Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/pcsFeaV3Q92b77GWIua8iGThjjs.roa
File: pcsFeaV3Q92b77GWIua8iGThjjs.roa (raw, json)
Hash identifier: 8le0MnhJOxmuv/SwPpz3iJKzt5RMjg2jdBaWOK5fgdk=
Subject key identifier: A5:CB:05:79:A5:77:43:DD:9B:EF:B1:96:22:E6:BC:88:64:E1:8E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 01A09FE338EEF0EBD2983DFE271B5A0A99DE
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/pcsFeaV3Q92b77GWIua8iGThjjs.roa
Signing time: Mon 14 Sep 2026 12:27:43 +0000
ROA not before: Mon 14 Sep 2026 12:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 604040
IP address blocks: 5.2.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:e3:38:ee:f0:eb:d2:98:3d:fe:27:1b:5a:0a:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Sep 14 12:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5cb0579a57743dd9befb19622e6bc8864e18e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:eb:7a:d8:b3:98:0c:fc:91:b7:95:6c:ef:
8f:ab:51:22:65:cc:2b:e0:c2:b4:7e:5c:aa:e6:46:
ef:09:91:28:58:37:33:ed:97:4f:a2:14:84:a2:d5:
f2:59:5d:db:16:02:6c:93:4e:5a:4f:94:28:84:da:
2a:82:e7:b2:bc:36:a3:41:ec:bb:a9:a8:06:0e:cc:
73:cd:a2:08:f8:de:9e:70:a3:7c:88:14:d3:7c:d3:
30:9f:c1:db:d2:21:b6:f5:73:f9:e5:e8:7b:d0:bf:
a5:5f:9c:c4:93:3a:02:34:75:b9:af:fe:a1:63:b1:
31:4b:2a:77:e5:0a:54:96:75:c3:71:d2:98:e0:aa:
54:c4:fc:1f:02:93:81:48:5a:05:ee:56:bb:3a:8e:
ff:fb:f0:dc:71:f4:bc:70:9d:23:a5:99:99:93:92:
b6:cc:0c:c2:b0:fa:30:41:43:b6:33:d2:da:76:69:
b3:9e:1d:44:cd:1c:2d:bf:62:7a:60:76:5f:21:78:
61:90:95:d5:f5:2b:37:16:07:b9:82:77:ae:0e:57:
ca:42:1e:3b:49:79:12:c7:e6:6d:e5:84:86:c9:96:
da:16:52:3d:be:aa:0a:1d:be:5f:ad:f6:81:cf:2d:
b8:8c:f5:ab:3c:64:ef:c0:2e:cf:94:6a:e5:e3:af:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:05:79:A5:77:43:DD:9B:EF:B1:96:22:E6:BC:88:64:E1:8E:3B
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/pcsFeaV3Q92b77GWIua8iGThjjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.69.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5a:aa:5c:a2:4d:7c:eb:a7:70:0d:55:04:fb:f8:96:99:8b:
cd:5a:13:47:0e:18:fc:7c:4f:e7:34:64:c3:5e:08:c9:f9:a8:
e3:bc:97:fa:97:5f:c9:b8:b5:f4:58:cc:e2:64:82:bd:a8:36:
ad:22:a5:0a:f7:4a:5e:b6:cf:0b:05:97:f9:50:1a:0d:ac:c3:
e2:c4:4e:7f:c4:32:bc:cd:d2:6e:04:8f:1d:5c:33:75:4b:70:
72:f6:51:0a:36:69:5a:1e:dc:b1:ab:b6:7e:24:ef:73:d3:0a:
5e:09:04:f1:a8:c3:bb:d9:b4:70:58:f6:f1:9c:e7:1d:e3:8a:
d1:cc:4b:0b:65:f1:f3:c1:4a:4a:2b:00:47:05:24:5f:85:5a:
aa:62:26:5c:16:f2:ba:ba:6f:ca:e3:8c:6a:c4:91:1f:ff:53:
89:52:f0:32:0b:98:94:d2:a1:20:3f:6b:aa:80:f0:7b:4d:08:
04:bf:1b:0a:61:aa:10:e0:57:6d:2a:c8:4f:c6:56:13:2e:38:
90:b3:9c:4a:a2:e9:78:04:4c:ee:71:77:1e:bd:a2:94:93:24:
6c:68:ad:4e:b3:c7:8b:92:08:fb:af:39:4c:ba:aa:60:2d:b5:
da:7b:2b:1e:77:e6:01:32:67:b1:0f:4a:71:38:fc:6b:03:07:
83:c6:f0:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCf4zju8OvSmD3+JxtaCpneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4
YTVlM2IwHhcNMjYwOTE0MTIyNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWNiMDU3OWE1Nzc0M2RkOWJlZmIxOTYyMmU2YmM4ODY0ZTE4ZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7TretizmAz8kbeVbO+Pq1EiZcwr
4MK0flyq5kbvCZEoWDcz7ZdPohSEotXyWV3bFgJsk05aT5QohNoqgueyvDajQey7
qagGDsxzzaII+N6ecKN8iBTTfNMwn8Hb0iG29XP55eh70L+lX5zEkzoCNHW5r/6h
Y7ExSyp35QpUlnXDcdKY4KpUxPwfApOBSFoF7la7Oo7/+/DccfS8cJ0jpZmZk5K2
zAzCsPowQUO2M9Ladmmznh1EzRwtv2J6YHZfIXhhkJXV9Ss3Fge5gneuDlfKQh47
SXkSx+Zt5YSGyZbaFlI9vqoKHb5frfaBzy24jPWrPGTvwC7PlGrl46+5iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXLBXmld0Pdm++xliLmvIhk4Y47MB8GA1UdIwQY
MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt
YzJiYTI0NjUzZjdiLzEvcGNzRmVhVjNROTJiNzdHV0l1YThpR1RoampzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi
LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQJFMA0G
CSqGSIb3DQEBCwUAA4IBAQABWqpcok1866dwDVUE+/iWmYvNWhNHDhj8fE/nNGTD
XgjJ+ajjvJf6l1/JuLX0WMziZIK9qDatIqUK90pets8LBZf5UBoNrMPixE5/xDK8
zdJuBI8dXDN1S3By9lEKNmlaHtyxq7Z+JO9z0wpeCQTxqMO72bRwWPbxnOcd44rR
zEsLZfHzwUpKKwBHBSRfhVqqYiZcFvK6um/K44xqxJEf/1OJUvAyC5iU0qEgP2uq
gPB7TQgEvxsKYaoQ4FdtKshPxlYTLjiQs5xKoul4BEzucXcevaKUkyRsaK1Os8eL
kgj7rzlMuqpgLbXaeysed+YBMmexD0pxOPxrAweDxvAC
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:17 2026 by rpki-client