Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/5nQHzp2bWOOq1QlQv4Q6zOgqpDs.roa
File: 5nQHzp2bWOOq1QlQv4Q6zOgqpDs.roa (raw, json)
Hash identifier: rbT/McNH98WT/lzZD0xMkWEpvNlWYmoa9Bk1M0o54JI=
Subject key identifier: E6:74:07:CE:9D:9B:58:E3:AA:D5:09:50:BF:84:3A:CC:E8:2A:A4:3B
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01A038883CE2361B1F8A44166E502831B5DF
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/5nQHzp2bWOOq1QlQv4Q6zOgqpDs.roa
Signing time: Tue 25 Aug 2026 10:47:27 +0000
ROA not before: Tue 25 Aug 2026 10:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 2a12:a800:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:88:3c:e2:36:1b:1f:8a:44:16:6e:50:28:31:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Aug 25 10:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e67407ce9d9b58e3aad50950bf843acce82aa43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:6c:7d:ee:ac:d0:ff:c8:28:bb:92:e1:5d:
25:7d:a8:64:65:c8:b3:49:7f:27:b5:c4:df:73:55:
0f:51:71:a9:7e:3b:21:c8:e6:40:06:99:56:f7:98:
cd:03:91:bd:38:b2:44:71:5e:0d:0b:f4:54:bb:f3:
fe:df:65:b1:b3:8d:8d:ef:c4:ce:de:c1:1f:9f:ac:
29:1e:ab:ea:5a:1e:b8:69:08:cf:fa:7f:b2:bd:73:
a3:4a:cd:c8:91:8b:21:51:b3:2d:5c:ae:de:3c:88:
8c:f0:4e:73:35:c7:a7:ca:97:66:b5:e2:75:6e:32:
e2:54:a0:b7:d9:10:b9:b7:cc:2c:87:eb:a4:00:2c:
ec:b9:27:25:53:00:a5:dd:a5:ff:2f:74:94:62:9f:
2d:bc:f7:2f:1d:e7:80:d0:37:8d:b8:d1:00:47:d5:
ca:7a:65:70:71:c5:25:6d:2e:c1:be:7f:5e:0b:ef:
32:a6:9f:88:69:ac:16:f4:36:2f:bd:8f:2f:12:98:
a8:0c:63:0c:4e:b6:be:29:c8:73:13:37:72:84:cb:
6d:95:d5:e8:3e:89:05:d5:ab:68:a2:3d:78:68:6d:
cc:77:1a:43:44:8c:51:29:45:94:1f:77:d6:fd:82:
e6:95:b6:8a:ae:c5:bb:72:09:b6:d6:ca:ee:8c:71:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:07:CE:9D:9B:58:E3:AA:D5:09:50:BF:84:3A:CC:E8:2A:A4:3B
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/5nQHzp2bWOOq1QlQv4Q6zOgqpDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a800:11::/48
Signature Algorithm: sha256WithRSAEncryption
33:62:8b:1b:69:26:e6:66:e2:45:37:5a:2c:5d:05:d0:52:e8:
b0:25:bd:cf:66:78:5c:70:f4:d2:c9:f9:0e:e6:f6:a5:74:13:
b4:f0:08:8e:11:44:9d:03:76:1b:96:a3:4f:9a:0c:a9:d9:db:
da:80:94:c5:51:23:bb:27:86:a2:aa:4d:d4:46:4f:c3:9f:22:
9b:08:60:e1:4c:a7:13:5f:ea:b8:1d:89:0f:b9:e1:50:b0:0f:
2f:93:f9:5a:4d:be:50:ac:69:43:ad:d5:e3:ed:be:4e:41:1f:
de:be:53:21:d5:b5:b0:27:d0:47:22:f5:ab:48:97:2f:07:81:
0f:ce:70:3e:42:bd:cc:b4:3c:69:d3:fe:ca:43:04:29:b5:e1:
f6:f7:84:fe:d1:63:16:f0:25:ad:d8:26:72:cb:50:b1:0a:e9:
6e:66:62:15:b6:c2:06:b9:45:b3:47:6f:6b:f6:79:b7:0c:7e:
d6:0e:a4:51:2e:25:d8:45:47:af:7b:90:28:02:dc:73:27:ea:
fd:7a:4c:ce:c4:ad:39:1f:31:60:01:03:d1:de:58:59:c4:05:
82:80:a5:04:22:89:ea:ec:93:ea:8c:6d:45:6c:a2:82:10:b4:
65:fd:b9:82:ba:20:ab:37:42:c8:8e:61:7d:b3:eb:18:b7:9c:
32:49:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:38 2026 by rpki-client