Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/c499SClGT78nET-X2E0c8h8vbyk.roa
File: c499SClGT78nET-X2E0c8h8vbyk.roa (raw, json)
Hash identifier: SN37KokWRjTT0I6SPcf2aRg5XCtwSTLTj9XuCaF5do8=
Subject key identifier: 73:8F:7D:48:29:46:4F:BF:27:11:3F:97:D8:4D:1C:F2:1F:2F:6F:29
Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial: 01A08B318385FD63D00F7770DFFA86A58833
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/c499SClGT78nET-X2E0c8h8vbyk.roa
Signing time: Thu 10 Sep 2026 12:01:12 +0000
ROA not before: Thu 10 Sep 2026 12:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 194.56.232.0/24 maxlen: 24
2a04:88c4::/30 maxlen: 30
2a04:88c4::/32 maxlen: 32
2a04:88c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:83:85:fd:63:d0:0f:77:70:df:fa:86:a5:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Validity
Not Before: Sep 10 12:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=738f7d4829464fbf27113f97d84d1cf21f2f6f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:11:2a:91:cb:44:b8:ea:44:99:34:fd:30:
0d:5b:d3:51:fb:52:16:2d:06:ee:0d:c4:ac:34:1d:
00:ff:0f:9f:13:47:20:2d:92:cb:9c:27:4f:c8:09:
ec:fc:78:be:3f:b2:47:c2:0e:6b:ff:32:bc:55:1a:
c4:66:73:a9:28:8b:f0:86:20:d0:de:05:dd:6e:6a:
e0:86:f9:d5:f6:8d:30:d8:36:ef:d1:5b:91:c9:82:
85:f3:46:3a:3b:5b:93:4d:30:c0:f8:d0:ba:43:12:
49:3b:27:5d:e6:32:bd:2d:cc:5e:35:01:c8:c7:05:
77:8a:81:8e:a8:b0:c8:fa:69:69:68:cd:91:5c:98:
9c:c4:ec:f8:b1:2a:9b:84:00:b0:3a:b7:3c:ff:b0:
82:01:9b:09:47:83:41:c7:a5:10:ca:e4:1b:b6:79:
7f:72:d0:22:f7:72:15:83:ee:4e:07:66:28:92:20:
29:bc:9d:93:ce:0d:13:af:98:00:30:b1:fd:1f:92:
54:25:14:e6:e1:43:2d:93:3f:e7:54:b3:82:f5:6a:
77:4f:19:38:ae:ae:ec:b8:81:ac:17:07:aa:31:e0:
78:82:e5:fd:55:0c:46:72:5c:85:ae:57:dd:dc:2e:
d3:49:17:cf:46:b6:1c:9e:f3:f9:87:e8:7e:a8:b0:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:7D:48:29:46:4F:BF:27:11:3F:97:D8:4D:1C:F2:1F:2F:6F:29
X509v3 Authority Key Identifier:
keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/c499SClGT78nET-X2E0c8h8vbyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.232.0/24
IPv6:
2a04:88c4::/30
Signature Algorithm: sha256WithRSAEncryption
8f:de:08:8d:cd:97:93:0f:b6:17:bc:1a:bb:fb:8c:d0:02:60:
27:0c:22:96:29:19:3f:17:a8:d0:47:be:50:65:b1:74:32:d0:
88:40:19:d4:e5:48:d3:62:d2:cd:a1:f3:71:5c:e3:06:46:f2:
e2:91:86:f8:e0:35:66:46:03:52:17:b0:5e:8d:17:5f:04:ac:
2e:5c:dc:8a:92:0a:1a:e7:ae:56:89:d0:76:4b:0b:18:43:ec:
45:3d:3d:c3:8b:9f:c1:4f:26:a8:4e:11:b3:1d:5b:f0:b3:66:
ae:9e:90:3a:96:6e:e6:66:a0:d8:23:92:cc:74:52:b9:89:18:
62:91:e8:1b:f2:1e:3c:5c:1f:32:a3:33:43:bd:3e:9b:36:b1:
f1:7c:be:64:4c:19:ea:d9:40:a2:30:c5:a4:b0:47:64:6b:a8:
d4:dc:13:62:ea:0f:f4:47:f6:4b:c6:96:eb:18:d4:cd:59:01:
4f:55:4a:cc:1d:5f:5e:ca:ad:ab:30:71:de:91:a0:57:a6:8d:
66:a7:c2:49:48:aa:cc:7e:7c:3a:66:13:ca:43:12:d5:b2:5c:
f4:d3:fd:bd:33:f8:2a:61:91:6a:89:50:73:3c:3f:9d:63:18:
27:9a:44:81:e8:67:39:2c:10:37:6d:06:d1:67:c5:9c:29:2e:
6c:a3:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:46 2026 by rpki-client