Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/5HQWQxWdiy9EfQsIdQfOtGFhqAY.roa
File: 5HQWQxWdiy9EfQsIdQfOtGFhqAY.roa (raw, json)
Hash identifier: lNpBXc4brXPdyM4KdW/2eUa9on7qU0nbG6K7g8xL5rQ=
Subject key identifier: E4:74:16:43:15:9D:8B:2F:44:7D:0B:08:75:07:CE:B4:61:61:A8:06
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C4FA98B5903C2380BCD65CA2843D
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/5HQWQxWdiy9EfQsIdQfOtGFhqAY.roa
Signing time: Sat 29 Aug 2026 21:58:12 +0000
ROA not before: Sat 29 Aug 2026 21:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52194
IP address blocks: 77.91.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c4:fa:98:b5:90:3c:23:80:bc:d6:5c:a2:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4741643159d8b2f447d0b087507ceb46161a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:93:f0:91:ca:fc:4e:12:44:bf:7e:c8:8d:ac:
ec:dd:76:e5:22:8f:2e:13:d7:70:d7:2c:90:99:11:
bd:83:8e:e0:d9:53:d1:b8:a7:2a:21:3f:c2:e3:4e:
cf:99:fe:40:b7:a7:59:5d:30:ed:73:ec:92:a6:51:
37:df:30:8a:f0:c6:c8:7c:76:8c:bb:26:f3:91:51:
13:3c:b4:42:53:ed:51:77:37:aa:88:c9:a3:6a:db:
6f:b5:52:58:80:39:92:b0:69:b2:58:df:ac:ef:c3:
40:13:ea:f4:5b:e4:4c:35:11:d2:6e:7a:59:33:1f:
b8:ea:aa:7b:f8:e5:63:fc:c0:5d:3a:93:95:79:36:
6e:29:b0:94:73:2b:a3:44:d6:72:37:a9:dc:bf:ed:
30:be:00:e9:a8:60:41:3e:29:ea:ca:f8:fe:07:d9:
3b:65:af:01:32:59:47:99:69:3e:b3:db:f4:bc:3c:
fd:00:6d:6b:9d:26:b1:a6:ba:90:af:a9:75:35:b8:
07:1d:6d:3a:ec:e7:71:00:f5:50:db:6e:7b:d8:e5:
f2:e0:1e:8c:cf:6f:5b:ce:bf:4e:a6:4d:58:c6:21:
b7:fc:b8:38:99:9c:8a:11:0e:cb:bf:74:9a:95:29:
6c:6e:71:94:ca:0a:c5:db:89:90:ae:df:5c:72:b2:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:16:43:15:9D:8B:2F:44:7D:0B:08:75:07:CE:B4:61:61:A8:06
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/5HQWQxWdiy9EfQsIdQfOtGFhqAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.67.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d4:c5:f6:49:f6:da:2d:8f:94:f2:28:15:61:9a:cd:10:c0:
1d:4d:b3:1f:18:c3:39:2e:ca:e8:7d:87:03:e3:18:af:25:29:
e1:2b:7f:1f:f3:3b:1b:be:fd:42:70:35:c7:67:dd:0c:1b:00:
0c:18:06:80:14:7f:c2:aa:95:81:51:1b:bb:c9:9a:a1:e1:31:
70:31:09:4d:ed:51:c8:42:61:dd:c5:bd:ad:53:3d:40:6a:bf:
0e:3a:ac:18:65:1f:e3:d4:bd:25:88:d9:f7:a1:49:f8:c7:fd:
52:70:a1:6d:40:5d:dc:e0:96:43:8e:02:f0:bb:a7:cd:d3:bf:
40:ab:b5:2e:62:e9:48:e6:46:6a:fd:43:19:39:58:40:e4:07:
e5:45:b4:09:ad:fa:16:fe:53:a5:48:42:c6:8c:2e:f7:c1:6f:
af:4a:a6:7a:32:8a:74:b3:98:7a:84:a5:72:ac:37:ad:90:c0:
50:b6:c8:86:1c:75:ec:5f:44:91:93:e0:af:94:11:6e:00:8a:
d6:bf:8e:32:f4:b4:7a:cf:f1:c2:00:45:f2:34:47:9c:c3:e3:
2a:81:f1:15:66:56:28:c3:de:e3:9e:e1:60:63:fe:f2:97:f0:
f9:68:c0:9b:dd:51:f0:64:3b:3d:f5:4a:fd:6e:95:37:8b:28:
91:28:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:47 2026 by rpki-client