Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/saZnv2Bp4sqRP4NMxG44NAq_l6c.roa
File: saZnv2Bp4sqRP4NMxG44NAq_l6c.roa (raw, json)
Hash identifier: 6Q2UNG1Pf323+r9t9x2KINDFouryYYiSTBusqGltiUs=
Subject key identifier: B1:A6:67:BF:60:69:E2:CA:91:3F:83:4C:C4:6E:38:34:0A:BF:97:A7
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A122438ED84B29F108645FCD881F5949E8
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/saZnv2Bp4sqRP4NMxG44NAq_l6c.roa
Signing time: Fri 09 Oct 2026 20:03:35 +0000
ROA not before: Fri 09 Oct 2026 20:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 187.52.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:43:8e:d8:4b:29:f1:08:64:5f:cd:88:1f:59:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 9 20:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a667bf6069e2ca913f834cc46e38340abf97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:5e:a1:d1:7a:0e:0f:74:6a:c4:ad:82:91:
7f:df:3c:74:1b:4a:2f:3b:68:8b:1b:58:0e:c1:3b:
b2:c7:67:ba:ca:9c:b2:ed:c3:d2:50:75:5a:25:6a:
81:76:37:b2:b0:53:69:9b:dc:5e:0a:16:0f:02:2e:
03:2a:27:6c:fe:85:b8:6d:ad:19:c8:65:51:0e:fe:
43:98:cb:44:f4:6e:b5:b4:d8:d6:c6:92:1e:b0:ab:
17:84:72:5f:5e:cf:5f:8f:51:ca:d5:55:d3:68:07:
bb:22:8f:7d:ac:72:91:83:62:ef:64:50:57:d1:1b:
0d:eb:9e:dc:b9:11:a4:60:f9:e4:65:ee:bd:ce:c3:
1f:02:0f:ba:b3:37:9b:f9:3e:fd:cf:46:3a:fa:89:
30:ef:ec:75:06:d3:e7:17:a1:d1:34:cb:43:fe:8c:
c5:b6:e5:e4:3d:6d:55:cc:3d:7a:09:07:74:07:4e:
b5:be:06:43:c4:32:8f:94:9f:43:f4:62:1e:4e:10:
21:55:6d:81:c4:49:30:ad:6c:1c:16:66:84:46:e2:
f3:25:72:6e:b8:e5:87:9e:00:b5:17:4f:07:81:19:
f4:75:25:c4:b4:56:7c:9f:dc:c6:57:84:17:fc:0b:
f4:3b:e6:ce:ef:66:ef:89:72:06:8d:83:22:de:24:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A6:67:BF:60:69:E2:CA:91:3F:83:4C:C4:6E:38:34:0A:BF:97:A7
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/saZnv2Bp4sqRP4NMxG44NAq_l6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.52.47.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:9b:cf:31:4c:48:b4:f1:79:64:44:d0:e1:99:73:26:2e:b5:
46:30:4e:ba:b6:61:91:90:e0:57:5e:4a:c5:b8:0d:40:65:37:
22:f2:c3:9d:e4:59:e4:f6:03:ca:f8:95:e9:ea:a2:05:fe:27:
d5:d4:44:d5:62:14:96:1e:27:90:a4:31:23:96:bf:c9:2e:7a:
f5:fb:ba:79:4a:13:f6:79:48:ef:21:de:6a:55:ee:c6:ab:57:
82:ff:53:11:07:67:19:97:27:0a:d2:d2:0f:39:c3:c9:a4:5d:
d5:34:ed:6c:f2:40:f2:7b:1d:52:4c:a0:dd:d2:78:f6:34:ec:
cf:73:75:82:8e:bf:57:dd:6b:1f:c5:61:3f:90:81:c4:ef:06:
d7:c4:9d:5a:75:da:06:61:9e:ea:a2:1f:7d:a4:c3:6e:bd:f6:
0d:94:5d:e8:b5:1a:58:46:d4:c0:b0:46:67:46:d4:cc:1a:2f:
d0:18:91:76:c1:6a:0c:8a:be:cf:e6:6d:c8:01:da:84:1e:8b:
c8:c2:9f:8f:f9:c6:fc:2f:f1:8a:8b:a9:49:16:6b:cb:9c:0c:
56:e5:55:d9:e5:49:0c:4d:bd:a1:d1:58:a2:36:a2:05:70:92:
4c:ca:34:03:ff:81:3d:93:0d:10:64:ad:2c:6c:65:7f:17:3f:
60:dd:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:53 2026 by rpki-client