Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/A5r5Qaig76Fi-h_x1MJZp-FQeMg.roa
File: A5r5Qaig76Fi-h_x1MJZp-FQeMg.roa (raw, json)
Hash identifier: BufIVjQJ6C3azRulNXmnwhmvj6IKqHgaJCn65BJ4x/c=
Subject key identifier: 03:9A:F9:41:A8:A0:EF:A1:62:FA:1F:F1:D4:C2:59:A7:E1:50:78:C8
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019CD3E90A0BBFA51420CE8535AB7DCF78AF
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/A5r5Qaig76Fi-h_x1MJZp-FQeMg.roa
Signing time: Mon 09 Mar 2026 18:43:10 +0000
ROA not before: Mon 09 Mar 2026 18:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213811
IP address blocks: 185.65.116.0/24 maxlen: 24
193.143.16.0/23 maxlen: 24
2a14:b000::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:e9:0a:0b:bf:a5:14:20:ce:85:35:ab:7d:cf:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Mar 9 18:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=039af941a8a0efa162fa1ff1d4c259a7e15078c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:e6:1e:98:ef:fe:3e:b8:1a:00:6d:4f:e7:
a1:e1:37:be:7b:83:08:64:a8:5a:a4:ea:53:52:5b:
dc:91:6f:28:71:26:29:bb:3d:02:9c:5a:f6:8f:2d:
1f:06:57:0f:3a:76:83:cc:1c:9f:c5:4d:c7:84:99:
e7:84:41:73:75:21:61:ba:6a:8e:3d:9b:39:e9:fd:
44:fb:26:28:71:96:45:de:7d:21:26:42:88:b3:c0:
cb:5e:0d:05:86:83:ef:f4:28:86:d5:0e:f4:01:18:
17:01:b5:5d:4e:88:df:be:54:ac:88:18:25:87:ae:
72:38:9c:57:34:80:f2:33:96:5a:45:32:25:61:39:
95:93:6f:c6:be:f3:a7:52:dd:80:cc:a4:13:23:30:
d5:95:09:80:2e:3a:2d:c8:e7:79:43:74:cd:3b:d3:
42:24:38:07:2b:03:36:b0:05:73:d2:f5:88:ea:82:
42:92:6a:a0:95:75:31:a3:61:9f:25:d5:0a:2f:b1:
43:0c:7c:cf:bc:11:73:f5:0d:ba:02:68:c8:53:28:
4b:4c:2c:84:a6:56:b7:99:7a:36:35:d8:67:85:32:
02:b0:cf:a9:1b:27:55:e2:1f:5f:3c:cd:7a:e1:6a:
9e:99:75:f4:83:1c:5d:3c:b6:8b:be:aa:c2:8f:ac:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:F9:41:A8:A0:EF:A1:62:FA:1F:F1:D4:C2:59:A7:E1:50:78:C8
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/A5r5Qaig76Fi-h_x1MJZp-FQeMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.116.0/24
193.143.16.0/23
IPv6:
2a14:b000::/29
Signature Algorithm: sha256WithRSAEncryption
c0:97:01:21:98:c7:90:50:80:b3:e7:0b:3f:bd:37:a7:b3:66:
92:19:ee:54:9f:96:c9:6f:03:8b:bf:84:23:d9:d0:4f:a9:1b:
e4:fa:77:11:dc:f4:27:b2:cf:d5:dd:0a:6e:5f:03:13:3b:04:
ca:20:1a:c0:0c:43:83:6e:07:78:91:47:bd:6a:03:6a:0c:08:
4c:d5:6c:dc:f3:dc:51:96:60:a4:32:26:66:c7:66:56:e9:65:
7e:cb:17:91:84:3c:56:02:9f:94:93:0a:a5:4c:e9:aa:ce:5d:
2f:e9:5d:7a:af:ae:ba:73:5d:d1:00:4a:2a:c0:aa:f7:85:17:
a8:c1:aa:ba:ef:a1:f5:d4:22:81:ce:ae:7a:2a:2a:59:ce:00:
2b:d4:63:0c:69:63:f7:e2:ca:cb:26:27:67:46:17:74:d5:12:
16:a4:7f:95:6f:d3:70:21:94:25:ab:b2:5e:c8:c3:43:75:2b:
75:98:84:ce:58:e5:82:0c:03:65:1a:df:20:c7:8a:c3:83:25:
13:5f:88:4b:67:65:91:91:78:57:6f:4d:31:62:6a:d2:2d:5d:
41:60:80:a3:28:4e:53:d8:50:2d:71:df:b7:52:c6:d2:a5:66:
fb:b0:b9:6d:0a:10:9e:7d:b8:18:6a:44:1b:a0:35:2d:ab:41:
46:ad:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:29:51 2026 by rpki-client