c:30:89:7a:ab:70:4b:2b:0d:51:10:c9:81:cf:31:4a:e1:
a7:31:a3:27:c3:85:28:b7:63:9e:b0:43:0b:48:a9:bc:57:f2:
71:30:2b:f7:61:55:1e:5b:b9:cc:c7:50:ab:a3:e8:6d:70:10:
e9:ab:3f:80:7a:89:48:59:14:f0:06:ba:4a:b2:ad:bd:68:55:
c2:f8:55:59:d9:16:bc:89:35:95:5d:b0:cd:9c:56:40:25:24:
45:2d:7d:43:0d:fb:85:22:52:52:01:16:20:0b:48:e5:e2:c0:
c3:5d:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:27:53 2026 by rpki-client