Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/5IGkS-SPPNrJqQTvuCzGZItfdmI.roa
File: 5IGkS-SPPNrJqQTvuCzGZItfdmI.roa (raw, json)
Hash identifier: bztepUTAX03w7M+nSyLqDj9U6yAnTCS2QiNsYuhc6yM=
Subject key identifier: E4:81:A4:4B:E4:8F:3C:DA:C9:A9:04:EF:B8:2C:C6:64:8B:5F:76:62
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 019DA164A42FE3635FB5638796C2E3A3F05C
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/5IGkS-SPPNrJqQTvuCzGZItfdmI.roa
Signing time: Sat 18 Apr 2026 16:20:20 +0000
ROA not before: Sat 18 Apr 2026 16:20:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213636
IP address blocks: 92.42.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:64:a4:2f:e3:63:5f:b5:63:87:96:c2:e3:a3:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Apr 18 16:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e481a44be48f3cdac9a904efb82cc6648b5f7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:8f:87:51:d5:27:52:cb:c2:73:a5:2d:d0:
41:ef:1e:ac:07:c2:4a:09:29:ed:85:a2:ce:74:db:
4c:bc:91:e6:7c:61:96:0e:a5:cf:b0:1e:1f:cc:cc:
15:cb:85:29:e0:10:51:24:f4:c7:04:df:5c:6a:f0:
3d:16:31:67:1a:6e:1c:1e:20:1f:a5:3f:fe:26:ab:
bd:6b:b0:2a:d2:56:42:aa:38:8d:43:1f:4d:67:5a:
1b:fc:9e:8a:26:e1:e7:84:cd:a3:8a:86:aa:a2:5b:
d1:d1:7f:04:30:a8:14:a6:29:1e:06:1f:6c:36:94:
62:ab:fc:89:d1:25:23:46:af:c9:56:4a:ca:cf:7e:
39:8d:1b:07:1e:c9:6d:37:5a:ec:63:68:af:1f:5d:
da:63:30:00:18:f0:51:29:11:ad:84:c0:6c:98:01:
22:20:6e:98:6f:f3:ca:d0:be:bc:07:12:aa:ac:d4:
ea:16:2f:36:96:4e:ef:7a:74:ee:ff:58:86:71:1c:
22:93:db:c6:d6:25:a2:be:d0:0e:2f:fe:ae:f9:6b:
7a:1f:f0:0d:a9:eb:9e:ca:43:39:7c:b7:96:9f:ad:
02:af:43:02:cd:29:5c:a2:ad:98:f7:c3:e0:71:50:
3c:37:f9:a7:7a:c9:24:9e:f5:d2:df:ad:1e:cf:2c:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:81:A4:4B:E4:8F:3C:DA:C9:A9:04:EF:B8:2C:C6:64:8B:5F:76:62
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/5IGkS-SPPNrJqQTvuCzGZItfdmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:64:c8:25:68:44:23:c4:88:d1:f7:95:70:d3:bc:41:ab:fe:
c2:ac:df:d0:35:e4:5c:31:ae:ed:44:ec:3c:04:20:e8:e4:62:
bd:8e:36:5a:a5:0f:c5:37:34:61:f9:7a:00:86:0b:e5:07:f0:
35:7a:22:42:aa:ea:e4:20:4b:84:72:3e:07:73:d9:35:21:63:
5f:0f:52:41:b0:26:fd:94:16:d6:93:b6:05:56:ae:17:5a:97:
ed:75:1c:55:45:54:7b:dd:a9:c6:e1:b7:eb:96:c8:10:39:0f:
90:67:47:9e:cf:3c:c4:e5:1c:43:e6:ba:fa:cf:ed:2b:85:97:
a1:8f:2c:35:e6:4d:d8:0c:c1:36:28:09:1e:64:8c:99:ca:d4:
10:ff:5c:bb:e7:8d:90:a3:4c:e1:b7:07:6b:2d:96:21:37:4c:
4b:69:e3:4b:8f:ab:e6:63:0a:bf:a5:ed:e3:fc:e8:d9:b7:31:
98:91:e0:bc:20:d2:a1:db:8c:7b:12:ea:fd:c7:ed:83:92:1a:
56:2d:67:64:f7:14:9b:d3:27:c4:9c:c2:53:42:d4:a4:95:35:
f8:87:7c:b7:bf:e5:d1:53:cb:9d:18:de:64:3b:02:28:99:94:
8b:43:e0:68:14:b8:31:ba:0c:5f:4e:84:a7:ed:ff:a8:6c:85:
15:6c:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:29:49 2026 by rpki-client