Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa
File: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (raw, json)
Hash identifier: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=
Subject key identifier: E5:B4:06:53:B8:1D:D6:86:8F:66:65:3C:30:79:47:D9:5D:A2:8D:84
Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Certificate serial: 019C81BFF5A96FB6DFBDD71C4D0528628099
Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa
Signing time: Sat 21 Feb 2026 19:49:27 +0000
ROA not before: Sat 21 Feb 2026 19:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 2a13:e8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bf:f5:a9:6f:b6:df:bd:d7:1c:4d:05:28:62:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Validity
Not Before: Feb 21 19:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b40653b81dd6868f66653c307947d95da28d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:1e:2e:fe:12:13:86:08:bc:2c:57:a9:d6:
38:c6:83:42:2a:ed:e3:92:05:a6:ad:5f:cb:27:bf:
4e:ae:cf:d0:54:35:88:05:f0:b0:b3:0a:dd:da:31:
67:78:b5:f3:3f:7e:0b:9f:04:a2:fe:d5:84:82:1d:
1d:38:26:54:82:ad:a4:0e:e9:21:76:72:67:18:92:
55:4b:80:3e:0b:a0:4b:c0:d8:23:53:ab:46:57:05:
c5:79:fe:c8:2b:4b:bd:27:27:e0:5f:f8:81:0a:75:
3c:c5:b1:23:e0:9e:d5:28:63:60:52:1e:bb:f0:08:
7a:ee:6e:1d:c0:95:d1:ef:02:f8:b5:6f:6e:c7:f2:
29:1d:96:3c:9e:d4:ef:b5:fc:d6:a5:9f:26:b7:62:
28:8c:27:da:42:d5:99:20:bb:d9:13:36:fc:e9:5f:
86:3e:0e:48:4c:46:f3:4c:f7:b8:13:a4:43:6c:06:
93:a4:23:cd:bc:e0:34:0d:ea:d3:61:0a:91:c4:a9:
0c:9c:b5:06:8b:bb:a1:97:ad:f0:3e:80:ea:58:8c:
bf:ff:b0:f3:c6:ef:60:ab:53:10:9f:da:d2:98:99:
7c:9f:4d:ba:25:d7:f4:95:92:f9:95:f9:1d:81:40:
a2:11:8d:02:56:10:a7:8e:c1:8c:17:41:4e:11:f8:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:06:53:B8:1D:D6:86:8F:66:65:3C:30:79:47:D9:5D:A2:8D:84
X509v3 Authority Key Identifier:
keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:aa:26:33:33:c6:68:bf:98:69:aa:90:25:b3:35:82:b1:58:
09:88:a0:a9:f3:d5:3c:63:cf:6a:9d:85:4f:17:ba:e5:be:0d:
6c:b2:33:54:03:ec:2a:1e:e3:9c:9c:2d:e8:88:c5:c3:0a:f9:
00:a4:51:65:8a:2f:1a:e8:ac:a2:10:eb:ec:76:8a:c5:7a:98:
ee:3d:a0:46:3b:85:cc:8f:3a:80:b0:9e:4c:ee:d3:e5:52:dc:
cb:c8:87:02:0e:57:0a:88:c6:80:c3:df:66:1d:e7:ec:3b:18:
ad:2a:d1:d3:ec:5e:ca:c6:46:e8:d2:8e:c7:fb:0d:1d:2a:bf:
52:ec:b0:87:14:cc:fc:a1:21:1d:7b:44:51:f6:a8:3d:cc:70:
c6:de:20:06:f7:08:20:4e:a5:4c:5e:3c:e4:2d:f6:e3:5b:b6:
6f:dc:57:91:26:e0:84:41:ab:7e:bd:58:46:be:be:b9:c8:c4:
97:e0:16:6d:f9:43:7f:d1:3c:73:2b:d1:ad:87:4a:a1:74:02:
b1:f2:79:79:91:7b:57:b3:4c:6c:f2:41:af:cb:14:24:50:60:
f9:43:c1:44:d8:b0:3f:8e:7e:62:c6:17:69:87:22:e3:6b:4e:
17:5d:44:47:39:5d:6f:9b:b7:aa:5d:cc:c4:cb:49:55:8f:08:
95:6a:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:51:54 2026 by rpki-client