Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/5lBFGUAoZxbYBVNbtiraNCntgkY.roa
File: 5lBFGUAoZxbYBVNbtiraNCntgkY.roa (raw, json)
Hash identifier: D2AWufXWx23fxF8Lz5Xwtrbq4J1toTvFTMMwNaB2tNg=
Subject key identifier: E6:50:45:19:40:28:67:16:D8:05:53:5B:B6:2A:DA:34:29:ED:82:46
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A049F81E5D56DFC8C6C77EC56A29B6307F
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/5lBFGUAoZxbYBVNbtiraNCntgkY.roa
Signing time: Fri 28 Aug 2026 20:03:12 +0000
ROA not before: Fri 28 Aug 2026 20:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41457
IP address blocks: 89.36.33.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
2a0c:2505:1000::/48 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6780:2::/48 maxlen: 48
2a14:6780:3::/48 maxlen: 48
2a14:6780:4::/48 maxlen: 48
2a14:6782::/48 maxlen: 48
2a14:6782:1::/48 maxlen: 48
2a14:6782:2::/48 maxlen: 48
2a14:6782:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:f8:1e:5d:56:df:c8:c6:c7:7e:c5:6a:29:b6:30:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Aug 28 20:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e650451940286716d805535bb62ada3429ed8246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:a6:ff:a2:1c:72:4b:10:d9:a8:ba:f1:12:
15:e2:aa:1d:23:79:cb:bb:28:09:c8:ad:6d:75:5d:
20:8a:4d:79:e5:5b:75:f2:89:72:f4:7e:b7:43:b4:
fa:6f:1a:38:6c:07:83:eb:04:8f:e6:0d:90:bc:74:
37:0e:9e:30:ba:5b:d1:12:e5:60:1c:00:4e:e3:0b:
09:1e:13:5e:0d:cd:06:73:79:6c:3d:c5:a3:30:ea:
26:b6:5e:ba:ac:9a:16:94:25:79:75:3b:1d:79:d2:
17:5f:40:76:bf:3c:63:b1:94:e1:2a:28:1a:e2:1a:
67:ba:88:2b:df:25:64:9e:f4:6c:b3:de:12:d1:c8:
59:a4:a2:09:19:a2:95:22:09:ff:d9:27:12:b2:3b:
4d:97:cc:b9:8a:21:0c:b1:a9:b6:40:83:db:ae:ac:
e9:b6:4a:15:26:9a:92:40:3d:27:48:bf:63:f1:53:
37:ec:c0:c8:fe:38:78:43:87:7c:1f:b0:0a:0d:27:
d7:3d:40:20:0a:73:43:30:9c:31:29:10:ef:c2:22:
1a:38:1d:cf:5d:54:e8:21:fb:54:7e:df:8f:aa:14:
66:e2:0c:ed:c8:23:58:25:56:d9:00:e7:db:e5:38:
bd:2d:6f:e0:0a:62:c8:22:aa:da:6a:ce:a3:c4:d0:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:45:19:40:28:67:16:D8:05:53:5B:B6:2A:DA:34:29:ED:82:46
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/5lBFGUAoZxbYBVNbtiraNCntgkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.33.0/24
194.46.60.0/24
IPv6:
2a0c:2505:1000::/48
2a14:6780::/32
2a14:6782::/46
Signature Algorithm: sha256WithRSAEncryption
07:18:62:01:04:58:61:48:c1:da:3e:cd:02:6d:1d:23:16:50:
0c:f9:b9:92:1f:97:51:c6:95:65:17:ab:13:9d:33:5e:25:d6:
a7:73:0f:40:0d:81:10:f3:b0:b8:fb:2f:7a:a5:a4:ce:93:09:
80:02:e6:1b:de:7f:cd:d8:2e:f9:5f:61:ed:13:10:1b:1c:14:
a4:3e:09:d4:a9:de:72:94:0f:6b:d0:b8:0a:99:12:60:a3:b6:
fc:1e:1f:6f:70:33:84:56:67:52:81:39:90:2c:a4:da:2c:e1:
d6:fe:c9:01:73:64:13:90:75:3b:df:db:e5:09:64:c9:d0:61:
08:6a:6f:0d:81:47:68:e0:17:2d:55:83:cb:c2:1d:83:6c:07:
83:3d:e9:fc:7b:23:06:f9:cf:e2:f3:65:27:c5:4a:fa:36:e2:
bb:0f:85:05:e7:fd:c0:0e:13:4d:a6:e9:ba:92:3d:87:56:bf:
ab:07:9f:8e:41:60:38:22:1d:86:a5:d2:4c:99:f9:67:72:74:
c1:7c:b9:03:2f:66:cd:a4:87:a0:27:87:0f:e9:ea:8d:66:38:
d9:2d:f3:18:8f:8d:f9:d5:f2:77:59:75:e5:0e:01:82:77:d9:
71:3e:b6:5d:f2:14:d3:2c:e3:12:48:d8:9d:46:4a:50:2b:53:
87:ff:e4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:01 2026 by rpki-client