Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/5le9jY8NHCPPbL1X4rdpNU4gnqk.roa
File: 5le9jY8NHCPPbL1X4rdpNU4gnqk.roa (raw, json)
Hash identifier: r6Bd6s1EHvwxX57dE8cN5fG2BzO6ZysNK6i8oi7I6Bg=
Subject key identifier: E6:57:BD:8D:8F:0D:1C:23:CF:6C:BD:57:E2:B7:69:35:4E:20:9E:A9
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019FEA73E3310AE23DD3E2CE9AB53F62B726
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/5le9jY8NHCPPbL1X4rdpNU4gnqk.roa
Signing time: Mon 10 Aug 2026 06:54:51 +0000
ROA not before: Mon 10 Aug 2026 06:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.14.26.0/24 maxlen: 24
185.14.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:73:e3:31:0a:e2:3d:d3:e2:ce:9a:b5:3f:62:b7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Aug 10 06:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e657bd8d8f0d1c23cf6cbd57e2b769354e209ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:47:30:74:03:9e:37:86:48:b6:0f:f5:cf:
be:15:17:59:fe:65:6c:69:6d:d3:8a:ad:84:3a:b8:
43:d9:19:d5:a6:f3:c6:5f:c6:ae:58:5a:12:67:55:
6b:32:6c:91:b6:10:26:7e:89:e4:40:d4:e8:30:17:
50:5c:1c:4b:2d:02:0a:8c:8d:7a:d4:75:63:b3:b0:
e8:76:c0:48:10:c6:13:07:ee:42:08:0f:09:c1:e5:
22:49:1c:1a:cb:35:12:62:3d:ff:ce:74:a5:2c:56:
5e:7b:5f:37:8a:1f:65:7b:45:24:a5:10:a0:f8:13:
c2:d9:ad:ae:48:af:4a:b7:ef:4a:8c:ca:e1:00:60:
4a:81:39:0f:8a:7f:17:c4:ac:1c:a9:3f:4d:72:54:
25:c4:19:be:9c:0a:9f:eb:7a:d9:25:19:93:da:3c:
b1:6f:ab:0c:aa:7d:65:e6:91:3b:5b:e7:c7:c8:e5:
a9:4b:65:6f:7b:e4:22:22:17:ac:3f:79:8f:a0:03:
aa:06:e2:93:42:d8:fa:0a:bc:29:a4:75:8e:b4:9f:
2e:26:5e:39:f0:96:55:3c:bb:02:72:46:27:10:2e:
e6:41:72:2a:e3:9f:33:fc:5f:b6:72:0b:a6:a0:90:
0a:f5:43:28:c3:77:96:e3:df:58:0d:11:78:bd:0a:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:BD:8D:8F:0D:1C:23:CF:6C:BD:57:E2:B7:69:35:4E:20:9E:A9
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/5le9jY8NHCPPbL1X4rdpNU4gnqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:36:bf:00:2e:5e:35:6a:3a:31:6c:ae:6b:53:f6:cf:c9:82:
ea:01:28:1b:84:3a:b3:f9:bc:af:b7:ef:af:98:47:a0:e4:a5:
00:2e:d7:b7:8e:72:7e:c2:c9:b1:15:5e:81:24:5b:67:17:a0:
9d:35:45:d5:8c:12:76:b4:1f:fc:53:59:84:82:ca:a3:97:94:
a2:8d:fa:4a:a6:7d:e9:96:7b:38:18:28:9b:aa:29:1c:e7:d4:
3a:67:84:3f:35:af:2a:fd:29:88:08:26:b8:da:b8:93:da:23:
4b:8e:fc:6a:a4:48:08:07:f4:e9:85:0f:7f:41:a5:d0:2d:90:
42:6e:89:55:c5:44:26:40:79:aa:00:20:41:6b:15:94:fe:c6:
e1:d9:6f:a4:e8:38:37:a4:4b:be:b1:e3:81:f1:bc:ef:f4:be:
64:a6:9a:8b:08:db:a6:00:28:9d:82:5a:57:b3:e9:12:a1:f3:
b8:88:e8:68:eb:77:6b:b6:34:71:d5:83:45:c0:82:8c:89:cc:
7b:5d:5c:01:33:47:5a:78:59:1c:07:45:aa:fa:4d:5d:87:23:
4f:55:f5:21:d3:4e:c7:29:f3:83:d5:58:f2:a6:b2:98:7d:ad:
4f:2b:73:30:80:dd:a4:25:2e:9d:f0:e1:cd:59:e4:a7:28:db:
f0:aa:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:05 2026 by rpki-client