Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5efjrUYRokXCOvT4J2mHomdLJXU.roa
File: 5efjrUYRokXCOvT4J2mHomdLJXU.roa (raw, json)
Hash identifier: kCs0w342k8pWszMUssxco1fg/yQA+DYYLLu22hu4Kp8=
Subject key identifier: E5:E7:E3:AD:46:11:A2:45:C2:3A:F4:F8:27:69:87:A2:67:4B:25:75
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019D2593888DEF82C2B444867A06147D118C
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5efjrUYRokXCOvT4J2mHomdLJXU.roa
Signing time: Wed 25 Mar 2026 15:18:38 +0000
ROA not before: Wed 25 Mar 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209263
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:93:88:8d:ef:82:c2:b4:44:86:7a:06:14:7d:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 25 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5e7e3ad4611a245c23af4f8276987a2674b2575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:31:ea:71:b1:07:b9:88:6d:83:3a:6d:99:
ea:3f:ad:3b:ff:b8:8a:06:2e:af:b1:bb:93:f4:45:
d7:c8:5a:b5:d0:45:e1:51:cb:ea:81:04:5e:0a:59:
2b:41:f8:f0:a7:28:c5:63:74:10:f1:7d:eb:76:28:
47:c0:bf:bd:cd:83:46:85:42:9b:9d:a7:99:17:65:
5a:f8:9c:10:49:05:4b:49:8c:fe:5c:91:c3:15:79:
4f:30:3a:d9:18:37:1e:f2:0d:74:11:75:66:6d:8d:
24:3d:05:c8:24:65:9d:bb:74:d0:24:53:f4:3d:77:
f4:5f:21:7a:4a:22:6a:e7:77:64:a5:ed:50:45:2d:
d8:9c:14:97:9d:5a:24:8f:37:d2:04:af:fa:ff:d3:
52:4f:d7:c2:95:26:ff:41:f4:c9:a6:78:7a:fe:b1:
a9:53:08:41:63:a0:9f:1c:d6:6c:59:78:0f:58:d7:
0c:be:b1:75:30:47:60:a1:d4:73:c0:66:49:47:93:
4b:d3:a1:f1:60:17:33:de:ba:f5:ce:79:b1:df:fc:
93:2f:94:00:95:af:46:71:81:68:82:eb:f3:3e:2e:
a9:aa:28:c8:83:ed:e9:66:51:6f:00:17:24:8d:2a:
0c:4d:5b:4c:3c:f4:f7:6b:bb:e5:03:c2:66:a1:d4:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:E3:AD:46:11:A2:45:C2:3A:F4:F8:27:69:87:A2:67:4B:25:75
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5efjrUYRokXCOvT4J2mHomdLJXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
26:eb:ca:12:db:1e:bf:ae:ad:9c:4c:60:67:1c:bc:dc:04:b6:
cd:6c:b2:fd:64:9c:3b:cd:71:db:28:0a:1e:13:39:be:07:9d:
5e:9e:3c:2b:bb:d6:c1:e4:8f:bf:f3:c3:ba:f3:67:39:6a:8d:
28:32:99:35:bf:fe:f7:b0:df:f6:30:80:64:de:ae:38:4a:6e:
2a:7f:31:c4:3b:b9:2b:e7:a0:7a:f4:81:ba:94:12:ce:f7:27:
84:21:2c:ca:b6:7f:11:3d:e2:cd:f4:4d:93:72:c9:d2:f0:10:
92:bf:02:79:c3:63:1b:b1:a3:0b:87:e3:c1:f2:79:06:78:86:
a7:95:08:83:f2:80:8a:33:86:9b:42:bf:72:55:fd:12:e1:20:
8d:4c:f8:9a:86:d3:0f:b7:48:af:4c:25:b5:e5:82:72:c7:61:
1a:cc:10:93:25:f2:f4:97:e8:cf:71:9f:b3:3c:d3:d3:b3:63:
5d:c7:53:92:2c:f1:70:e3:3d:6d:a4:21:55:0f:7e:09:23:3f:
bb:6d:aa:a6:4f:4e:7b:fd:84:22:b8:f5:3c:7a:f1:a0:7a:24:
d7:c1:6f:ca:e2:84:d3:13:0a:17:3a:e1:a5:26:2f:ab:99:82:
b3:9b:bc:7f:56:09:d7:40:2b:e7:8a:78:6a:ab:7e:6b:94:4d:
2a:90:a1:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0lk4iN74LCtESGegYUfRGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjYwMzI1MTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU3ZTNhZDQ2MTFhMjQ1YzIzYWY0ZjgyNzY5ODdhMjY3NGIyNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lgx6nGxB7mIbYM6bZnqP607/7iK
Bi6vsbuT9EXXyFq10EXhUcvqgQReClkrQfjwpyjFY3QQ8X3rdihHwL+9zYNGhUKb
naeZF2Va+JwQSQVLSYz+XJHDFXlPMDrZGDce8g10EXVmbY0kPQXIJGWdu3TQJFP0
PXf0XyF6SiJq53dkpe1QRS3YnBSXnVokjzfSBK/6/9NST9fClSb/QfTJpnh6/rGp
UwhBY6CfHNZsWXgPWNcMvrF1MEdgodRzwGZJR5NL06HxYBcz3rr1znmx3/yTL5QA
la9GcYFoguvzPi6pqijIg+3pZlFvABckjSoMTVtMPPT3a7vlA8JmodTiCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXn461GEaJFwjr0+Cdph6JnSyV1MB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvNWVmanJVWVJva1hDT3ZUNEoybUhvbWRMSlhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9iMA0G
CSqGSIb3DQEBCwUAA4IBAQAm68oS2x6/rq2cTGBnHLzcBLbNbLL9ZJw7zXHbKAoe
Ezm+B51enjwru9bB5I+/88O682c5ao0oMpk1v/73sN/2MIBk3q44Sm4qfzHEO7kr
56B69IG6lBLO9yeEISzKtn8RPeLN9E2TcsnS8BCSvwJ5w2MbsaMLh+PB8nkGeIan
lQiD8oCKM4abQr9yVf0S4SCNTPiahtMPt0ivTCW15YJyx2EazBCTJfL0l+jPcZ+z
PNPTs2Ndx1OSLPFw4z1tpCFVD34JIz+7baqmT057/YQiuPU8evGgeiTXwW/K4oTT
EwoXOuGlJi+rmYKzm7x/VgnXQCvninhqq35rlE0qkKHq
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:09:34 2026 by rpki-client