Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/RSm0qGEri_euvlxfenvDorVTnKw.roa
File: RSm0qGEri_euvlxfenvDorVTnKw.roa (raw, json)
Hash identifier: uBu5fXFf8DACYIsLAH/WatGFK4JVkAobmStF5eGh7+4=
Subject key identifier: 45:29:B4:A8:61:2B:8B:F7:AE:BE:5C:5F:7A:7B:C3:A2:B5:53:9C:AC
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019FC9687B6956A1532DE3D946076EE21BF1
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/RSm0qGEri_euvlxfenvDorVTnKw.roa
Signing time: Mon 03 Aug 2026 20:54:55 +0000
ROA not before: Mon 03 Aug 2026 20:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 5.102.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:68:7b:69:56:a1:53:2d:e3:d9:46:07:6e:e2:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 3 20:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4529b4a8612b8bf7aebe5c5f7a7bc3a2b5539cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:8b:21:03:e4:af:62:ec:a9:28:d8:a7:54:
aa:c9:7f:40:58:56:3d:0f:89:77:2e:fa:5d:ca:93:
50:0b:15:2a:e3:41:2a:a1:75:9c:82:d7:33:ec:61:
ca:f5:e6:c7:60:f9:95:8d:43:24:1a:16:05:38:4c:
91:9d:bf:de:95:2d:4b:9b:d1:02:c1:0e:c5:27:21:
61:68:cc:87:ef:09:b9:92:62:16:3a:da:24:8a:5f:
ee:a3:32:97:52:5b:8c:6a:54:b0:6b:33:18:09:fb:
48:ed:91:e2:b6:ef:92:30:6a:16:4d:29:db:f7:76:
bd:d1:cc:a3:73:10:1e:36:45:5c:19:9b:c2:3c:46:
c4:04:41:8f:2d:4f:53:df:ae:f8:39:ae:82:02:4c:
e8:e9:3f:07:e3:cc:6b:cf:88:b2:fb:bd:72:20:ee:
2d:d1:61:39:86:e5:69:18:68:c6:6b:88:be:2c:63:
66:da:58:49:cf:17:81:e7:97:59:eb:2e:20:c9:f5:
ad:0e:09:04:71:2f:a4:66:e0:02:36:ac:14:3c:34:
b0:ab:af:5e:49:a1:88:ce:68:b4:7d:10:0d:3a:85:
0a:91:d9:d0:e3:e0:7b:5c:e4:ac:e8:89:01:5b:57:
7d:dd:1f:eb:c4:3f:fc:56:7c:94:f5:57:33:11:ef:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:29:B4:A8:61:2B:8B:F7:AE:BE:5C:5F:7A:7B:C3:A2:B5:53:9C:AC
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/RSm0qGEri_euvlxfenvDorVTnKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:11:fa:5f:4b:f8:8b:df:53:86:8b:4c:e5:f7:99:6f:3e:6f:
a0:ce:58:dc:02:64:03:f1:15:5f:04:1c:a5:64:8d:f5:87:a8:
63:9e:1c:97:7e:40:02:f4:5f:73:54:16:33:a3:a9:d4:b6:b3:
26:90:f5:de:fc:b6:e9:59:8e:0b:4e:3d:e8:f2:e0:63:84:c6:
05:68:82:72:97:4f:c2:bd:c2:3b:ee:10:fa:5c:65:76:64:55:
25:00:33:37:63:10:f5:c9:ef:dd:5b:3f:94:50:91:98:80:ad:
c4:d1:2d:91:51:29:26:e4:72:53:f0:6c:ab:05:9b:86:ef:76:
6b:a2:97:3b:c9:49:01:d1:c9:69:b3:8d:fe:20:c0:10:95:15:
58:6a:31:d0:d2:96:0f:cd:96:53:04:a9:57:1e:7b:e6:ea:73:
4f:db:56:b2:f3:21:d1:69:49:b6:00:51:48:01:88:3d:a8:a7:
ed:ec:be:2c:23:cc:e7:ac:63:09:4a:17:18:78:db:e7:21:60:
bb:dd:cb:3a:b3:53:e6:b5:ea:08:ae:2f:df:29:1e:ad:2e:6e:
86:c8:ef:aa:c3:15:92:49:d1:59:b9:72:37:ac:cd:68:64:9a:
5d:47:cb:90:da:6f:f0:9c:e2:6d:04:06:b5:6e:d6:c4:05:d6:
0f:b3:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:22 2026 by rpki-client