Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9a7HtzdOm-izP5P_q0d09zKETN0.roa
File: 9a7HtzdOm-izP5P_q0d09zKETN0.roa (raw, json)
Hash identifier: gZgghNhwAJ6K2+rASaeF3DkXp64RWMiU3FgjeXHHCxA=
Subject key identifier: F5:AE:C7:B7:37:4E:9B:E8:B3:3F:93:FF:AB:47:74:F7:32:84:4C:DD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E0CC2DCB470D7AD242A7E8FBD9E0E8E7A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9a7HtzdOm-izP5P_q0d09zKETN0.roa
Signing time: Sat 09 May 2026 12:42:37 +0000
ROA not before: Sat 09 May 2026 12:42:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213495
IP address blocks: 5.175.183.0/24 maxlen: 24
5.175.188.0/24 maxlen: 24
5.231.56.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:c2:dc:b4:70:d7:ad:24:2a:7e:8f:bd:9e:0e:8e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 12:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5aec7b7374e9be8b33f93ffab4774f732844cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:6a:6e:bc:c7:91:45:28:8f:20:16:4d:ed:
e1:cc:56:93:10:a1:bb:71:72:40:d7:89:a5:63:47:
46:ea:f8:72:59:01:f0:ae:a5:f8:c4:3a:74:c8:31:
9d:86:60:6a:f1:2e:1b:89:73:7d:86:50:dd:7c:da:
f4:5b:63:60:19:a0:19:50:ce:be:d1:57:ff:79:1a:
72:1d:a4:5a:00:5a:cc:03:01:bd:9c:50:77:bc:14:
18:2e:22:59:49:e4:a8:fe:ca:9e:5c:29:05:c1:90:
f8:5d:99:d9:b2:d8:c2:e9:c3:6d:b3:8b:26:b7:06:
b8:a7:fa:19:d9:b9:86:c5:8f:a9:b5:4b:45:6d:f2:
dd:ce:58:10:92:1d:96:13:90:48:6a:27:26:f5:dc:
7d:22:15:14:f1:7f:86:9e:d5:13:40:ee:d7:42:41:
27:7b:c8:c6:9a:95:30:9b:25:10:81:7e:38:cf:0c:
f4:b4:70:66:1c:60:f6:21:58:01:88:46:e3:4b:c4:
cc:d3:3a:ca:05:ab:72:52:2c:74:a2:00:57:ac:ba:
3a:8d:b8:61:aa:1f:95:06:77:50:18:a9:96:5e:92:
6d:c6:83:61:48:14:1e:92:1d:96:08:e0:dc:04:67:
8b:b6:04:d9:37:3d:9e:8a:54:26:ff:98:6e:f7:96:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AE:C7:B7:37:4E:9B:E8:B3:3F:93:FF:AB:47:74:F7:32:84:4C:DD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9a7HtzdOm-izP5P_q0d09zKETN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.183.0/24
5.175.188.0/24
5.231.56.0/24
5.231.106.0/24
77.90.40.0/24
89.144.47.0/24
94.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4e:4e:3d:2c:be:6d:59:c5:3a:08:86:a2:b0:ff:c6:2e:69:
cf:f4:20:9a:b1:2d:21:07:89:cb:f3:ca:ff:6c:88:1c:55:75:
8b:50:b4:2e:5f:ae:49:15:15:ce:3c:bd:b8:3d:78:d1:c4:b9:
b6:f1:27:1e:c4:58:a9:c8:ef:ee:e8:7d:e1:b4:d3:63:3e:4e:
f5:68:4d:4d:ab:68:b1:fb:48:72:aa:80:06:56:93:8a:59:aa:
a6:dd:35:56:62:97:f8:54:5c:3f:9f:7a:16:9c:e9:65:84:7f:
20:ce:a3:4f:7e:c7:bb:25:39:65:f9:cf:8e:c6:3c:ec:28:d4:
ee:3b:55:b6:64:ba:30:fa:cb:9e:00:ae:72:b4:fd:31:d5:49:
fd:87:f2:20:f8:42:93:87:56:1b:83:4f:a7:48:d4:17:f5:07:
9e:ca:80:59:fe:85:eb:ad:d4:4b:40:47:e8:b9:2e:0f:84:98:
d4:d3:8a:53:3a:5f:95:68:c6:40:fd:c3:86:77:dd:c8:fd:d6:
21:a2:fb:28:0a:3d:75:ff:2e:45:85:07:30:f3:31:7a:31:3f:
90:c9:1e:9f:ba:6c:d4:35:3e:3f:ac:bc:07:3c:20:86:80:44:
b9:4e:da:4f:f3:61:57:b3:a4:c0:9a:d4:c3:e7:d3:3b:34:5d:
8c:5f:8e:e6
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ4Mwty0cNetJCp+j72eDo56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNTA5MTI0MjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWFlYzdiNzM3NGU5YmU4YjMzZjkzZmZhYjQ3NzRmNzMyODQ0Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvglqbrzHkUUojyAWTe3hzFaTEKG7
cXJA14mlY0dG6vhyWQHwrqX4xDp0yDGdhmBq8S4biXN9hlDdfNr0W2NgGaAZUM6+
0Vf/eRpyHaRaAFrMAwG9nFB3vBQYLiJZSeSo/sqeXCkFwZD4XZnZstjC6cNts4sm
twa4p/oZ2bmGxY+ptUtFbfLdzlgQkh2WE5BIaicm9dx9IhUU8X+GntUTQO7XQkEn
e8jGmpUwmyUQgX44zwz0tHBmHGD2IVgBiEbjS8TM0zrKBatyUix0ogBXrLo6jbhh
qh+VBndQGKmWXpJtxoNhSBQekh2WCODcBGeLtgTZNz2eilQm/5hu95YAJwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPWux7c3Tpvosz+T/6tHdPcyhEzdMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOWE3SHR6ZE9tLWl6UDVQX3EwZDA5ektFVE4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABa+3AwQA
Ba+8AwQABec4AwQABedqAwQATVooAwQAWZAvAwQAXvnPMA0GCSqGSIb3DQEBCwUA
A4IBAQBRTk49LL5tWcU6CIaisP/GLmnP9CCasS0hB4nL88r/bIgcVXWLULQuX65J
FRXOPL24PXjRxLm28ScexFipyO/u6H3htNNjPk71aE1Nq2ix+0hyqoAGVpOKWaqm
3TVWYpf4VFw/n3oWnOllhH8gzqNPfse7JTll+c+OxjzsKNTuO1W2ZLow+sueAK5y
tP0x1Un9h/Ig+EKTh1Ybg0+nSNQX9QeeyoBZ/oXrrdRLQEfouS4PhJjU04pTOl+V
aMZA/cOGd93I/dYhovsoCj11/y5FhQcw8zF6MT+QyR6fumzUNT4/rLwHPCCGgES5
TtpP82FXs6TAmtTD59M7NF2MX47m
-----END CERTIFICATE-----
Generated at Tue May 12 22:19:30 2026 by rpki-client