Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/AdVE5OlXcZj2420IBfPGuTVm1rY.roa
File: AdVE5OlXcZj2420IBfPGuTVm1rY.roa (raw, json)
Hash identifier: kUUL0iWu2kMToCczE7nZmiSv6u2adUWqU7sTkCw1rJY=
Subject key identifier: 01:D5:44:E4:E9:57:71:98:F6:E3:6D:08:05:F3:C6:B9:35:66:D6:B6
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019FD0FB70D558FC3EC59FD9CF45F8DBC888
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/AdVE5OlXcZj2420IBfPGuTVm1rY.roa
Signing time: Wed 05 Aug 2026 08:12:47 +0000
ROA not before: Wed 05 Aug 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:fb:70:d5:58:fc:3e:c5:9f:d9:cf:45:f8:db:c8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 5 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01d544e4e9577198f6e36d0805f3c6b93566d6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:cd:70:f4:19:bd:a5:6c:53:b4:a9:b1:aa:
f6:be:79:f4:77:5a:63:88:dd:4e:b8:52:35:f0:92:
88:26:19:3a:80:cf:3e:71:02:89:8e:4d:15:c3:d4:
f6:61:5a:9b:61:d2:b4:c2:43:9a:e6:ed:ad:f7:a7:
08:da:b4:10:d1:90:34:f6:9d:c9:af:52:19:fe:41:
45:6d:e7:c2:d1:cc:d9:3b:f7:2e:59:f7:23:4c:6d:
30:5d:40:d9:b3:e5:33:1f:89:c7:86:06:17:75:83:
25:64:eb:c2:ff:85:d0:64:4b:61:12:bc:2c:d3:a2:
47:84:b1:e7:1a:0a:e5:6b:36:95:13:ff:4d:0b:b8:
03:ba:1c:af:fb:69:de:80:f6:0a:d0:77:23:4e:81:
e7:5e:c2:5e:96:05:4b:2c:f6:a8:a3:78:6c:34:fb:
7b:1c:08:08:e5:32:64:41:46:c0:e9:16:86:03:6b:
91:6f:e1:f6:30:23:ea:74:c8:ba:aa:d5:37:1c:1c:
91:03:8d:07:16:2c:7b:c8:31:25:04:a3:81:f0:24:
2f:d5:38:a2:85:21:bb:34:91:95:35:8e:e0:fd:38:
8e:84:4a:07:8e:11:9a:69:95:ef:b2:fd:bc:0a:99:
07:8f:df:4c:0d:6b:49:b9:cd:2e:a5:b9:64:ee:6c:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:44:E4:E9:57:71:98:F6:E3:6D:08:05:F3:C6:B9:35:66:D6:B6
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/AdVE5OlXcZj2420IBfPGuTVm1rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:06:e3:88:6c:37:51:fc:d2:01:a0:e8:fa:f4:fc:72:f1:8c:
34:19:3a:28:ee:42:6e:68:5e:d9:c6:d3:0b:c2:42:b2:09:06:
51:3a:c0:ff:cc:bc:59:7d:80:de:f1:4c:7d:c6:73:13:00:63:
e7:4e:6e:dc:9b:72:0b:cf:26:97:33:6a:09:25:1f:e5:3d:f5:
af:6c:f1:fb:88:c6:a2:55:21:06:a3:11:67:18:18:a6:40:c9:
10:45:ae:bc:eb:b3:16:5f:dd:2a:44:95:68:88:d4:4f:7b:93:
d0:6c:de:9d:65:6b:ef:ad:81:5f:24:8f:1c:21:65:a1:8d:15:
ae:48:27:9e:01:94:e0:a5:ac:5f:73:b6:1b:26:b5:61:36:13:
4a:bf:0f:9e:72:cd:15:9d:a6:50:89:38:2a:9d:84:77:97:8f:
d4:75:a2:bf:3f:f7:ec:af:8b:23:57:93:c9:61:c5:74:b5:6a:
74:2f:07:00:d1:e6:ba:09:94:fa:90:b2:07:d2:7b:45:60:51:
4c:89:dd:20:aa:af:76:0e:ad:08:2e:29:ac:27:37:22:74:73:
eb:d8:97:1d:71:9b:52:9b:4e:3c:e8:cc:28:2f:73:20:f2:e6:
b8:2f:3c:81:80:4c:f2:79:49:dd:f1:15:ec:87:a2:8d:57:d5:
b5:06:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:23 2026 by rpki-client