Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/PN5qjPeXDAcAN0fmbvfVCYbErAk.roa
File: PN5qjPeXDAcAN0fmbvfVCYbErAk.roa (raw, json)
Hash identifier: PUzCgzpbtwI7Q3G0TylJ+Hp7SLsTW5ke4sQpr62DdRY=
Subject key identifier: 3C:DE:6A:8C:F7:97:0C:07:00:37:47:E6:6E:F7:D5:09:86:C4:AC:09
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A17929808DB3AFCA064A3749A215703D63
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/PN5qjPeXDAcAN0fmbvfVCYbErAk.roa
Signing time: Mon 26 Oct 2026 17:02:05 +0000
ROA not before: Mon 26 Oct 2026 17:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 187.7.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:29:80:8d:b3:af:ca:06:4a:37:49:a2:15:70:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 26 17:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cde6a8cf7970c07003747e66ef7d50986c4ac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:f2:84:f7:5a:55:42:52:c1:1b:fd:f7:04:
81:aa:2d:3e:ff:6f:1f:37:f4:33:23:14:f6:f5:e0:
cb:ce:0e:e8:76:f7:a1:2a:d8:e0:94:68:1c:57:24:
92:cc:1b:cf:34:e4:72:44:de:6b:16:5f:dc:89:57:
59:40:55:0a:1c:da:92:b2:74:f3:0d:2c:59:8b:b5:
2a:77:d3:b0:c9:90:84:d9:6b:54:1b:e2:4b:f5:2f:
b7:d0:5b:d7:06:30:b8:0b:56:e6:60:02:6b:5f:25:
0d:74:85:d6:1c:3c:1b:c6:a8:11:58:a8:97:bc:98:
32:43:26:cb:e8:d5:5a:62:a7:38:2d:fd:07:b4:c2:
c9:bc:27:d0:4b:b6:90:3c:5b:0c:6a:62:f9:96:0b:
90:ca:61:25:e4:02:9a:58:b7:f6:3f:80:fd:7c:02:
48:ab:d8:47:93:08:31:5e:04:70:02:8d:09:71:c8:
e3:da:59:7e:64:e0:5a:db:e4:58:52:f2:11:56:04:
e1:65:5d:ab:62:1f:88:7e:0e:e6:47:f3:6a:2d:01:
44:40:14:d7:7b:30:4f:93:79:8e:77:7a:ee:52:4f:
f3:31:a2:db:f8:e7:e8:f9:71:f6:86:f7:43:fe:96:
22:03:18:b7:c6:51:a6:a2:d4:ea:1c:a6:1b:32:0a:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:6A:8C:F7:97:0C:07:00:37:47:E6:6E:F7:D5:09:86:C4:AC:09
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/PN5qjPeXDAcAN0fmbvfVCYbErAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:38:ad:10:85:3d:48:97:07:7a:2c:17:97:56:c8:15:e5:59:
0b:2d:b4:81:3a:b4:79:f1:76:29:e9:cd:68:d2:f4:e2:23:f0:
5d:f3:c3:7b:c2:ad:cb:6f:f8:23:8d:23:c1:aa:ed:ad:1b:04:
23:9f:84:3e:1d:74:8d:15:7e:ca:8d:d2:13:fc:29:d9:62:8d:
f7:85:c0:4d:df:21:45:3a:a5:be:52:1e:ee:5c:8a:a3:8b:41:
c0:18:d7:b7:b1:7f:e2:e7:59:f5:db:c5:9d:a4:ed:c7:55:06:
f5:8c:69:e7:b4:f9:38:6c:d6:ea:9f:70:b2:36:d2:f8:fa:15:
0a:75:a5:7b:99:7c:fc:71:dc:1a:88:da:ce:95:22:c3:bb:1e:
7f:1b:1a:3b:b8:8a:7d:72:51:19:a9:59:ce:27:55:4f:f6:5c:
57:a7:0e:c5:33:16:aa:53:08:1d:7f:50:bb:ed:cb:7e:4e:c6:
36:ce:22:17:a2:41:df:b4:da:2a:57:64:6f:f1:3b:59:7b:9e:
0f:ec:3b:bc:8e:fe:6a:94:9e:8d:38:87:e9:2e:52:3c:9a:e2:
b3:87:5b:28:03:4c:a3:b5:ec:3b:b5:6d:fa:74:a8:25:47:59:
9f:91:ec:21:91:d5:a8:61:d9:e0:b2:02:46:1b:db:15:26:41:
90:b4:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:55 2026 by rpki-client