Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_mcCO3j-m50E96AQ31JfsNEX6sc.roa
File: _mcCO3j-m50E96AQ31JfsNEX6sc.roa (raw, json)
Hash identifier: sOqWrd7fXEWiJbUI2mwpEfwyNcO612rkXG6DUlXHHzY=
Subject key identifier: FE:67:02:3B:78:FE:9B:9D:04:F7:A0:10:DF:52:5F:B0:D1:17:EA:C7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1C6B955C9AAC3435B80A1AF5B62C19B5B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_mcCO3j-m50E96AQ31JfsNEX6sc.roa
Signing time: Tue 10 Nov 2026 18:29:57 +0000
ROA not before: Tue 10 Nov 2026 18:29:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:b9:55:c9:aa:c3:43:5b:80:a1:af:5b:62:c1:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 10 18:29:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe67023b78fe9b9d04f7a010df525fb0d117eac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:37:e7:cb:92:5e:e2:3b:64:87:90:82:fb:
99:a6:2d:18:0a:62:7d:f3:35:12:35:d8:c4:3c:f4:
da:23:2a:6b:44:0e:4d:47:48:77:7b:b2:84:98:e1:
80:c5:6d:d1:cb:10:94:3f:87:9c:35:86:22:91:b1:
5c:f1:75:c1:d3:29:93:a4:27:ab:7a:27:0c:2c:36:
48:4b:4a:d0:d7:37:a1:28:95:3c:18:47:16:b8:72:
01:f8:3b:d2:71:47:6c:96:a1:6f:cf:2a:b2:e2:0a:
be:43:3f:64:78:ab:10:4b:d0:32:5d:51:f1:34:99:
41:d6:40:bd:55:08:fe:9b:a1:bb:59:3c:26:20:e9:
23:86:5b:48:17:f9:d4:60:ec:8b:ad:2b:2c:40:a5:
69:d9:93:96:96:10:0c:d1:4a:22:6b:a8:59:96:bb:
09:13:ff:0a:ad:0a:f4:9a:c3:fd:12:be:98:b4:59:
c8:cf:47:34:6b:5f:6e:a4:4f:b4:03:e1:8d:cc:65:
d7:a6:80:c4:ed:6f:58:7a:4b:f2:85:84:ac:ce:05:
82:5a:d1:9d:02:c9:c0:3d:01:df:73:a5:11:39:66:
b5:d3:04:49:77:87:a4:25:b6:c4:a8:36:b9:ab:df:
a4:ea:1a:07:5c:9f:16:e6:e2:20:00:0f:a9:3f:6e:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:02:3B:78:FE:9B:9D:04:F7:A0:10:DF:52:5F:B0:D1:17:EA:C7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_mcCO3j-m50E96AQ31JfsNEX6sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.85.0/24
5.181.87.0/24
45.13.190.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b1:5b:d4:a0:d1:6c:9c:85:88:0a:21:db:69:1d:75:43:95:
8a:24:99:a8:23:ab:06:6e:23:7d:5b:6e:29:5f:c2:17:57:82:
18:bf:00:11:83:13:d4:61:d8:2c:a0:df:6c:dc:83:f8:8e:64:
30:c5:6e:df:89:d1:e3:82:39:17:16:78:2b:f9:c4:68:22:7a:
3a:89:34:c5:72:f9:e4:f8:b1:c8:9f:a2:4f:30:f0:f1:80:69:
d9:c5:25:49:43:d1:91:08:76:a1:df:38:21:d1:c6:fe:0d:f4:
0a:8e:1b:23:43:50:7b:0a:c7:82:4c:36:cd:6e:a3:c7:2a:29:
1c:bd:06:c1:97:91:fe:79:56:18:e5:ec:81:ed:26:ec:f9:64:
64:db:99:7c:cd:ae:da:4f:e8:f1:29:30:08:04:98:c8:52:0d:
26:62:d7:e0:70:85:51:14:d6:6e:83:dd:b4:9a:a8:23:4b:cd:
44:f3:8d:9d:ed:61:35:c9:c6:5e:b2:68:64:f8:42:e9:ed:e7:
fb:5b:bd:b2:eb:66:86:27:2a:0b:ef:6e:84:ad:68:f7:24:c3:
bd:84:06:4e:65:74:36:04:22:30:e3:3b:8f:a2:47:a6:42:9b:
2b:e9:8d:e6:fe:9c:34:2b:31:8a:f0:fd:b8:73:80:02:73:90:
4f:3f:5e:4d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHGuVXJqsNDW4Chr1tiwZtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYxMTEwMTgyOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTY3MDIzYjc4ZmU5YjlkMDRmN2EwMTBkZjUyNWZiMGQxMTdlYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYs358uSXuI7ZIeQgvuZpi0YCmJ9
8zUSNdjEPPTaIyprRA5NR0h3e7KEmOGAxW3RyxCUP4ecNYYikbFc8XXB0ymTpCer
eicMLDZIS0rQ1zehKJU8GEcWuHIB+DvScUdslqFvzyqy4gq+Qz9keKsQS9AyXVHx
NJlB1kC9VQj+m6G7WTwmIOkjhltIF/nUYOyLrSssQKVp2ZOWlhAM0Uoia6hZlrsJ
E/8KrQr0msP9Er6YtFnIz0c0a19upE+0A+GNzGXXpoDE7W9YekvyhYSszgWCWtGd
AsnAPQHfc6UROWa10wRJd4ekJbbEqDa5q9+k6hoHXJ8W5uIgAA+pP26T1QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP5nAjt4/pudBPegEN9SX7DRF+rHMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvX21jQ08zai1tNTBFOTZBUTMxSmZzTkVYNnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbVVAwQA
BbVXAwQALQ2+AwQATVMnMA0GCSqGSIb3DQEBCwUAA4IBAQAesVvUoNFsnIWICiHb
aR11Q5WKJJmoI6sGbiN9W24pX8IXV4IYvwARgxPUYdgsoN9s3IP4jmQwxW7fidHj
gjkXFngr+cRoIno6iTTFcvnk+LHIn6JPMPDxgGnZxSVJQ9GRCHah3zgh0cb+DfQK
jhsjQ1B7CseCTDbNbqPHKikcvQbBl5H+eVYY5eyB7Sbs+WRk25l8za7aT+jxKTAI
BJjIUg0mYtfgcIVRFNZug920mqgjS81E842d7WE1ycZesmhk+ELp7ef7W72y62aG
JyoL726ErWj3JMO9hAZOZXQ2BCIw4zuPokemQpsr6Y3m/pw0KzGK8P24c4ACc5BP
P15N
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:51:14 2026 by rpki-client