Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/5-J1fvpVb5dSg5m7dEENTI_oJOo.roa
File: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (raw, json)
Hash identifier: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=
Subject key identifier: E7:E2:75:7E:FA:55:6F:97:52:83:99:BB:74:41:0D:4C:8F:E8:24:EA
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 019DDD1E625EFA820F61BB2A9BE0ECE7AA2B
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/5-J1fvpVb5dSg5m7dEENTI_oJOo.roa
Signing time: Thu 30 Apr 2026 06:40:49 +0000
ROA not before: Thu 30 Apr 2026 06:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215524
IP address blocks: 89.237.143.0/24 maxlen: 24
212.24.237.0/24 maxlen: 24
212.24.239.0/24 maxlen: 24
212.24.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:1e:62:5e:fa:82:0f:61:bb:2a:9b:e0:ec:e7:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Apr 30 06:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e2757efa556f97528399bb74410d4c8fe824ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:fa:32:08:88:56:94:23:ea:70:83:6a:9d:
27:2e:b2:d1:bd:22:fd:ac:54:96:a1:4c:fb:b2:48:
a2:2f:12:05:ba:d0:1b:de:99:ad:22:6c:fb:5c:d7:
68:03:85:90:11:27:8f:09:8d:7b:c7:3f:f1:bc:a3:
35:db:80:a6:3f:cf:2e:a4:a5:2e:1c:87:b9:66:c0:
aa:34:ee:e0:0b:16:2e:a2:ed:e9:2f:84:61:64:c4:
db:62:67:69:02:1f:03:b0:6a:49:27:9a:32:17:6c:
ea:ed:ee:da:e4:89:54:e5:0d:e0:38:10:f2:fd:5b:
1f:c9:e6:2f:f9:62:9f:f5:97:5c:9d:6c:be:59:12:
23:a7:99:28:5c:48:39:d3:d3:fa:db:5f:b0:83:7c:
7e:2a:1a:d4:cd:ec:35:60:6d:aa:bb:ef:a1:87:89:
45:ab:d5:85:33:33:78:80:63:8d:9c:95:d1:6a:ae:
7e:4e:cc:58:26:21:6c:25:01:b3:23:81:7f:c8:fc:
df:61:f2:cc:fc:c2:61:3e:80:91:e3:45:e6:8e:0b:
6b:9e:34:68:65:9a:24:eb:7c:3a:05:7e:4f:39:fe:
d8:80:ac:aa:83:d6:c3:11:e0:a4:57:65:36:b0:c9:
c2:23:bb:34:d1:e5:42:ef:74:ae:1e:47:91:f0:26:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:75:7E:FA:55:6F:97:52:83:99:BB:74:41:0D:4C:8F:E8:24:EA
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/5-J1fvpVb5dSg5m7dEENTI_oJOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.237.143.0/24
212.24.237.0/24
212.24.239.0-212.24.240.255
Signature Algorithm: sha256WithRSAEncryption
7f:5b:7b:ef:c9:fc:d9:39:32:a7:4f:36:95:73:97:50:29:88:
7a:55:44:44:83:39:61:0b:f5:f0:86:04:c3:33:0a:a9:9a:91:
5b:75:7c:1d:d3:59:c4:63:bd:bf:37:11:e7:76:17:f7:d8:ad:
a8:e3:05:a5:eb:33:6e:3b:1d:19:1f:ac:7b:66:21:9d:35:41:
a6:b7:2f:50:bb:1f:04:a0:47:0b:50:36:5e:80:f7:da:f8:d7:
ad:99:58:bd:d8:79:1f:70:51:7a:08:cd:11:e4:f0:39:ce:f3:
a8:40:c9:65:6b:0e:50:06:54:fd:03:5e:bc:f7:8c:46:1e:43:
6a:4b:d8:87:10:e6:f6:77:da:a7:f6:a1:72:99:8a:18:23:f7:
9a:de:93:9a:c8:ae:16:07:96:ac:4b:d3:56:3b:d0:72:2f:11:
4a:b5:02:5e:60:76:50:1e:86:3c:3c:8c:0d:54:b9:34:c2:f0:
04:d0:fc:b2:09:7a:71:a3:64:4f:fd:23:f7:c5:fb:97:f0:06:
3f:f7:cb:6b:74:15:c6:a4:c3:68:b4:c2:5f:6b:be:05:17:55:
a4:b2:4b:0b:2f:48:2b:be:91:f0:36:09:4d:bc:3f:4d:12:e4:
83:03:9e:a4:68:73:fb:08:70:4d:42:5c:a5:df:79:6b:63:27:
a9:0a:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:21:09 2026 by rpki-client