Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rtnNKdzuer1cLaHeVd2Efr32DmI.roa
File: rtnNKdzuer1cLaHeVd2Efr32DmI.roa (raw, json)
Hash identifier: hrsJtWgWWgXT2uF4n4YErrta4DlZR555cIdEsyDsEYM=
Subject key identifier: AE:D9:CD:29:DC:EE:7A:BD:5C:2D:A1:DE:55:DD:84:7E:BD:F6:0E:62
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019DA98DE158392D050A2FFAA7E8A19633A5
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rtnNKdzuer1cLaHeVd2Efr32DmI.roa
Signing time: Mon 20 Apr 2026 06:22:20 +0000
ROA not before: Mon 20 Apr 2026 06:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202271
IP address blocks: 185.108.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:8d:e1:58:39:2d:05:0a:2f:fa:a7:e8:a1:96:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Apr 20 06:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aed9cd29dcee7abd5c2da1de55dd847ebdf60e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:30:28:f1:52:26:f0:07:b3:7c:48:09:88:
65:25:de:df:a5:66:6b:8f:f3:77:a3:d2:63:ff:9b:
7e:fb:d9:15:15:a5:b6:bc:44:9a:43:19:6e:ca:66:
4e:67:d8:c4:15:76:33:a1:7e:cc:f4:37:4d:4a:9d:
07:c6:df:9d:ae:83:42:63:e4:53:c4:09:53:57:fa:
4c:40:a0:8d:3f:f0:b2:ba:b2:08:44:32:fa:07:a3:
5b:bb:68:d1:62:3c:57:f6:6e:7b:bf:8f:78:c0:99:
f8:ef:6a:e9:eb:46:9e:6f:6b:f1:c5:97:d8:55:67:
03:72:2a:e1:11:ec:27:a8:b3:96:2c:6a:2f:0d:10:
f7:81:38:8c:70:e7:5d:f3:24:5d:cd:39:d9:51:19:
b2:30:13:ea:04:a6:52:00:5c:f0:00:02:8f:3f:21:
cd:e7:58:cb:41:9f:63:f6:98:85:cc:95:ac:35:fd:
e6:89:01:71:c5:7d:65:85:ff:dc:34:e5:06:e7:88:
52:bb:1e:7d:89:e6:1d:83:7e:dd:df:db:b3:fb:3b:
e7:d0:74:ee:31:f5:36:b0:c7:28:ca:4f:f6:e7:04:
25:97:17:b4:47:43:4f:2a:3f:d3:d4:40:2f:c1:fb:
b2:50:3a:ff:a1:89:26:17:c6:2b:18:b7:4b:50:c4:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:CD:29:DC:EE:7A:BD:5C:2D:A1:DE:55:DD:84:7E:BD:F6:0E:62
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rtnNKdzuer1cLaHeVd2Efr32DmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.5.0/24
Signature Algorithm: sha256WithRSAEncryption
33:56:57:f0:4b:86:bc:ac:68:9d:e3:6a:d1:59:5b:5b:56:04:
88:93:1c:c0:c8:2c:7e:5e:9b:25:2b:2c:95:f7:83:78:b2:49:
18:35:8c:f3:a9:9a:de:a9:b3:00:0e:af:f9:89:d5:67:5a:a9:
5f:17:e2:9e:98:56:ef:e8:80:d4:f9:e7:c0:b7:98:49:06:57:
32:ae:58:e4:89:f8:29:51:af:81:12:57:44:f3:22:9d:84:e3:
d4:f7:fa:20:03:2f:12:dc:c9:f9:69:b7:0b:c1:f7:ef:b5:92:
9c:94:9d:dd:91:5f:fc:6a:f0:8b:b6:51:ef:3a:3d:df:0c:80:
3f:74:54:63:3f:ce:ee:c2:ce:98:37:b5:49:29:13:16:86:f7:
36:f3:41:b7:31:1d:fc:21:db:54:be:30:ce:84:e4:bb:09:38:
f3:c0:55:a5:96:13:c4:8b:85:11:c0:0d:15:7e:f0:88:d5:bb:
fa:09:d7:55:f4:43:16:d1:32:54:64:7c:8f:11:b1:a3:e5:46:
99:a7:cc:eb:b7:bb:14:9c:ae:9f:9b:3b:21:7b:19:b3:5d:28:
29:da:fc:9e:ed:fb:89:73:7b:4d:ea:b7:c2:2d:3b:7d:f2:e5:
53:ae:2b:0f:9b:23:c4:53:18:d8:96:9a:1a:36:f2:b3:d5:2a:
8a:92:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:44:22 2026 by rpki-client