Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/r5JhX1WVRIuKls91bpGfQhBP5nc.roa
File: r5JhX1WVRIuKls91bpGfQhBP5nc.roa (raw, json)
Hash identifier: 90E5B0cY9riZPq586g/WUgh0i6XK0BnsOAwKiwltDoU=
Subject key identifier: AF:92:61:5F:55:95:44:8B:8A:96:CF:75:6E:91:9F:42:10:4F:E6:77
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019C3DD5E13968BAA06B56D687E28BBFF84B
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/r5JhX1WVRIuKls91bpGfQhBP5nc.roa
Signing time: Sun 08 Feb 2026 15:19:12 +0000
ROA not before: Sun 08 Feb 2026 15:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 57.206.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3d:d5:e1:39:68:ba:a0:6b:56:d6:87:e2:8b:bf:f8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Feb 8 15:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af92615f5595448b8a96cf756e919f42104fe677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:6e:06:da:be:aa:0b:19:13:16:88:58:24:
cd:3e:4a:c4:a4:04:75:95:ee:30:d8:a4:4d:35:e8:
2e:b4:d0:bb:a5:aa:c6:da:19:80:19:bb:5f:60:f1:
a6:ab:e7:39:9b:9e:3e:52:ee:fc:02:e2:e6:b7:ec:
a7:d5:1b:54:47:b2:80:bf:56:9f:bf:1a:f6:8a:95:
a7:f9:ae:cd:7e:0c:15:60:0d:8f:dc:a2:18:fe:5e:
57:70:c1:8e:75:9e:f2:67:57:5e:3e:d2:11:39:bf:
68:eb:db:9e:a8:d5:b2:19:92:87:60:b0:92:b2:c4:
12:a3:1a:c8:a9:79:9a:1f:d7:ae:fe:d1:53:52:bd:
d2:c3:63:ad:1f:4b:20:a5:3a:e7:ef:4c:43:08:76:
a6:05:ab:32:84:68:3f:3f:c4:fa:42:c5:9b:f8:fc:
c2:04:cb:3a:61:38:26:bd:e9:d4:ca:fb:b3:3d:53:
cf:05:4f:c0:2f:30:82:af:23:f5:ba:14:89:eb:7b:
80:f8:b2:84:2c:e9:fa:b6:1e:12:2c:72:d5:2c:b9:
e6:fb:b3:a9:53:24:bc:c1:f3:89:9f:37:40:3b:67:
00:67:e0:18:87:3f:3f:82:a3:54:8c:2b:71:05:23:
7b:ed:59:e1:58:a6:c3:70:5d:19:0b:66:75:0c:76:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:61:5F:55:95:44:8B:8A:96:CF:75:6E:91:9F:42:10:4F:E6:77
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/r5JhX1WVRIuKls91bpGfQhBP5nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.206.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:ef:3f:fa:08:0f:de:ec:40:8b:f3:10:c2:29:8f:a9:e9:60:
98:1a:70:88:21:2c:96:52:94:85:05:42:7f:15:70:aa:25:d8:
19:44:41:d3:81:42:b2:32:d5:e2:45:66:78:88:97:60:71:a2:
44:ac:d9:a9:7c:07:86:94:d5:f3:0d:54:bc:d9:88:72:50:1d:
be:d4:36:8b:2a:14:28:c1:f1:82:66:d2:67:54:ca:9f:5a:1c:
19:17:fc:bd:14:27:7f:1e:95:61:5b:77:8e:41:98:dd:e3:04:
92:e4:e2:b7:f3:31:d7:f8:ac:2d:d9:e4:68:6a:b9:52:f3:0c:
49:60:85:49:13:45:54:a6:6c:ff:52:ca:1c:86:63:d4:4b:0f:
79:9b:50:88:4c:e4:e7:0e:18:6e:dc:8c:60:9a:9f:86:c9:18:
bf:a9:ec:24:ae:69:4b:31:19:9e:46:83:ce:23:24:04:9a:9d:
ad:44:2b:ac:6c:91:31:c0:2e:72:fa:c2:5f:e9:ea:14:84:55:
8e:8c:b6:1a:10:25:7c:4b:b6:03:22:cb:35:3a:1d:a7:2b:cc:
e1:ec:a7:3e:e9:16:94:2b:8b:96:69:67:19:c3:88:7f:f8:c8:
f9:2f:ce:a2:6b:4a:9a:d7:97:f8:15:d0:99:4c:a3:5d:dc:ce:
00:1e:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:01 2026 by rpki-client