Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R5M7kMCBLLIJygOMOSE3yGqi-yU.roa
File: R5M7kMCBLLIJygOMOSE3yGqi-yU.roa (raw, json)
Hash identifier: rEAfiXO6mrzstg36Q+ziYgwaa74dU7crkjh9AinZEkc=
Subject key identifier: 47:93:3B:90:C0:81:2C:B2:09:CA:03:8C:39:21:37:C8:6A:A2:FB:25
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F5E93ADDD7A1EC92444D1F9B5A54B26E9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R5M7kMCBLLIJygOMOSE3yGqi-yU.roa
Signing time: Tue 14 Jul 2026 03:02:44 +0000
ROA not before: Tue 14 Jul 2026 03:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 85.189.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:93:ad:dd:7a:1e:c9:24:44:d1:f9:b5:a5:4b:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 14 03:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47933b90c0812cb209ca038c392137c86aa2fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:bf:1c:31:e8:41:ab:10:18:55:52:74:79:
f4:0d:2c:a4:cb:41:d7:6d:f8:59:62:62:54:2c:41:
34:9f:5e:64:69:23:a7:86:77:07:c3:f3:53:30:e0:
e6:44:0d:21:89:d3:a2:f8:db:dc:78:aa:65:8a:a6:
e0:e8:fa:5f:23:e2:49:79:3a:0f:9a:e6:f2:21:d0:
89:11:07:15:f7:cd:1b:e9:1a:cd:5e:99:18:e7:c3:
0b:6e:d1:7b:5e:78:de:a5:dc:ad:37:80:b8:0f:4b:
55:c9:6f:8a:61:63:05:47:d8:35:1e:b0:01:f2:e9:
8c:e8:13:e2:78:e6:38:ce:05:f5:22:5b:84:0b:16:
a7:62:ce:34:15:92:b2:77:c8:52:64:44:36:69:38:
60:dd:ae:b0:fa:72:e9:13:25:c6:48:a7:56:8f:e7:
5b:1b:bb:07:90:85:32:f9:db:92:45:2d:25:4a:a7:
66:80:8f:ef:2f:4f:9a:9b:81:2b:fd:5a:f6:d8:16:
0a:49:ee:bf:56:72:bc:18:cc:a3:f9:aa:ef:82:39:
50:89:42:de:28:af:75:f5:04:5c:cb:6f:0e:33:e4:
4e:13:7e:de:c6:3e:8b:5a:1e:2c:ca:07:72:a0:0c:
71:89:a2:12:10:13:e2:8f:a5:ed:36:87:ee:73:35:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:3B:90:C0:81:2C:B2:09:CA:03:8C:39:21:37:C8:6A:A2:FB:25
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R5M7kMCBLLIJygOMOSE3yGqi-yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a1:86:c6:23:66:a6:6b:c1:a9:fe:73:4c:00:21:16:a8:71:
07:54:cf:be:fa:6d:43:14:3c:6f:97:4e:73:1c:0f:50:4d:40:
a6:dd:f3:d7:86:48:d3:02:7d:d4:af:35:25:08:3c:d9:4b:31:
c7:50:ea:28:69:4a:a2:f4:54:41:5d:dd:8f:8b:8d:a0:49:76:
52:0d:03:b6:1c:3b:86:02:ba:67:98:e0:be:a6:f7:65:cb:75:
6a:f3:f8:86:52:79:1a:66:b0:52:b9:b3:3b:69:32:62:38:02:
81:77:dc:23:e4:e0:0f:1a:eb:33:a0:0d:1e:94:b2:b4:44:e7:
36:9c:27:f1:dc:4d:11:5f:ec:26:b7:e6:19:9e:28:96:d6:c2:
be:f9:03:01:f0:f0:ed:6d:52:49:84:04:47:8d:a2:e5:28:e4:
ee:3d:ac:3b:21:d3:58:2f:6a:f0:70:1b:6a:a0:8e:4e:92:b6:
31:0f:48:fd:55:bc:f6:e1:7f:8c:65:f1:d0:be:3a:0b:88:77:
7a:cb:f8:56:4d:a3:ca:6c:81:f0:7e:90:dd:bf:4e:f1:55:84:
2e:58:59:2c:0e:12:61:41:e5:e0:7f:2c:01:3d:aa:76:18:7c:
c8:90:00:91:7d:74:a0:a9:b0:b7:5b:f7:6f:07:9a:84:d0:d6:
1c:e8:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client