Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/s5fQgEQgkHQMu6WFhjMDItf3lDw.roa
File: s5fQgEQgkHQMu6WFhjMDItf3lDw.roa (raw, json)
Hash identifier: ZqBooktO6a67bxZ0r5fq1VewrECEe+uCiAMERY2Ptq0=
Subject key identifier: B3:97:D0:80:44:20:90:74:0C:BB:A5:85:86:33:03:22:D7:F7:94:3C
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019E3791B7FE79F6AFCBFC25ED00FE991160
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/s5fQgEQgkHQMu6WFhjMDItf3lDw.roa
Signing time: Sun 17 May 2026 20:12:37 +0000
ROA not before: Sun 17 May 2026 20:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.232.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:91:b7:fe:79:f6:af:cb:fc:25:ed:00:fe:99:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: May 17 20:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b397d080442090740cbba58586330322d7f7943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:2e:c3:9c:e7:5b:d0:45:02:96:6d:e9:db:
56:21:70:b3:64:9b:a3:a5:6a:c7:57:d6:2a:47:a6:
1a:b2:7c:4f:e2:f6:87:70:3f:86:60:e6:7f:2b:93:
c0:f6:23:38:32:4e:7b:b8:42:ef:10:68:8c:94:fc:
c4:c0:89:2f:91:51:5a:6f:da:06:75:c0:56:81:b4:
07:40:86:69:da:d7:1a:10:af:6b:0a:1f:c3:d3:a7:
c3:ed:7b:ef:38:5c:33:91:45:fa:26:dd:ea:d8:f9:
28:63:3c:f0:e0:f1:fc:ff:cb:31:77:78:83:5c:c4:
0f:4b:cb:e9:31:0d:de:71:5f:d4:00:10:7f:0a:a8:
a6:c7:5c:71:36:6a:7e:04:83:a8:b8:29:17:b5:98:
d7:86:57:69:d7:37:48:37:9e:1f:67:a4:6c:54:a9:
eb:3b:e5:6d:18:00:a1:c0:42:21:eb:8e:79:a2:5d:
4a:2a:5e:32:36:89:39:97:d4:fe:aa:97:54:24:39:
6d:f2:66:66:b6:58:bb:5e:f6:25:4a:03:d2:06:c7:
61:ae:f1:1a:45:5a:aa:36:19:e7:4a:33:4a:9b:89:
d9:46:da:e0:dc:2f:6b:b1:6e:e5:a5:af:0a:9a:43:
26:98:1e:b1:4d:77:96:8a:21:37:84:6c:87:70:21:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:D0:80:44:20:90:74:0C:BB:A5:85:86:33:03:22:D7:F7:94:3C
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/s5fQgEQgkHQMu6WFhjMDItf3lDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ed:84:0c:1b:e4:e9:d5:e1:82:f8:96:ba:87:0e:22:16:f0:
e8:a0:ad:77:e5:86:59:1e:da:f6:55:c2:a6:f4:ad:60:e8:43:
f4:a8:c5:6b:ba:14:16:a4:66:cf:e7:0a:e9:78:81:e1:eb:0d:
c5:98:51:2d:a8:0a:30:6d:7c:55:1a:16:52:8a:cb:fd:c5:55:
75:69:97:00:09:9f:f3:ee:82:d1:19:c2:21:4d:62:31:9a:b9:
f9:8a:82:2b:af:6f:ac:4a:63:dd:b4:86:f1:7a:2b:fc:43:9e:
9f:fd:71:e7:d0:ed:f7:a2:37:e9:e9:b8:c9:c6:b9:26:5a:49:
4b:83:b8:8c:9f:59:c5:be:1a:1b:9a:d7:8a:e9:a0:1b:9e:50:
72:23:30:a1:de:40:e3:bb:89:2f:74:96:a9:19:2e:c2:6a:2b:
e8:56:ac:62:47:b1:32:89:48:18:c9:fc:23:6b:b3:32:95:f6:
f7:a1:df:e4:e8:6b:10:3e:ff:26:18:7d:74:26:5e:9c:98:c8:
66:fa:ea:0e:cd:47:38:5c:16:f9:8c:8e:18:7e:33:82:94:0e:
64:50:82:36:0b:c1:07:16:03:59:45:bf:b9:16:2b:5b:7d:6e:
cc:40:91:e8:41:95:c7:b1:ce:7a:58:dd:5c:d3:99:0c:d0:03:
e1:69:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:53 2026 by rpki-client