Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5aoGoBKoxnmX-WsdUlNt8qN2V1c.roa
File: 5aoGoBKoxnmX-WsdUlNt8qN2V1c.roa (raw, json)
Hash identifier: ez4LMBrftdn6YVuUfQp2w5uHSGnrLkLpKjvn0AYca5w=
Subject key identifier: E5:AA:06:A0:12:A8:C6:79:97:F9:6B:1D:52:53:6D:F2:A3:76:57:57
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A01B38942CB5467D83B4E62100935D030E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5aoGoBKoxnmX-WsdUlNt8qN2V1c.roa
Signing time: Wed 19 Aug 2026 18:11:27 +0000
ROA not before: Wed 19 Aug 2026 18:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 79.183.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:38:94:2c:b5:46:7d:83:b4:e6:21:00:93:5d:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 19 18:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5aa06a012a8c67997f96b1d52536df2a3765757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:5d:14:6c:ab:b4:8e:8b:1b:d6:e8:4f:ce:
4a:88:91:e7:d8:30:bb:1c:59:89:75:0d:c3:2a:95:
5c:c7:dd:0e:4a:64:f5:ce:dd:66:52:97:8d:81:98:
45:ed:d7:de:9c:eb:15:c8:1e:3d:d0:6e:19:55:68:
f5:a0:4b:c8:4d:5e:d2:f6:e8:08:55:2a:15:c3:8a:
9c:1d:47:a4:8c:e7:aa:8e:3e:a1:15:81:9b:61:88:
69:1e:52:61:c8:76:c3:74:72:b6:15:0a:1f:46:e8:
13:5e:36:62:7f:2b:05:39:ac:3c:42:ba:6a:5c:60:
47:06:11:50:58:fe:63:a4:f8:17:78:da:45:52:12:
64:e2:e4:b0:8a:ae:2c:58:a3:97:9e:10:10:61:3c:
fb:00:5b:28:58:bd:fd:61:bb:ae:8e:3a:9e:61:9c:
3c:97:3d:cc:ad:fb:83:91:49:e3:19:2a:e3:81:85:
ab:e4:c1:b6:0c:41:8f:fd:2c:cd:ae:99:3c:43:49:
c0:82:b2:b6:c2:0b:f3:05:e4:9c:10:c8:94:f1:3d:
28:61:50:84:fa:e9:7a:14:64:65:5c:4b:13:a1:0b:
b6:80:c1:58:23:85:d7:16:b8:ff:9c:f1:dd:ac:86:
c5:b5:c6:af:ef:0b:b7:65:0b:65:68:5e:51:b1:af:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AA:06:A0:12:A8:C6:79:97:F9:6B:1D:52:53:6D:F2:A3:76:57:57
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5aoGoBKoxnmX-WsdUlNt8qN2V1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.247.0/24
Signature Algorithm: sha256WithRSAEncryption
18:01:3a:f0:3e:1d:df:61:cb:5d:19:88:ff:50:14:5f:f8:fb:
11:6e:18:a9:27:2c:e4:65:9a:53:b8:28:d1:7b:72:e8:70:66:
7b:01:ea:16:c8:11:50:fb:4f:41:f5:b8:44:68:c1:2a:88:d7:
96:e9:5d:0c:1c:4f:59:e9:37:5d:e8:01:e8:e1:85:f0:e5:71:
94:f2:d7:ce:67:e7:40:43:c4:93:b7:f4:9c:59:9c:39:51:b8:
5b:26:9e:53:f0:9d:40:75:b6:e7:6b:40:64:5a:92:20:eb:97:
af:41:1e:03:75:fa:5a:1a:5d:f8:ac:17:16:a6:65:ba:d8:ba:
5a:28:3f:32:09:11:92:8b:58:0c:1f:1a:1c:ac:b6:3e:3b:6a:
74:dc:7a:6f:a5:7a:be:b0:17:a7:7b:ef:77:9b:f7:26:72:de:
38:7f:e1:6a:17:83:78:2a:b7:a7:b4:77:14:9e:1a:0b:b1:5e:
18:cd:10:7d:d8:cd:da:49:05:08:a5:95:32:c7:ed:03:6c:66:
54:75:ee:cd:b8:c7:21:86:c0:b9:ff:b3:87:1e:77:60:01:23:
1c:4d:a0:0a:df:51:b3:bd:eb:cb:99:be:00:05:3a:48:8a:a6:
34:ae:cb:08:bf:60:4b:f5:d7:42:07:bf:44:78:6e:40:6b:ac:
e8:01:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:17 2026 by rpki-client