Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/h5-zPQAsKF_a5VLudD-2zYn1o5E.roa
File: h5-zPQAsKF_a5VLudD-2zYn1o5E.roa (raw, json)
Hash identifier: b8JRYhhwA4+LKIlqixqUDwlTkJHpVYoYLItn3htFcFw=
Subject key identifier: 87:9F:B3:3D:00:2C:28:5F:DA:E5:52:EE:74:3F:B6:CD:89:F5:A3:91
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E2F4ED975751F5E545A9BF67E412EE652
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/h5-zPQAsKF_a5VLudD-2zYn1o5E.roa
Signing time: Sat 16 May 2026 05:42:37 +0000
ROA not before: Sat 16 May 2026 05:42:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214941
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:4e:d9:75:75:1f:5e:54:5a:9b:f6:7e:41:2e:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 16 05:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=879fb33d002c285fdae552ee743fb6cd89f5a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:8a:75:14:d4:83:f3:94:8a:54:db:16:ac:
53:ea:a5:17:6c:10:1d:9d:88:05:76:29:8d:df:91:
60:e5:3f:5b:8e:ce:03:0c:59:31:54:1e:59:04:c1:
3a:74:72:37:33:ba:4e:81:75:43:3c:d5:c1:a2:f1:
07:a2:75:e7:6b:5b:a1:df:f8:2b:15:ce:df:ad:cc:
3c:88:15:f1:bd:fd:86:74:7e:6d:ce:46:33:df:d5:
2c:c4:0d:41:9c:b8:8a:28:82:f9:7c:ea:de:ae:e7:
32:75:d2:bd:8b:c1:47:38:bd:70:6d:e1:49:9f:45:
02:2f:d5:ae:9e:14:fa:0c:1d:05:fb:6c:2d:16:04:
1a:de:6f:41:10:7b:16:cb:d3:e7:bc:0b:bc:b3:ea:
19:a3:77:49:70:da:98:1d:27:de:c1:ef:44:19:86:
8d:56:5d:58:c3:1c:72:7a:99:7e:27:e9:14:b4:75:
88:ed:38:78:3d:a2:d7:0e:4b:cf:55:bd:6d:83:4a:
89:5a:47:93:38:74:08:0a:bc:ed:ce:f2:c5:c4:d4:
b8:18:03:e9:e7:6f:fe:7f:ad:fa:21:d0:3e:a9:ce:
e5:74:9c:7c:ce:dd:8b:0c:a3:7b:e5:c1:f9:51:68:
69:42:73:f7:c3:60:4c:97:13:f3:fc:79:65:51:ff:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:B3:3D:00:2C:28:5F:DA:E5:52:EE:74:3F:B6:CD:89:F5:A3:91
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/h5-zPQAsKF_a5VLudD-2zYn1o5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b6:b6:1c:b0:77:f2:30:8a:73:76:a2:09:10:f2:b5:5f:2b:
fb:fd:06:5a:ec:f6:c0:2d:79:39:dd:31:3d:b8:25:f0:d7:c5:
cb:5e:1a:c0:cf:be:67:1a:af:7d:5b:c8:27:84:96:62:73:e1:
4b:8a:6c:b6:b9:c6:d2:b4:8a:b8:85:40:45:28:dd:5f:63:d3:
c2:24:c9:6b:86:b9:17:85:75:a2:f4:ba:b1:58:e0:ec:a5:46:
5c:7e:40:89:0f:cd:72:2e:b7:f7:e5:67:c9:c5:19:47:7e:3a:
f8:36:bc:e6:d7:ea:b9:da:57:a0:62:a3:13:73:c4:79:57:15:
c4:20:a8:1a:3e:e9:45:89:42:92:3a:be:26:17:f8:10:bf:04:
20:df:12:ec:e0:e9:0c:a9:f8:e1:c4:fa:72:61:d8:de:47:c6:
09:88:95:b8:cb:a5:9a:18:b8:9b:b1:a0:f4:a5:3c:f8:0f:93:
6f:91:94:cf:6f:e1:7b:99:cc:f2:4b:4b:cf:fe:ec:72:2e:2e:
ac:7e:f6:5a:4f:69:8d:62:d0:27:44:31:c3:3c:84:fd:8e:36:
e0:6c:d3:10:4a:41:d5:42:bf:19:d1:7f:8b:a2:43:9d:2d:ed:
98:69:4c:17:01:47:b7:03:82:88:b1:49:b3:d8:0c:00:c8:81:
e4:5f:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:46:49 2026 by rpki-client