Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/9aRTzcNv5guAsQiFnGIvU6cyVjw.roa
File: 9aRTzcNv5guAsQiFnGIvU6cyVjw.roa (raw, json)
Hash identifier: yxAswLOvy7NpNtBGcnZYbW1+LR5oOn3Rqal1sA9FoVg=
Subject key identifier: F5:A4:53:CD:C3:6F:E6:0B:80:B1:08:85:9C:62:2F:53:A7:32:56:3C
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 019E1D0969A82AAFCD88C417E3C78FC15FE5
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/9aRTzcNv5guAsQiFnGIvU6cyVjw.roa
Signing time: Tue 12 May 2026 16:33:36 +0000
ROA not before: Tue 12 May 2026 16:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60609
IP address blocks: 2.57.100.0/24 maxlen: 24
2.57.101.0/24 maxlen: 24
2.57.102.0/24 maxlen: 24
2.57.103.0/24 maxlen: 24
185.232.48.0/24 maxlen: 24
185.232.49.0/24 maxlen: 24
185.232.50.0/24 maxlen: 24
185.232.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:09:69:a8:2a:af:cd:88:c4:17:e3:c7:8f:c1:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: May 12 16:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a453cdc36fe60b80b108859c622f53a732563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:1d:a3:8f:1e:cc:8f:66:38:66:c4:c7:2e:
64:ec:c3:ef:be:0a:5e:71:ec:6f:32:96:44:39:37:
f2:9a:3b:c6:a2:e6:63:11:a3:51:0f:6d:89:66:fb:
31:70:ae:16:1a:55:b2:e7:23:94:cb:20:6b:4f:d0:
dc:d7:dd:97:31:51:08:02:1d:db:bb:3e:14:79:b4:
e2:f6:8a:29:37:cf:c5:b9:07:8b:cc:e6:df:09:5e:
5c:62:e5:3c:2a:7d:8d:c8:2d:38:47:a7:4a:7b:1d:
bf:74:ca:2f:3f:f8:4a:88:56:68:e4:56:de:d4:c4:
88:ec:b8:74:4f:8f:6b:62:d1:4f:1c:89:9e:6a:2e:
6e:53:11:d0:78:f9:fb:4b:c8:03:44:ec:a4:f4:0c:
6b:a0:d9:31:93:ba:48:a5:d7:87:91:bf:d9:bd:de:
26:5d:eb:c2:10:66:72:3b:81:45:81:7c:3b:84:1d:
b4:c0:46:bc:df:f9:89:4a:f2:e7:04:72:92:79:64:
4f:7f:19:3c:5f:d5:35:b4:63:93:b5:14:5a:2f:d4:
c6:03:b6:70:81:52:82:66:5d:64:da:a0:b9:e7:16:
e0:3b:8b:38:6c:b7:66:7e:ff:06:81:d4:9c:69:cd:
99:d5:f5:16:28:65:6e:90:23:b8:6a:bf:35:0e:f9:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:53:CD:C3:6F:E6:0B:80:B1:08:85:9C:62:2F:53:A7:32:56:3C
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/9aRTzcNv5guAsQiFnGIvU6cyVjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.100.0/22
185.232.48.0/22
Signature Algorithm: sha256WithRSAEncryption
20:fa:9d:50:5a:a7:9c:46:e1:c8:a7:b1:da:f8:7b:a6:2e:7e:
18:99:cc:88:92:27:34:07:cd:80:89:5a:94:e8:29:07:aa:a3:
56:27:b0:6a:91:b3:81:4d:f9:d1:d9:65:ac:2c:d3:41:c7:ae:
ad:25:60:40:e5:a1:de:40:43:c1:c0:18:d3:87:cd:7d:4f:0d:
ba:e6:81:de:44:16:50:09:9d:34:19:35:e1:3f:ca:30:4a:75:
91:5a:ae:58:16:7e:c5:f8:45:39:ea:5c:99:a2:f8:69:d7:dc:
78:11:3c:24:ef:77:41:6b:fe:98:b4:80:67:1b:f9:5e:1b:fc:
df:7b:83:72:24:2a:dd:3a:06:b4:27:32:07:e4:24:b7:4e:c5:
c1:f6:2b:59:55:91:9f:64:04:1c:2e:66:87:a7:bc:54:46:21:
1e:80:dc:8c:26:33:3c:d8:d1:f3:5e:73:23:6a:21:69:b7:a1:
94:82:67:cd:b1:3b:76:6e:e3:1c:7b:07:ed:dd:71:68:b1:d6:
26:ed:af:85:71:96:ec:0b:8e:8d:4b:2d:fe:a8:b1:8c:17:e1:
ac:6f:2f:82:c9:b0:f7:28:5d:f0:17:de:af:6e:fc:25:65:5f:
75:52:b8:b7:db:e3:c3:38:fb:46:f3:23:f3:a3:5c:e8:06:bf:
37:15:ec:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4dCWmoKq/NiMQX48ePwV/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Njg0MDcwNDdhNjJlNjQ4MzAwYzUxODJhMjkzNTNmZjU4
ZWIwNWYwHhcNMjYwNTEyMTYzMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWE0NTNjZGMzNmZlNjBiODBiMTA4ODU5YzYyMmY1M2E3MzI1NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27Ado48ezI9mOGbExy5k7MPvvgpe
cexvMpZEOTfymjvGouZjEaNRD22JZvsxcK4WGlWy5yOUyyBrT9Dc192XMVEIAh3b
uz4UebTi9oopN8/FuQeLzObfCV5cYuU8Kn2NyC04R6dKex2/dMovP/hKiFZo5Fbe
1MSI7Lh0T49rYtFPHImeai5uUxHQePn7S8gDROyk9AxroNkxk7pIpdeHkb/Zvd4m
XevCEGZyO4FFgXw7hB20wEa83/mJSvLnBHKSeWRPfxk8X9U1tGOTtRRaL9TGA7Zw
gVKCZl1k2qC55xbgO4s4bLdmfv8GgdScac2Z1fUWKGVukCO4ar81DvmrLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPWkU83Db+YLgLEIhZxiL1OnMlY8MB8GA1UdIwQY
MBaAFIVoQHBHpi5kgwDFGCopNT/1jrBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdoQWNFZW1MbVNEQU1VWUtpazFQX1dPc0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMjAzOTUtNzBjMC00MDAyLWEzNjIt
ZWQzZTk4YzY1NmUxLzEvOWFSVHpjTnY1Z3VBc1FpRm5HSXZVNmN5Vmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zMjAzOTUtNzBjMC00MDAyLWEzNjItZWQzZTk4YzY1NmUx
LzEvaFdoQWNFZW1MbVNEQU1VWUtpazFQX1dPc0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCAjlkAwQC
uegwMA0GCSqGSIb3DQEBCwUAA4IBAQAg+p1QWqecRuHIp7Ha+HumLn4YmcyIkic0
B82AiVqU6CkHqqNWJ7BqkbOBTfnR2WWsLNNBx66tJWBA5aHeQEPBwBjTh819Tw26
5oHeRBZQCZ00GTXhP8owSnWRWq5YFn7F+EU56lyZovhp19x4ETwk73dBa/6YtIBn
G/leG/zfe4NyJCrdOga0JzIH5CS3TsXB9itZVZGfZAQcLmaHp7xURiEegNyMJjM8
2NHzXnMjaiFpt6GUgmfNsTt2buMcewft3XFosdYm7a+FcZbsC46NSy3+qLGMF+Gs
by+CybD3KF3wF96vbvwlZV91Uri32+PDOPtG8yPzo1zoBr83Fey8
-----END CERTIFICATE-----
Generated at Wed May 13 08:25:04 2026 by rpki-client