Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/P0UZQcqQFeFd31esWzhbJyPxc1Q.roa
File: P0UZQcqQFeFd31esWzhbJyPxc1Q.roa (raw, json)
Hash identifier: PqtbhzXwVaopUYj/wDKEMuzXxvUaSyCF1aaRbCQoM4Q=
Subject key identifier: 3F:45:19:41:CA:90:15:E1:5D:DF:57:AC:5B:38:5B:27:23:F1:73:54
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A0F7E29EFCA64DFF6B881E3815B4B5D87E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/P0UZQcqQFeFd31esWzhbJyPxc1Q.roa
Signing time: Thu 01 Oct 2026 14:33:39 +0000
ROA not before: Thu 01 Oct 2026 14:33:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214790
IP address blocks: 5.189.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:e2:9e:fc:a6:4d:ff:6b:88:1e:38:15:b4:b5:d8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 1 14:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f451941ca9015e15ddf57ac5b385b2723f17354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:18:bc:8a:34:14:6b:02:e3:eb:38:6d:a6:
5e:e7:e6:39:67:5d:14:b9:ae:6e:d9:e6:e7:4b:5c:
bc:ba:69:b5:cc:71:61:aa:89:c8:68:fa:af:b6:f6:
b1:2c:33:5d:07:03:48:e5:25:81:11:60:ad:41:69:
aa:3d:33:67:a2:cb:48:3b:f4:d7:4d:b6:3e:b0:01:
fa:bc:f6:f9:9e:70:89:83:1c:86:7c:3c:d3:02:30:
6f:56:cf:6b:d5:dd:7f:36:8a:10:f0:25:28:43:09:
5c:6f:85:cd:dd:ce:e0:e3:25:a7:5c:af:d0:5e:61:
09:9c:90:39:68:36:91:41:39:2f:16:38:d4:b2:7b:
3a:f9:16:fd:1e:1e:6c:80:60:d3:83:d1:3a:28:3e:
3a:a0:dc:f4:db:43:b3:c7:58:be:32:ae:c2:0e:28:
a5:50:48:8c:e3:37:b1:65:9e:98:13:68:a7:3d:54:
50:84:c8:a0:fe:81:be:e0:80:00:6a:56:0c:ef:8e:
c8:c2:0c:a1:ac:3b:9e:4f:79:43:7f:2e:da:e5:6e:
c2:0e:ed:ea:92:2c:75:ec:64:a3:46:6e:48:0f:61:
b6:b3:cf:92:b6:cf:c6:67:48:5c:50:41:c5:cc:de:
0a:fd:ce:24:f2:8b:01:a4:8a:19:4e:6e:61:f5:c6:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:19:41:CA:90:15:E1:5D:DF:57:AC:5B:38:5B:27:23:F1:73:54
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/P0UZQcqQFeFd31esWzhbJyPxc1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.189.254.0/24
Signature Algorithm: sha256WithRSAEncryption
05:37:8c:cb:1d:26:5d:a0:02:2d:c5:d2:ef:9a:f6:05:40:cb:
ea:ab:60:73:82:c7:58:7d:fb:55:c3:b9:92:ae:d6:75:e6:bd:
16:94:8d:93:ec:9b:d0:b5:81:7f:8c:0e:3e:39:2d:aa:ae:ff:
3e:d0:17:60:15:42:8f:72:8d:59:3f:11:15:f9:86:6e:93:d6:
6a:65:ab:22:88:43:c1:61:03:37:98:7b:0a:d4:db:53:e8:d9:
e0:46:5a:a7:57:1c:ed:b3:a1:3e:27:54:43:22:8f:62:76:47:
bf:f7:ed:d2:7b:a7:9f:8e:12:33:d2:76:da:f1:db:83:30:f2:
cf:b1:83:89:44:8d:8b:be:9e:71:dd:ee:22:26:ce:b4:4b:a8:
2f:b3:4f:24:9c:a5:9d:99:8e:26:30:12:c4:c7:15:41:19:6c:
ee:46:c8:ff:07:49:e2:02:d1:88:0c:23:18:e2:2b:55:cc:f4:
70:84:72:c5:f3:6c:b4:a6:b3:a9:19:70:fc:7b:ab:06:13:36:
22:f0:97:4d:cf:ff:6d:bc:79:1a:99:23:c8:22:4d:06:b6:dd:
f5:c6:46:b6:55:e4:68:91:37:48:c6:5f:20:d5:03:a2:a6:eb:
1f:37:7f:65:f2:b1:52:8f:e3:22:9c:f8:87:1e:d7:58:f5:b2:
42:b0:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:37 2026 by rpki-client