Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/5pcjEADm1RHiqFq1dxcjeXGxehU.roa
File: 5pcjEADm1RHiqFq1dxcjeXGxehU.roa (raw, json)
Hash identifier: myWAo5bkaIqfmbA3wHG7QfiRigY77Sd9xUJEOjhnP0M=
Subject key identifier: E6:97:23:10:00:E6:D5:11:E2:A8:5A:B5:77:17:23:79:71:B1:7A:15
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E2140D261315B97838434626FF1B7C584
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/5pcjEADm1RHiqFq1dxcjeXGxehU.roa
Signing time: Wed 13 May 2026 12:12:36 +0000
ROA not before: Wed 13 May 2026 12:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204794
IP address blocks: 189.13.116.0/24 maxlen: 24
189.13.117.0/24 maxlen: 24
189.13.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:40:d2:61:31:5b:97:83:84:34:62:6f:f1:b7:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: May 13 12:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e697231000e6d511e2a85ab57717237971b17a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:0a:53:13:54:06:41:01:9e:de:1d:a7:b4:
f4:6f:0b:46:17:7a:98:05:53:37:ed:c9:8b:cd:fa:
2d:ca:5c:9e:bf:6f:bb:ce:09:d6:0b:95:95:9a:e5:
7b:ba:1d:83:81:9f:a5:d4:ce:2c:e4:f1:8e:ab:9a:
27:2d:14:66:40:c7:35:44:82:25:d8:d3:47:ab:75:
b1:f7:39:12:46:41:5f:89:a6:ed:9f:55:1a:c9:99:
86:06:9d:57:3d:55:48:3d:e7:7c:59:4f:93:d9:9e:
bf:e7:55:0e:fa:6a:ed:3d:3b:1c:5e:1c:a1:33:eb:
04:b2:45:b3:3d:be:79:13:12:09:44:bb:9b:94:13:
82:78:f6:01:93:40:75:2e:8b:0e:5b:69:9d:bc:43:
fe:07:ae:ec:21:c8:73:1d:30:73:41:53:9a:59:78:
41:00:80:1b:ac:a2:fe:e2:22:20:a3:00:ad:47:34:
db:5c:b5:d6:1c:4c:0f:5d:35:6d:98:23:25:6f:59:
21:71:85:77:8b:05:0c:79:08:f2:25:ac:d9:e5:b2:
09:97:d6:bc:78:6b:15:1a:3e:93:43:7e:91:09:b9:
68:98:2a:d4:7e:a2:78:1e:4e:7a:f8:eb:9f:f4:f0:
93:c7:7b:df:00:9b:76:7c:c5:88:61:06:0f:88:10:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:23:10:00:E6:D5:11:E2:A8:5A:B5:77:17:23:79:71:B1:7A:15
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/5pcjEADm1RHiqFq1dxcjeXGxehU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.116.0/23
189.13.119.0/24
Signature Algorithm: sha256WithRSAEncryption
02:12:6f:3c:d0:ee:ea:e2:4e:df:f7:35:43:11:ba:58:dd:8f:
40:ab:95:bc:10:21:3c:0e:98:cf:b0:8a:60:c8:39:10:f2:78:
07:22:96:b5:73:5f:a4:cb:74:5e:61:19:84:29:d6:ed:d9:82:
e9:84:c1:7b:15:24:13:5a:99:49:d8:e6:3c:60:97:ce:3a:ca:
f6:0b:e4:a0:27:e6:b6:ab:8d:f9:23:61:c3:0c:26:db:a7:20:
b6:a1:eb:ac:1d:a0:dd:14:b3:a4:b4:96:e0:c4:52:81:95:29:
c9:72:57:46:79:6c:06:4d:58:73:62:45:72:80:7b:7d:7b:d5:
66:b0:f5:85:c4:52:fc:75:f6:8c:ce:31:41:18:63:6e:fc:d9:
0a:70:b2:63:b0:7b:39:43:50:a8:bd:e9:d6:a4:e0:a3:ff:bf:
54:62:e9:f5:69:68:53:87:a0:6e:d2:71:cb:24:29:46:7d:48:
e0:e4:0a:83:8e:f1:c7:84:81:3a:50:27:52:af:3f:3f:86:35:
3e:1b:17:5d:7f:fb:a3:b9:c9:10:53:9c:41:ef:26:89:2c:4f:
15:16:be:fb:f6:dc:b0:b1:b9:6c:50:62:af:34:cf:b5:c8:07:
f5:2f:87:a5:5d:09:40:c5:2a:9d:bf:1e:a0:ea:16:e0:9e:03:
74:ec:c3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:00:00 2026 by rpki-client