Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/g5tK-NhdLFbNwNCXy9704K9Mv90.roa
File: g5tK-NhdLFbNwNCXy9704K9Mv90.roa (raw, json)
Hash identifier: J1OULmtzBu0kBtNx5era8AQvsMTFD0SMOiAoUJQU4lE=
Subject key identifier: 83:9B:4A:F8:D8:5D:2C:56:CD:C0:D0:97:CB:DE:F4:E0:AF:4C:BF:DD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019E3E80ED74B77BD8D21A572611AFC5E105
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/g5tK-NhdLFbNwNCXy9704K9Mv90.roa
Signing time: Tue 19 May 2026 04:31:36 +0000
ROA not before: Tue 19 May 2026 04:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 88.216.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:80:ed:74:b7:7b:d8:d2:1a:57:26:11:af:c5:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 19 04:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=839b4af8d85d2c56cdc0d097cbdef4e0af4cbfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:9c:28:ff:b9:89:50:7f:52:23:5d:8c:af:
7f:d0:52:a0:ea:17:d5:93:f0:a8:f1:71:7f:dd:ff:
81:2d:70:1f:79:02:0d:e6:7d:91:b9:ac:de:78:1c:
7e:5b:da:2d:43:54:4d:cf:2a:e2:93:4a:8d:58:76:
98:56:d7:17:09:00:b6:43:30:82:ac:5a:66:e7:a8:
a3:7a:21:54:16:c3:4a:a8:a9:e6:94:8c:9f:c8:e5:
1f:b7:62:55:90:74:c0:ed:f9:fa:22:6e:20:9f:68:
89:5f:db:89:e8:6c:75:10:e5:18:04:37:df:0d:31:
c6:3c:d4:51:38:81:37:89:d8:55:b4:d8:e9:6f:32:
00:1a:19:4c:bb:82:73:8c:ef:93:cb:c1:ad:5d:78:
d4:86:c4:18:0a:64:ce:92:bc:d2:dd:04:7e:7e:1c:
83:25:93:bc:2d:bd:ad:d5:f0:35:d2:62:3f:43:d0:
d4:bc:76:72:92:97:37:61:21:da:90:9f:e5:cb:e5:
f3:a0:8d:34:1e:b5:4a:6b:b0:76:47:66:2f:14:30:
10:c8:b5:45:ad:a4:94:e8:e8:55:8f:a2:e6:08:15:
4d:7f:83:92:c7:b3:94:7e:49:bb:cb:96:4f:ad:ba:
60:f4:a6:bb:41:4f:6e:ec:f4:7d:b2:6e:07:e4:63:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:4A:F8:D8:5D:2C:56:CD:C0:D0:97:CB:DE:F4:E0:AF:4C:BF:DD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/g5tK-NhdLFbNwNCXy9704K9Mv90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:54:bf:45:3e:1f:49:8e:e9:14:28:ee:6c:99:a5:2f:db:77:
1f:c8:26:f9:a4:e3:ed:ec:79:92:9d:ea:65:5a:4f:71:60:5f:
94:f6:ad:54:a3:5c:1b:bf:8d:ee:55:a7:87:bf:34:85:52:fb:
5e:51:8a:1d:f1:19:97:98:11:0b:fe:a5:48:73:91:a8:6b:f7:
db:0a:f1:b1:5b:4b:ad:13:93:04:40:72:93:24:59:1c:ab:fb:
7e:2c:c4:c5:d5:ea:8b:79:a5:d9:66:00:d3:03:52:92:f6:34:
de:81:f7:5a:31:98:9c:84:6f:98:a3:de:36:47:ba:24:3a:19:
b9:28:14:ed:64:81:bf:88:c9:81:70:88:9d:47:82:a3:ab:a5:
ed:35:3f:80:54:31:f2:7e:62:af:e8:04:14:4d:a3:98:98:9d:
d9:45:32:b4:a4:24:e7:c8:dc:ff:7d:ae:76:5f:ed:4a:36:2e:
b5:0a:ca:73:92:2b:0e:1b:30:5d:ea:db:93:0a:8f:76:9a:4f:
06:89:87:96:eb:3b:51:89:40:b9:5a:80:e7:ea:f7:c6:3f:f4:
82:ee:0e:ad:d2:a6:fd:08:ca:8a:df:a1:b6:73:16:46:d8:d3:
d6:c4:27:6e:61:57:9e:d3:b6:3e:c6:ec:f8:28:c0:f6:e2:3c:
e4:c6:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:48 2026 by rpki-client