Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/5EPEfFcq0_CQJyJv8NvlTXW122s.roa
File: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (raw, json)
Hash identifier: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=
Subject key identifier: E4:43:C4:7C:57:2A:D3:F0:90:27:22:6F:F0:DB:E5:4D:75:B5:DB:6B
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019CB8CB24E80304A49DE96330EA4CF03493
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/5EPEfFcq0_CQJyJv8NvlTXW122s.roa
Signing time: Wed 04 Mar 2026 12:20:46 +0000
ROA not before: Wed 04 Mar 2026 12:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 193.163.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:cb:24:e8:03:04:a4:9d:e9:63:30:ea:4c:f0:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Mar 4 12:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e443c47c572ad3f09027226ff0dbe54d75b5db6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:e0:3d:3c:8b:3b:b1:ac:46:88:63:86:35:
b7:43:be:2e:5a:3e:19:e6:6f:2d:87:77:c4:f5:07:
c4:7c:c3:ca:b2:4c:42:a0:28:9f:b7:19:34:df:f7:
6b:72:4b:2f:3e:d5:1a:b1:65:cd:33:f8:12:72:6c:
74:c8:4d:95:e5:75:49:38:b7:78:1b:6b:3d:1e:6d:
64:e2:ed:9c:90:4f:55:3c:4c:cd:78:87:5d:3d:55:
a3:72:17:70:46:45:e1:a9:6c:66:8d:15:f5:68:46:
a0:f8:49:03:36:24:1a:02:6e:de:5a:13:76:9a:65:
8b:29:2c:25:e7:24:67:04:a3:55:26:79:58:13:24:
2a:58:1b:25:db:33:5e:75:da:5c:4e:6d:96:be:3b:
b2:b4:9a:f5:93:09:92:c2:53:01:5a:1b:c5:b1:c8:
1e:3d:a5:de:c0:63:f7:38:fa:fb:52:58:d3:fb:3e:
7e:10:d3:af:24:28:31:52:d5:d9:b0:38:50:1f:40:
c6:10:74:ed:7f:19:44:82:49:89:61:b4:92:d0:96:
f4:97:3f:b4:7d:fc:67:57:9f:39:2d:76:f7:56:b4:
5c:17:d8:22:2e:ce:24:9f:5e:fa:b1:c9:25:d7:cf:
11:1b:4f:4d:1f:48:dc:aa:57:af:ef:0e:42:ee:dc:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:C4:7C:57:2A:D3:F0:90:27:22:6F:F0:DB:E5:4D:75:B5:DB:6B
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/5EPEfFcq0_CQJyJv8NvlTXW122s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.182.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:04:96:38:ac:d1:fb:2d:d8:a7:ec:52:20:7d:5d:05:f1:84:
8c:14:b6:21:46:91:84:91:04:72:7f:59:be:00:e7:43:2a:a7:
ce:3b:b1:0a:af:61:0b:23:95:d6:d4:89:17:9c:8f:d1:ad:87:
99:14:b2:aa:d6:36:1c:61:74:47:b8:36:69:41:8e:e4:2a:ca:
7a:b8:ba:cd:ee:82:0d:dd:34:b4:f7:b7:c4:09:7d:85:3a:aa:
b8:3b:bb:65:e9:2e:2a:cf:db:45:88:0d:1f:57:fd:20:e3:88:
2a:87:7c:15:a6:68:1c:95:9f:f1:6d:96:6a:fc:09:a7:f5:db:
92:71:55:3d:42:6d:5d:4d:f1:a7:fb:3e:bc:1d:6c:78:99:6e:
20:63:17:7f:e4:d7:2f:45:b6:ce:6c:08:86:95:d5:6d:ca:5c:
dc:92:27:b8:c5:f0:54:be:e5:5f:e0:90:c3:a2:18:03:5b:5a:
f5:51:d7:60:f2:95:5b:2b:4b:67:42:b5:77:e0:85:31:da:59:
24:47:16:37:97:f1:05:f3:ee:21:53:72:56:43:a0:80:10:8f:
c4:23:04:e3:d2:99:a7:f8:a3:79:af:3e:45:e1:58:c1:7e:06:
45:3f:5a:0e:a2:48:be:bd:99:39:5d:88:d0:ec:c0:58:15:0f:
a9:f5:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 23:58:55 2026 by rpki-client