Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/_8UAnkY-Tgc4NZnERUShSjoD4xE.roa
File: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (raw, json)
Hash identifier: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=
Subject key identifier: FF:C5:00:9E:46:3E:4E:07:38:35:99:C4:45:44:A1:4A:3A:03:E3:11
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019E491163946F9EC02E61BE26A8C245E4B7
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/_8UAnkY-Tgc4NZnERUShSjoD4xE.roa
Signing time: Thu 21 May 2026 05:45:36 +0000
ROA not before: Thu 21 May 2026 05:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206858
IP address blocks: 95.169.197.0/24 maxlen: 24
95.169.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:11:63:94:6f:9e:c0:2e:61:be:26:a8:c2:45:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: May 21 05:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffc5009e463e4e07383599c44544a14a3a03e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:71:62:41:1f:82:45:e9:39:45:7e:37:59:
62:bb:5c:f2:52:33:33:d6:41:2b:d1:21:d5:6d:3b:
44:b4:4f:df:b1:4f:28:b9:0f:94:cf:82:6b:8d:3a:
6b:10:64:52:12:62:4c:f2:1d:02:94:09:24:df:aa:
21:6d:87:33:b2:ef:6d:f6:4e:8e:a4:57:84:bc:e2:
eb:48:4a:3b:48:df:44:b0:d8:83:dc:14:19:15:b7:
14:3a:ff:db:48:88:03:e5:1a:4b:03:5f:66:c9:7d:
28:c5:2a:37:cf:0f:70:08:4d:a2:4d:c9:43:35:eb:
5c:d7:dc:b4:5c:0c:d5:78:7c:60:fd:a3:40:a8:43:
f4:dd:5b:ae:75:09:22:79:21:0c:75:2b:c0:6e:2a:
95:02:0f:e8:03:be:c2:6c:dd:0b:45:de:fc:16:1a:
1d:d1:65:74:dd:9f:8e:5b:45:64:22:f6:2b:88:c2:
53:97:dd:c4:a5:f4:4d:33:52:7d:e6:d3:f1:2a:3b:
93:b8:9c:f6:55:a9:c7:98:f4:22:33:57:a3:cd:65:
5e:6f:53:8a:28:0b:a4:6f:ee:94:a6:7c:59:7b:d8:
58:e2:38:90:03:40:b9:96:89:57:31:3d:f5:c3:9d:
8e:80:a8:5a:bf:27:78:d6:55:92:81:05:c7:93:eb:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:00:9E:46:3E:4E:07:38:35:99:C4:45:44:A1:4A:3A:03:E3:11
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/_8UAnkY-Tgc4NZnERUShSjoD4xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.197.0-95.169.198.255
Signature Algorithm: sha256WithRSAEncryption
46:f2:bd:4e:82:81:1c:5b:fd:b1:cd:50:69:53:66:b5:16:f2:
67:d5:9a:04:35:52:d3:b2:e6:81:d0:55:8e:25:6b:aa:e9:31:
f7:10:19:1a:85:1f:0d:f5:c1:57:3a:e0:0e:84:68:d9:14:f7:
62:55:de:1d:59:74:f5:e5:7e:51:1e:36:71:dc:70:78:26:db:
a9:af:7e:f1:39:1d:94:7e:a9:7b:ca:4f:cd:64:6e:e3:ae:96:
58:23:5d:3b:48:80:ca:13:75:3f:92:2a:5e:24:57:1f:5d:0d:
b9:b0:81:47:b5:43:11:94:10:8b:24:a4:32:da:00:ee:7d:7e:
8b:51:ee:72:37:83:8a:2e:31:44:50:11:a8:fd:91:7d:60:84:
87:55:d4:18:2a:4f:7c:9d:c8:51:ab:bd:59:ec:64:3b:07:8f:
dc:83:4e:9c:a5:f4:1a:0b:23:d4:a4:a1:17:4d:86:59:b5:a5:
9b:29:5b:7a:ae:24:bb:52:d9:09:d4:63:7c:19:3c:ac:31:75:
79:4e:91:fb:b8:66:78:b8:b5:9e:18:33:c2:fe:ae:2c:a3:3a:
dc:d3:8d:69:19:d8:a9:45:75:e4:33:54:b0:40:79:ed:19:53:
33:83:e2:9c:4e:81:36:6a:b7:9e:dc:6e:42:b2:6d:19:83:b7:
0a:f3:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:29 2026 by rpki-client