Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/cQEbH0ReeL9KuFjUuYtxv0LNUA8.roa
File: cQEbH0ReeL9KuFjUuYtxv0LNUA8.roa (raw, json)
Hash identifier: P6+BrvlEZ0ARWwChG27uoTYHL5ICmgRnw4a5c1gKOxk=
Subject key identifier: 71:01:1B:1F:44:5E:78:BF:4A:B8:58:D4:B9:8B:71:BF:42:CD:50:0F
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 01A11C0B052F94F45880614AA1D6409ED663
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/cQEbH0ReeL9KuFjUuYtxv0LNUA8.roa
Signing time: Thu 08 Oct 2026 15:04:06 +0000
ROA not before: Thu 08 Oct 2026 15:04:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35258
IP address blocks: 5.183.72.0/22 maxlen: 22
2a0b:ba80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:0b:05:2f:94:f4:58:80:61:4a:a1:d6:40:9e:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Oct 8 15:04:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71011b1f445e78bf4ab858d4b98b71bf42cd500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:33:e8:b3:c0:bb:44:ca:3e:44:d0:eb:0b:
37:d9:c5:de:fc:99:98:67:1d:2d:66:60:56:1c:a8:
66:ce:5c:f0:4c:ea:f6:9a:51:e7:d8:8e:b8:6c:5d:
66:51:9c:bd:7c:22:ff:de:e4:34:7e:5c:d4:b7:c3:
84:64:46:af:6a:90:49:34:10:d8:f4:db:e6:84:60:
b7:9a:e5:24:20:20:e2:17:a9:dc:76:86:b0:06:40:
2a:67:5f:99:91:08:91:88:10:20:64:c8:77:36:ac:
dd:b9:05:10:6f:61:b0:5a:77:e5:52:7a:c9:c9:b1:
d1:e8:77:28:d9:b7:c4:57:f4:6d:80:b6:37:a6:b9:
a5:00:82:d5:18:21:ac:e3:ec:d8:8e:68:85:79:07:
d2:0e:38:af:e5:dc:89:1f:fc:a6:23:63:f5:ff:de:
b7:fc:77:1a:1e:3d:26:71:fb:aa:a8:12:47:ea:f2:
a1:be:f6:13:3b:bd:bf:0c:81:f9:7e:57:bb:53:51:
89:a6:19:e8:ef:7b:fd:03:dc:c1:34:29:8c:7c:ff:
96:64:f3:57:5f:32:4c:aa:2c:f8:4b:1a:41:f1:b2:
90:76:5f:28:33:d0:f7:67:88:9b:c7:2b:01:55:3f:
35:6a:44:8d:3d:2c:b1:e9:06:96:5f:c5:a0:e8:93:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:01:1B:1F:44:5E:78:BF:4A:B8:58:D4:B9:8B:71:BF:42:CD:50:0F
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/cQEbH0ReeL9KuFjUuYtxv0LNUA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.72.0/22
IPv6:
2a0b:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
a0:90:bb:1c:a6:6e:04:dd:0d:fb:7e:0d:77:82:d1:9c:94:88:
18:05:28:52:bc:1d:14:1e:ab:2a:2c:ed:f5:55:38:7a:61:6e:
4f:c4:ad:d9:4d:2f:03:45:1c:52:1d:1b:7a:b2:6b:27:d0:c0:
01:de:7e:ed:80:57:29:9a:7f:f8:8b:d1:7e:b8:ba:51:15:fc:
f2:1a:71:11:86:39:a4:a4:0c:99:95:b4:6f:00:fb:68:31:c5:
2f:3a:b9:3d:68:c1:25:a1:8a:b4:81:5a:48:48:28:a5:ee:1d:
8e:0f:a1:21:7f:a6:48:31:ab:d8:3f:46:2b:20:18:a9:e2:05:
3a:f0:7c:1a:81:e1:a5:f5:c1:33:ee:6c:3e:2f:53:52:7d:f9:
31:95:78:79:7f:a6:e3:d6:31:8e:fe:de:f0:b4:db:0f:08:bd:
60:3e:87:35:9b:f2:89:fe:8d:f0:72:f7:30:06:09:b0:e3:af:
35:ff:22:97:b5:5b:43:b5:07:6c:8e:ee:05:3a:cd:ed:7f:24:
6f:3a:d3:e4:72:f9:3d:1f:19:06:a8:89:48:70:b2:ae:85:7b:
15:f1:97:fb:87:b1:e5:aa:e8:9b:94:f0:88:a4:8f:2a:44:71:
dd:bb:f2:24:40:fb:33:f3:49:c0:f1:7d:9a:aa:74:a5:06:56:
b4:6d:71:98
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaEcCwUvlPRYgGFKodZAntZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy
NTViMDUwHhcNMjYxMDA4MTUwNDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTAxMWIxZjQ0NWU3OGJmNGFiODU4ZDRiOThiNzFiZjQyY2Q1MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJwz6LPAu0TKPkTQ6ws32cXe/JmY
Zx0tZmBWHKhmzlzwTOr2mlHn2I64bF1mUZy9fCL/3uQ0flzUt8OEZEavapBJNBDY
9NvmhGC3muUkICDiF6ncdoawBkAqZ1+ZkQiRiBAgZMh3NqzduQUQb2GwWnflUnrJ
ybHR6Hco2bfEV/RtgLY3prmlAILVGCGs4+zYjmiFeQfSDjiv5dyJH/ymI2P1/963
/HcaHj0mcfuqqBJH6vKhvvYTO72/DIH5fle7U1GJphno73v9A9zBNCmMfP+WZPNX
XzJMqiz4SxpB8bKQdl8oM9D3Z4ibxysBVT81akSNPSyx6QaWX8Wg6JOQAwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHEBGx9EXni/SrhY1LmLcb9CzVAPMB8GA1UdIwQY
MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt
Y2U1MDE5MjY0ODk1LzEvY1FFYkgwUmVlTDlLdUZqVXVZdHh2MExOVUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1
LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbdIMA0E
AgACMAcDBQMqC7qAMA0GCSqGSIb3DQEBCwUAA4IBAQCgkLscpm4E3Q37fg13gtGc
lIgYBShSvB0UHqsqLO31VTh6YW5PxK3ZTS8DRRxSHRt6smsn0MAB3n7tgFcpmn/4
i9F+uLpRFfzyGnERhjmkpAyZlbRvAPtoMcUvOrk9aMEloYq0gVpISCil7h2OD6Eh
f6ZIMavYP0YrIBip4gU68HwageGl9cEz7mw+L1NSffkxlXh5f6bj1jGO/t7wtNsP
CL1gPoc1m/KJ/o3wcvcwBgmw4681/yKXtVtDtQdsju4FOs3tfyRvOtPkcvk9HxkG
qIlIcLKuhXsV8Zf7h7HlquiblPCIpI8qRHHdu/IkQPsz80nA8X2aqnSlBla0bXGY
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:43 2026 by rpki-client