Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/5kZfpCISDtXDG01tN75cWdZCcyU.roa
File: 5kZfpCISDtXDG01tN75cWdZCcyU.roa (raw, json)
Hash identifier: m9K91uk4L4gmlk6pSCNv5Mr4Izdl/Qvz+PjHK3bfJGs=
Subject key identifier: E6:46:5F:A4:22:12:0E:D5:C3:1B:4D:6D:37:BE:5C:59:D6:42:73:25
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A145BDFBCDDFAB0283886CFF2827BBC5EC
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/5kZfpCISDtXDG01tN75cWdZCcyU.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198130
IP address blocks: 45.140.6.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
193.160.73.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fb:cd:df:ab:02:83:88:6c:ff:28:27:bb:c5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6465fa422120ed5c31b4d6d37be5c59d6427325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:80:8f:4e:2a:d2:c7:f9:fe:ff:4f:66:40:
77:70:b8:d0:1b:99:92:08:ef:85:ec:8a:3f:df:bd:
c4:fa:90:82:24:2c:90:88:34:f6:f8:75:aa:42:71:
ce:c4:f9:c4:3d:b2:91:be:69:08:95:29:9c:ad:45:
c4:ed:49:95:cc:77:07:96:55:84:84:87:6a:f8:16:
90:bc:68:46:97:9f:26:3d:40:6f:7f:8f:f1:cd:f8:
ea:83:df:25:6f:cd:d6:d9:b5:3c:e0:6c:fc:7b:9b:
c6:3f:6d:24:b6:e1:1e:54:db:f6:16:1c:43:65:7b:
b9:34:20:2c:b4:10:8d:a7:d3:c2:66:89:e1:55:10:
48:06:2e:e4:90:0d:bd:85:b5:61:36:ff:c5:00:de:
4c:cb:84:85:59:56:d2:23:99:d2:6a:d8:5d:a0:c2:
ed:e3:09:bf:b3:3b:26:a6:d3:2e:b7:87:eb:a1:c2:
fe:95:0f:d7:8a:d0:53:99:3f:3c:1d:f5:b2:da:fb:
90:f5:5b:f8:7b:c6:46:1a:c3:2a:d3:94:5f:ad:a3:
d0:58:93:a0:b8:40:c6:f9:fc:c7:27:f8:db:b9:65:
93:82:9f:c2:b2:cc:2d:cb:84:13:37:04:e7:7f:30:
78:63:bb:8f:a9:6c:80:bc:cd:43:f8:1d:70:ce:84:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:46:5F:A4:22:12:0E:D5:C3:1B:4D:6D:37:BE:5C:59:D6:42:73:25
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/5kZfpCISDtXDG01tN75cWdZCcyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.6.0/24
93.177.93.0/24
193.160.73.0/24
194.28.158.0/24
212.69.132.0/24
Signature Algorithm: sha256WithRSAEncryption
34:32:6f:33:a1:b7:30:8c:ae:f1:94:98:f9:4b:8f:26:03:75:
fb:71:89:57:85:8c:7b:49:d7:0c:3a:e0:28:da:fb:63:ce:84:
69:38:4b:35:d1:9b:d8:d5:ea:63:5c:38:ee:29:16:41:99:6e:
ae:01:f4:2d:77:cd:ff:97:a6:bc:17:9a:c2:f6:cd:75:d8:47:
05:30:35:98:85:8c:22:f7:25:a8:ec:3b:c2:cc:38:66:93:c9:
a4:67:bb:d6:0e:dd:48:0b:f1:06:ea:a4:88:98:00:09:1a:3b:
5c:c6:9d:2b:a5:da:bd:ba:ad:36:0d:57:4d:22:a1:3c:8f:f4:
20:43:69:fc:c3:42:92:17:71:c4:2b:29:28:8e:29:b2:96:a1:
46:2a:8e:e3:1c:d5:9a:07:b2:9c:4d:b1:04:5c:b6:55:d3:4b:
36:13:c5:03:c4:ae:48:80:bb:0e:4e:62:58:c9:f5:86:41:2d:
42:44:76:45:d6:54:87:13:f1:93:ee:7a:fa:f2:1e:61:29:49:
40:f0:5f:35:07:a6:1f:2f:7f:93:a1:79:5f:e1:8a:8d:ed:92:
60:7d:d6:b3:e4:ff:e4:0e:d7:24:de:dc:82:2e:7f:83:70:fb:
cf:08:65:77:04:eb:7f:18:c7:7b:f4:b9:0b:d1:bf:21:6c:7c:
88:61:1b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:27 2026 by rpki-client