Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5MyhXMBf7CUT5pC3prt72dFrbSs.roa
File: 5MyhXMBf7CUT5pC3prt72dFrbSs.roa (raw, json)
Hash identifier: Pb61aeNJ+HAMsQitlF7ha6jEJtZVMgY5lmZmL09R6Eo=
Subject key identifier: E4:CC:A1:5C:C0:5F:EC:25:13:E6:90:B7:A6:BB:7B:D9:D1:6B:6D:2B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A1AAEF722AF6D82CBA083A190F8D76342C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5MyhXMBf7CUT5pC3prt72dFrbSs.roa
Signing time: Thu 05 Nov 2026 08:59:41 +0000
ROA not before: Thu 05 Nov 2026 08:59:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.44.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
185.17.138.0/24 maxlen: 24
188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.192.0/24 maxlen: 24
188.132.200.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.37.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ef:72:2a:f6:d8:2c:ba:08:3a:19:0f:8d:76:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 5 08:59:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4cca15cc05fec2513e690b7a6bb7bd9d16b6d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:2c:ae:d0:52:83:10:a9:0e:2e:87:c8:05:
e5:32:e9:ad:92:f8:80:54:58:93:a8:75:df:e7:02:
30:60:4f:83:ed:f3:f7:cd:0a:d3:89:41:55:3f:39:
e3:4a:2c:4b:bd:aa:91:9d:dd:df:96:64:d7:8b:a5:
b4:96:24:99:de:12:49:e8:53:33:b9:e5:91:b6:86:
e1:72:89:35:6a:08:b8:bc:0f:94:5f:d6:9a:9a:38:
c1:b0:a4:fa:43:53:e9:32:03:87:8b:1a:3b:43:2e:
9e:b3:cf:27:e2:4d:ec:f8:a0:5a:36:96:98:6d:92:
00:04:dd:2e:43:96:af:0e:7d:ec:b2:00:9e:55:a3:
a6:35:cc:1c:d3:e9:4c:2c:3a:85:83:e6:b1:3f:4c:
cb:52:b7:0a:48:6f:f8:1e:5d:ba:6d:83:d1:44:88:
6d:05:2e:bb:ca:97:88:e1:25:1f:16:9b:6f:90:bf:
e0:8d:ac:68:17:c7:ef:7d:a0:40:e6:37:f7:9d:03:
19:df:d5:6a:fe:e1:eb:9c:58:60:80:10:c3:c6:18:
49:34:21:cb:77:2d:01:5a:f6:4c:5a:57:97:05:85:
94:09:0b:d8:11:f6:b1:5e:61:ff:61:ce:77:57:1e:
8e:bf:d0:98:0c:d4:0b:d2:21:44:11:a7:ed:98:7f:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:A1:5C:C0:5F:EC:25:13:E6:90:B7:A6:BB:7B:D9:D1:6B:6D:2B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5MyhXMBf7CUT5pC3prt72dFrbSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.44.0/24
31.210.51.0/24
77.92.143.0/24
77.92.148.0/24
78.135.92.0/24
78.135.111.0/24
185.17.138.0/24
188.132.166.0/23
188.132.170.0/24
188.132.191.0-188.132.192.255
188.132.200.0/24
188.132.227.0/24
212.68.36.0/23
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
11:43:1b:eb:4d:e0:9e:c1:e2:85:7c:d6:9d:a6:d0:2b:2a:6b:
0a:f4:bd:78:80:df:bd:4c:e5:1b:2e:ff:0e:87:07:7c:d0:3f:
7c:05:51:34:d0:21:b6:ee:e9:0e:32:6e:f9:87:85:5b:53:a6:
0e:63:77:30:17:0b:28:0d:6c:a6:c5:91:7c:25:d7:d3:13:d2:
14:58:ce:0e:cf:64:2f:bf:27:d6:3d:68:96:82:bf:26:e3:6c:
1e:e0:6d:4d:46:68:e9:68:38:a5:bc:be:62:fa:12:8d:75:ae:
94:4e:f6:2f:7d:ab:ae:53:a9:df:a7:10:0e:69:de:0e:bb:be:
d5:2b:05:56:85:39:54:5c:88:09:7b:a2:e5:ce:72:23:01:a7:
f3:2d:ec:6b:bc:e5:47:96:dd:37:87:3c:25:60:53:fb:82:46:
52:21:43:95:63:a3:b5:d7:0a:8b:2f:9b:0f:d5:26:bb:70:db:
9c:2c:51:59:cb:24:e8:6f:48:f9:db:2d:f2:4b:2b:60:4e:83:
2f:f4:6c:28:0b:77:dc:25:47:43:de:26:fe:56:e5:b9:66:e6:
f9:74:d3:ac:c0:16:54:48:a3:39:a9:a1:2a:78:51:c2:ee:ab:
fe:73:08:64:7a:ec:2d:5a:e9:fc:84:bf:28:16:08:ab:51:8a:
df:65:2e:8f
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAaGq73Iq9tgsugg6GQ+NdjQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjYxMTA1MDg1OTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGNjYTE1Y2MwNWZlYzI1MTNlNjkwYjdhNmJiN2JkOWQxNmI2ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QgsrtBSgxCpDi6HyAXlMumtkviA
VFiTqHXf5wIwYE+D7fP3zQrTiUFVPznjSixLvaqRnd3flmTXi6W0liSZ3hJJ6FMz
ueWRtobhcok1agi4vA+UX9aamjjBsKT6Q1PpMgOHixo7Qy6es88n4k3s+KBaNpaY
bZIABN0uQ5avDn3ssgCeVaOmNcwc0+lMLDqFg+axP0zLUrcKSG/4Hl26bYPRRIht
BS67ypeI4SUfFptvkL/gjaxoF8fvfaBA5jf3nQMZ39Vq/uHrnFhggBDDxhhJNCHL
dy0BWvZMWleXBYWUCQvYEfaxXmH/Yc53Vx6Ov9CYDNQL0iFEEaftmH8cowIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFOTMoVzAX+wlE+aQt6a7e9nRa20rMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvNU15aFhNQmY3Q1VUNXBDM3BydDcyZEZyYlNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAH9IsAwQA
H9IzAwQATVyPAwQATVyUAwQATodcAwQATodvAwQAuRGKAwQBvISmAwQAvISqMAwD
BAC8hL8DBAC8hMADBAC8hMgDBAC8hOMDBAHURCQDBADURDEwDQYJKoZIhvcNAQEL
BQADggEBABFDG+tN4J7B4oV81p2m0Csqawr0vXiA371M5Rsu/w6HB3zQP3wFUTTQ
Ibbu6Q4ybvmHhVtTpg5jdzAXCygNbKbFkXwl19MT0hRYzg7PZC+/J9Y9aJaCvybj
bB7gbU1GaOloOKW8vmL6Eo11rpRO9i99q65Tqd+nEA5p3g67vtUrBVaFOVRciAl7
ouXOciMBp/Mt7Gu85UeW3TeHPCVgU/uCRlIhQ5Vjo7XXCosvmw/VJrtw25wsUVnL
JOhvSPnbLfJLK2BOgy/0bCgLd9wlR0PeJv5W5blm5vl006zAFlRIozmpoSp4UcLu
q/5zCGR67C1a6fyEvygWCKtRit9lLo8=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:51:43 2026 by rpki-client