Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/5bgqx2VEq8u00WX1KeTOdGiLPJY.roa
File: 5bgqx2VEq8u00WX1KeTOdGiLPJY.roa (raw, json)
Hash identifier: 4nmyLLtqtexhAFPaVm7KJ8Zr/ZpDN9w/GZObDNlhUyI=
Subject key identifier: E5:B8:2A:C7:65:44:AB:CB:B4:D1:65:F5:29:E4:CE:74:68:8B:3C:96
Certificate issuer: /CN=670cd7b2bcfb374a3980cce0d08092238754ea09
Certificate serial: 019D2FC0CC1F521C3646A9D24C881EC711ED
Authority key identifier: 67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/5bgqx2VEq8u00WX1KeTOdGiLPJY.roa
Signing time: Fri 27 Mar 2026 14:44:17 +0000
ROA not before: Fri 27 Mar 2026 14:44:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201993
IP address blocks: 91.241.76.0/24 maxlen: 24
213.130.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:c0:cc:1f:52:1c:36:46:a9:d2:4c:88:1e:c7:11:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670cd7b2bcfb374a3980cce0d08092238754ea09
Validity
Not Before: Mar 27 14:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b82ac76544abcbb4d165f529e4ce74688b3c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:12:1a:12:ce:2e:db:5f:16:67:7e:27:6e:
01:b0:c0:db:60:aa:90:cd:70:53:56:ec:f3:5e:b2:
ba:64:00:e5:86:50:9a:bf:d0:13:4d:a7:17:32:8b:
39:f1:0e:be:c0:2b:08:02:ea:c4:10:fd:38:2e:14:
5f:19:5e:04:f3:d1:d0:25:77:d5:68:1c:02:71:9e:
25:29:eb:80:5e:bf:1f:da:0b:d9:f4:02:b1:8a:98:
fd:1d:10:92:0b:94:14:61:95:8e:88:ea:28:5a:d2:
1f:b6:bb:9c:9a:ff:18:ac:12:a6:1d:30:c9:43:f8:
46:d6:15:28:c7:08:e5:f1:3a:d8:af:d5:4b:05:c2:
3e:ca:65:73:01:5c:6a:c7:bc:94:bd:88:cc:7a:19:
db:66:3f:88:5c:af:14:8e:62:3f:28:ad:ee:74:92:
6d:6a:1d:74:77:82:c8:68:69:30:e3:05:7b:f5:ce:
fe:de:06:21:2c:35:d7:67:2b:bb:00:f7:d5:ab:57:
9c:7f:68:a7:76:f7:5a:1d:39:09:a8:6f:d4:3e:e0:
ad:57:14:64:22:c8:7a:24:d3:a0:93:f0:90:e2:db:
5b:cd:a1:84:9d:4d:37:be:fa:ca:59:6d:15:58:68:
4d:2e:96:c1:e5:de:c8:47:1f:7f:13:c0:99:1c:fe:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:2A:C7:65:44:AB:CB:B4:D1:65:F5:29:E4:CE:74:68:8B:3C:96
X509v3 Authority Key Identifier:
keyid:67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/5bgqx2VEq8u00WX1KeTOdGiLPJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.76.0/24
213.130.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:55:3d:d2:e0:3b:8e:24:0c:1e:10:74:c5:80:23:63:1b:74:
34:16:73:5b:b4:3f:b7:17:dc:0e:37:07:29:d4:42:6e:d9:54:
ce:9a:ef:21:83:83:74:1e:99:a4:11:48:da:59:b1:41:88:9e:
5c:c2:09:ff:94:38:45:04:30:c9:d6:c0:70:fb:c0:90:80:59:
f4:ee:46:f8:45:dd:c4:86:89:34:95:b8:2c:d0:75:c0:91:c8:
b9:bf:45:fc:5b:e8:e0:0d:8d:ed:eb:73:ef:4b:48:43:5d:92:
bd:1f:a7:76:a6:ab:0a:31:af:3e:f7:f0:e9:a3:df:9f:9a:fd:
ea:82:44:1f:7a:6a:ff:b1:03:d7:2f:1f:60:2b:28:17:b8:b5:
f3:49:1c:a3:d4:45:fe:f7:d3:01:83:37:5a:03:23:da:99:35:
41:9b:9d:19:74:89:c8:ad:eb:35:d0:8f:05:4c:39:10:a5:4f:
0b:2b:85:3a:1f:cc:24:94:0e:87:a2:a8:c5:bc:f9:48:64:9a:
20:6f:9d:72:f9:93:2a:5c:e9:2e:29:d9:b8:36:66:0e:ef:2b:
fa:52:ed:47:ec:51:de:93:fc:51:16:2e:c8:7c:b5:b6:af:22:
fa:77:7d:0b:f8:dc:bd:b6:a8:15:25:2b:0d:51:ed:f6:00:ba:
1f:dc:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:44:43 2026 by rpki-client