Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/5QoBwy08FxgB_afPPhW35rzgfWU.roa
File: 5QoBwy08FxgB_afPPhW35rzgfWU.roa (raw, json)
Hash identifier: uERpJTLN6QfeTTT2yfUb2XxvlLw0q2GpMhWCfNcNS0U=
Subject key identifier: E5:0A:01:C3:2D:3C:17:18:01:FD:A7:CF:3E:15:B7:E6:BC:E0:7D:65
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 019F2368CDD23675B960D97A1C3A0575F0B6
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/5QoBwy08FxgB_afPPhW35rzgfWU.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9056
IP address blocks: 2a00:7c00:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:d2:36:75:b9:60:d9:7a:1c:3a:05:75:f0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e50a01c32d3c171801fda7cf3e15b7e6bce07d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:3d:0a:b2:98:84:5c:9c:f4:a5:4a:a5:de:
7c:46:19:cf:03:54:de:5f:77:97:97:4d:f0:cc:20:
cf:fc:79:d3:6a:51:fe:87:86:a6:23:16:4e:cb:8b:
1f:5a:64:85:41:d9:66:44:47:37:7b:61:54:63:99:
41:99:74:51:bf:24:9a:5d:9b:37:e4:e5:8d:8f:0c:
78:99:71:e5:3d:95:cb:fa:5a:13:81:f2:5a:c6:38:
ec:c5:23:20:82:fe:e4:0a:df:38:fc:6a:1b:c2:83:
03:d0:f2:39:37:56:56:72:25:5e:97:3a:5f:30:a6:
fc:85:8f:29:06:f0:ce:4a:49:26:de:a8:b9:68:1a:
9a:80:61:17:67:3a:80:fc:9b:b1:da:eb:01:ef:e2:
fe:81:4c:70:69:f8:a4:db:c0:21:f1:5b:96:9c:6a:
ad:42:43:79:3e:52:45:89:7f:e0:ba:45:28:58:f1:
21:9c:60:92:93:8c:68:9d:34:9b:78:98:c3:15:e7:
95:0a:d3:fe:49:14:31:59:fc:f6:24:8d:9e:07:52:
02:55:40:2f:95:41:f2:31:d6:7e:51:a0:59:2d:e3:
cb:af:2f:57:84:02:aa:a3:36:71:03:2d:ac:55:16:
1c:90:88:32:8d:a8:ae:92:27:c0:10:43:aa:a0:62:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:01:C3:2D:3C:17:18:01:FD:A7:CF:3E:15:B7:E6:BC:E0:7D:65
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/5QoBwy08FxgB_afPPhW35rzgfWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7c00:8001::/48
Signature Algorithm: sha256WithRSAEncryption
a9:0a:8a:29:2e:08:78:46:57:f4:f4:da:67:d1:b2:ce:48:bb:
8e:e4:ee:af:46:b0:5c:22:ab:ee:80:cc:f4:df:de:3f:0a:c8:
ad:5f:81:9f:4d:88:c2:a8:ed:56:c0:91:30:ee:82:70:ec:70:
06:fd:d3:34:1a:d8:fa:b6:3c:41:80:38:d1:e7:30:96:94:a7:
10:cb:0c:1f:79:60:11:49:d6:f4:20:29:d2:75:f7:19:b4:48:
31:b4:d6:55:c0:32:28:49:8c:7c:9b:f5:23:05:7b:89:e8:28:
c2:b4:90:55:3e:ff:29:e6:43:81:36:fc:f5:9e:2f:fc:e2:74:
2f:58:f8:b3:aa:a7:42:6b:ce:1f:80:df:3b:12:e2:9f:94:94:
82:b3:7f:9d:e2:f8:21:4c:4f:d4:cc:11:fe:94:45:b7:61:f9:
a6:ff:33:c7:58:28:25:71:7b:35:a3:83:85:2f:0b:36:49:b7:
2e:91:6f:1b:19:24:bc:92:ee:fe:c1:17:a8:52:80:ba:01:61:
cb:b7:71:5d:29:6e:8e:52:88:f9:e1:c5:7c:5e:0f:6e:64:d8:
f6:77:d4:1a:30:94:d1:c2:70:6c:1f:b8:c2:c6:79:d0:77:2a:
74:31:06:53:3f:b5:2d:66:42:a7:a0:e4:6e:76:f4:cc:ae:05:
97:c7:50:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaM3SNnW5YNl6HDoFdfC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOTNkOTllNDkwYTM1ZDkyOWIwMWE2Y2I3M2M1ODNmMTBh
ZmNhZjEwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTBhMDFjMzJkM2MxNzE4MDFmZGE3Y2YzZTE1YjdlNmJjZTA3ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Q9CrKYhFyc9KVKpd58RhnPA1Te
X3eXl03wzCDP/HnTalH+h4amIxZOy4sfWmSFQdlmREc3e2FUY5lBmXRRvySaXZs3
5OWNjwx4mXHlPZXL+loTgfJaxjjsxSMggv7kCt84/GobwoMD0PI5N1ZWciVelzpf
MKb8hY8pBvDOSkkm3qi5aBqagGEXZzqA/Jux2usB7+L+gUxwafik28Ah8VuWnGqt
QkN5PlJFiX/gukUoWPEhnGCSk4xonTSbeJjDFeeVCtP+SRQxWfz2JI2eB1ICVUAv
lUHyMdZ+UaBZLePLry9XhAKqozZxAy2sVRYckIgyjaiukifAEEOqoGKkiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOUKAcMtPBcYAf2nzz4Vt+a84H1lMB8GA1UdIwQY
MBaAFAqT2Z5JCjXZKbAabLc8WD8Qr8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvNVFvQnd5MDhGeGdCX2FmUFBoVzM1cnpnZldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvQ3BQWm5ra0tOZGtwc0Jwc3R6eFlQeEN2eXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgB8AIAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCpCoopLgh4Rlf09Npn0bLOSLuO5O6vRrBcIqvu
gMz0394/CsitX4GfTYjCqO1WwJEw7oJw7HAG/dM0Gtj6tjxBgDjR5zCWlKcQywwf
eWARSdb0ICnSdfcZtEgxtNZVwDIoSYx8m/UjBXuJ6CjCtJBVPv8p5kOBNvz1ni/8
4nQvWPizqqdCa84fgN87EuKflJSCs3+d4vghTE/UzBH+lEW3Yfmm/zPHWCglcXs1
o4OFLws2SbcukW8bGSS8ku7+wReoUoC6AWHLt3FdKW6OUoj54cV8Xg9uZNj2d9Qa
MJTRwnBsH7jCxnnQdyp0MQZTP7UtZkKnoORudvTMrgWXx1Dd
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:40 2026 by rpki-client