Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/5kXDHLDSjZAiVMFLveILTRxDNMc.roa
File: 5kXDHLDSjZAiVMFLveILTRxDNMc.roa (raw, json)
Hash identifier: PW8kbjXuOxH53eIcya9Iptxt2w97yH9EEIP9BBnXX6Y=
Subject key identifier: E6:45:C3:1C:B0:D2:8D:90:22:54:C1:4B:BD:E2:0B:4D:1C:43:34:C7
Certificate issuer: /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial: 019F178782E5869C379EAC1B1C8618EEA123
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/5kXDHLDSjZAiVMFLveILTRxDNMc.roa
Signing time: Tue 30 Jun 2026 07:56:24 +0000
ROA not before: Tue 30 Jun 2026 07:56:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198020
IP address blocks: 95.133.252.0/22 maxlen: 24
217.177.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:87:82:e5:86:9c:37:9e:ac:1b:1c:86:18:ee:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Validity
Not Before: Jun 30 07:56:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e645c31cb0d28d902254c14bbde20b4d1c4334c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:2f:e6:30:3c:b4:82:d3:6e:90:71:8f:04:
e6:38:16:a0:b5:82:fc:d1:62:12:1b:a0:5b:48:8b:
ba:58:ce:91:55:03:78:ca:ab:b2:ce:a3:a8:82:a1:
71:17:26:bf:55:8c:c8:68:42:69:4b:ac:63:c6:59:
d8:be:b8:e9:8a:4d:e9:6b:ae:d3:67:f6:81:da:8e:
14:c2:d7:30:39:b2:71:8c:e1:7f:8f:db:b9:dc:88:
e5:0b:f0:87:9c:79:75:67:41:c0:2f:82:81:3f:12:
8a:c4:90:cd:72:ab:ed:38:45:c4:e1:f7:63:2e:e8:
b0:77:d5:71:e8:1b:07:35:d1:f7:f8:df:e6:8f:a8:
de:15:84:48:3c:09:d0:b2:4b:c1:c3:6b:cf:9a:28:
0e:d9:be:f0:41:ec:a9:b9:31:60:fa:16:2f:00:ad:
13:e2:02:b1:77:ad:3a:ee:8b:99:c3:6d:04:c8:b5:
a0:4a:b7:7d:17:40:09:0e:79:f8:43:8e:79:b7:ea:
25:8b:29:82:52:0e:15:1b:5f:68:b8:6c:39:de:6a:
4b:d2:05:86:4c:06:9e:e8:5e:b2:2c:33:84:3d:1a:
77:ef:59:44:bb:9e:1f:94:6e:09:49:8f:61:06:94:
eb:1f:7c:d8:6f:92:eb:e8:4e:3a:d1:14:a8:60:6e:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:C3:1C:B0:D2:8D:90:22:54:C1:4B:BD:E2:0B:4D:1C:43:34:C7
X509v3 Authority Key Identifier:
keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/5kXDHLDSjZAiVMFLveILTRxDNMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.133.252.0/22
217.177.40.0/22
Signature Algorithm: sha256WithRSAEncryption
49:86:0b:51:2d:c8:18:33:ea:84:ed:61:a6:16:2b:13:c2:19:
d6:f1:39:a7:92:27:ce:3a:cb:d3:3f:03:73:09:4c:3e:05:a2:
02:70:a6:00:5a:bb:9e:46:99:25:f1:6e:53:a5:15:34:2d:24:
3d:b4:30:92:91:f7:54:54:8a:25:32:cb:56:4f:7d:7a:5f:47:
67:c5:2c:6f:00:1e:73:ca:19:22:0b:86:26:9d:0e:eb:c4:f6:
7a:61:e9:69:3d:66:65:c4:41:2a:52:0a:f8:6d:93:06:f2:14:
ad:da:f8:38:6a:38:97:ac:64:41:23:70:08:7a:dc:f2:03:40:
e9:55:fe:27:5a:55:0f:42:d9:7f:02:7e:11:d1:db:d1:f7:f9:
f3:32:ab:71:16:4c:6b:71:56:64:fb:93:18:3a:cd:6d:b1:08:
cb:2a:e0:8c:f0:5e:d8:14:a1:af:41:34:38:2a:ce:8d:44:ff:
65:da:bb:c5:55:fc:f4:c9:4f:b3:40:b0:67:e6:ec:b5:a6:b1:
96:ce:06:da:f7:62:ad:62:c2:08:3f:7a:db:dc:d2:03:e5:e0:
9d:0b:b9:f8:b2:0d:51:8d:d2:2f:96:5a:14:f0:b8:ba:c5:32:
29:92:29:82:ab:d3:19:11:24:a8:ee:b8:6e:30:66:e4:03:e1:
60:87:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:17 2026 by rpki-client