Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/5UDuqrSyuGprLjI2HKiGxGynvqE.roa
File: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (raw, json)
Hash identifier: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=
Subject key identifier: E5:40:EE:AA:B4:B2:B8:6A:6B:2E:32:36:1C:A8:86:C4:6C:A7:BE:A1
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019D303F256FE1D6F8C2D469418FF48BCA0B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/5UDuqrSyuGprLjI2HKiGxGynvqE.roa
Signing time: Fri 27 Mar 2026 17:02:17 +0000
ROA not before: Fri 27 Mar 2026 17:02:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 185.113.10.0/24 maxlen: 24
2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:3f:25:6f:e1:d6:f8:c2:d4:69:41:8f:f4:8b:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 27 17:02:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e540eeaab4b2b86a6b2e32361ca886c46ca7bea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:92:3c:89:cf:f7:56:65:da:1f:53:1c:b1:
e6:fe:10:74:46:a7:48:4b:b4:5f:d2:88:c3:1a:ef:
e6:d0:5e:d8:52:a0:11:af:a3:50:06:7c:8f:9c:6d:
01:ea:91:c6:54:da:ff:f9:47:b8:22:52:59:90:e3:
f9:17:5e:2f:a1:c2:ed:84:7c:5e:54:07:5e:34:f1:
86:4f:1f:dd:aa:5d:68:1c:1c:94:22:13:86:1a:2e:
4c:34:b9:bc:5c:30:3d:5a:f1:5c:8a:cd:30:e6:a6:
a9:5a:e2:96:66:e7:02:e1:38:65:56:61:1c:95:cd:
de:69:8e:60:38:94:df:a6:59:10:d2:27:58:57:d8:
cd:a0:af:aa:97:30:34:c4:4f:90:53:2c:01:54:5a:
3e:07:e2:6b:82:55:07:61:14:4d:58:07:98:1a:da:
a3:b7:69:5a:18:fb:bc:37:e2:12:9b:b3:68:82:9c:
00:97:86:3d:d3:27:40:85:12:31:1e:2b:c3:be:43:
25:80:fa:18:72:ba:46:76:e5:e4:bc:70:42:68:84:
1a:a2:34:6b:cf:4e:d2:cd:df:c1:e0:83:21:cc:05:
39:0b:ae:dc:2f:c5:e8:f3:94:d4:30:6a:95:4d:93:
37:aa:a3:64:bf:12:02:e9:ec:d4:95:f7:8e:21:0a:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:EE:AA:B4:B2:B8:6A:6B:2E:32:36:1C:A8:86:C4:6C:A7:BE:A1
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/5UDuqrSyuGprLjI2HKiGxGynvqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
d9:4a:ba:cf:6a:23:22:5b:c6:da:05:87:0d:80:5c:09:83:91:
5c:15:c0:0d:1a:7e:a1:d5:c3:82:aa:90:74:dc:a5:ee:46:37:
72:69:14:99:db:76:95:af:ac:b5:35:e7:d5:00:98:ba:0b:89:
f2:15:21:be:b7:dd:6b:d3:94:cb:6d:ff:04:9b:1d:09:7f:4d:
4a:fd:b6:55:01:91:e8:5f:a2:16:86:6a:0d:0c:81:55:f5:c7:
17:c2:6f:46:63:0f:22:90:cf:4c:e2:37:ad:98:b2:e2:5e:27:
af:5d:d7:a2:60:dc:ff:07:50:90:6a:a1:aa:ec:28:7f:90:00:
e2:6c:99:82:2c:e0:f1:e7:2a:2e:56:61:80:15:75:93:1b:11:
5b:7f:e5:7e:de:9c:3d:58:1d:85:8f:c5:bb:08:30:59:91:c9:
eb:c8:7c:83:7f:22:43:78:f9:91:03:4b:f9:0e:c4:53:9e:87:
26:30:86:1e:66:73:26:77:e3:3c:0a:f1:1e:5e:d7:68:34:7d:
df:60:94:03:db:89:85:ac:d2:90:79:b1:05:81:26:cc:1b:0d:
02:17:4e:33:a5:0f:2b:65:3d:aa:b8:f8:43:3e:27:79:cd:13:
20:c6:31:de:2d:a0:2b:f4:1e:90:8e:a0:6e:53:f5:08:79:67:
28:70:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:21:09 2026 by rpki-client