Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/9anE0sOxoh9ur86ajXwt8Cg3V2g.roa
File: 9anE0sOxoh9ur86ajXwt8Cg3V2g.roa (raw, json)
Hash identifier: 3bLfAo7AcbEE+IrcvvE4Oy3s012eURqkiS4C1whTXhk=
Subject key identifier: F5:A9:C4:D2:C3:B1:A2:1F:6E:AF:CE:9A:8D:7C:2D:F0:28:37:57:68
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01A0247E8A67740B4E719FB517E87B6BE0E8
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/9anE0sOxoh9ur86ajXwt8Cg3V2g.roa
Signing time: Fri 21 Aug 2026 13:24:27 +0000
ROA not before: Fri 21 Aug 2026 13:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203061
IP address blocks: 5.180.220.0/23 maxlen: 23
5.180.222.0/23 maxlen: 23
45.10.232.0/23 maxlen: 23
92.118.12.0/23 maxlen: 23
92.118.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:7e:8a:67:74:0b:4e:71:9f:b5:17:e8:7b:6b:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Aug 21 13:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a9c4d2c3b1a21f6eafce9a8d7c2df028375768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:f5:45:1f:f0:cc:bd:11:90:b2:9e:62:d8:
d9:4c:2c:34:52:ad:de:55:23:d7:21:4f:92:d3:7d:
21:28:7a:91:ce:b8:9f:86:0d:12:9a:bc:3c:a3:ee:
56:c2:2a:e9:18:f2:6d:86:f9:9e:b1:52:60:3b:5b:
46:99:80:98:d3:1e:6a:7a:d8:f8:c7:e1:d1:97:b2:
c5:09:65:25:a7:dd:7b:20:93:23:0f:08:80:30:65:
0e:26:89:44:74:a9:9f:0e:63:06:7f:62:e4:f7:0b:
57:51:c9:58:77:61:12:83:10:73:03:36:4a:ae:b3:
e3:a1:d8:9c:37:cb:26:1f:eb:7c:9d:c8:f5:34:93:
2d:3e:3b:e6:ee:24:4f:8c:e0:d5:aa:00:6f:c0:58:
38:c7:db:bb:7d:f9:09:ac:1c:90:02:94:b3:95:c2:
95:ed:12:e3:f5:4f:92:a9:73:4b:95:f2:fc:04:2b:
bc:26:ec:38:10:3d:0c:1c:ac:c4:d0:da:90:e1:6c:
d6:77:53:96:9d:de:95:5c:e6:e8:f4:76:38:94:b6:
86:62:4c:4a:27:9b:97:bd:e2:42:e6:dc:7f:55:39:
86:bb:8a:0a:09:45:4a:a1:4a:a7:50:76:1c:8d:de:
24:f7:c4:0f:83:8c:cf:86:88:dd:42:a9:a5:5f:18:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:C4:D2:C3:B1:A2:1F:6E:AF:CE:9A:8D:7C:2D:F0:28:37:57:68
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/9anE0sOxoh9ur86ajXwt8Cg3V2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.220.0/22
45.10.232.0/23
92.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
22:4f:90:5b:91:e1:51:35:d7:64:9f:54:66:3f:3c:3b:31:49:
ae:11:34:45:bf:58:ca:eb:ef:26:47:4c:88:18:01:46:8f:43:
70:7a:78:24:a4:05:8a:8d:4a:42:d8:c5:5f:2f:8d:7e:34:33:
4b:9e:39:3c:9d:43:1c:c6:cc:12:36:fc:c1:e1:8a:e9:eb:1b:
7a:01:d7:21:da:4f:5d:2f:1f:c5:c0:a9:3a:2d:4a:5a:a7:78:
36:2c:43:28:3e:58:f4:01:a6:eb:e4:2a:f0:e8:98:84:c3:3d:
f2:f9:ac:f3:1b:93:ec:64:9f:b1:b5:e6:dd:8f:bf:7f:31:db:
6a:90:99:64:91:8b:4f:d6:cf:d9:c6:0c:70:51:bb:c9:d7:fb:
70:15:02:2e:e0:ad:14:be:a2:5e:82:e9:6a:b2:7e:de:d2:8a:
63:f0:e6:c8:ad:cd:c2:8a:9b:4d:31:a9:30:da:8e:b1:d9:27:
08:ee:f5:b5:a2:11:b2:1b:56:2e:15:1f:d2:a5:37:03:f0:eb:
dd:5d:55:d0:5e:95:6a:f0:0f:10:e5:c4:68:b7:92:be:a6:48:
08:12:c3:31:9d:c1:3e:8e:1a:e0:d8:99:72:b6:d2:7d:5b:4c:
d5:03:32:58:9e:a5:25:f7:33:04:82:10:9a:75:b1:c9:46:0f:
20:8f:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:14:02 2026 by rpki-client