Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/9sI5SKd2KvXmAYUKcajUG8-_dDI.roa
File: 9sI5SKd2KvXmAYUKcajUG8-_dDI.roa (raw, json)
Hash identifier: nAuJw/+c+T++cnHEIRdwDM2Kj0T8zkYDyQeta+KLQ3g=
Subject key identifier: F6:C2:39:48:A7:76:2A:F5:E6:01:85:0A:71:A8:D4:1B:CF:BF:74:32
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019DBFD69F8F0EBFF8CAA61B8CC4C079DCC2
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/9sI5SKd2KvXmAYUKcajUG8-_dDI.roa
Signing time: Fri 24 Apr 2026 14:13:26 +0000
ROA not before: Fri 24 Apr 2026 14:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213741
IP address blocks: 81.160.8.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:d6:9f:8f:0e:bf:f8:ca:a6:1b:8c:c4:c0:79:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Apr 24 14:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6c23948a7762af5e601850a71a8d41bcfbf7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:91:c3:27:81:15:b5:b2:f8:10:e1:97:08:0b:
59:60:37:06:83:6a:d9:3d:e6:40:d4:68:86:c7:a0:
5d:86:21:a1:48:7a:cd:dc:b1:a4:96:a5:0b:9a:12:
00:70:54:6b:d7:2c:64:c5:69:9b:73:08:69:f6:78:
bd:d4:c8:1c:a2:27:d5:91:cc:19:4c:1f:32:c5:8c:
20:5e:58:8a:18:2f:50:11:99:1e:e6:5f:83:64:14:
0a:6f:aa:0e:a8:98:63:0a:f3:48:dd:91:03:a3:31:
c7:d7:3e:08:c8:ae:69:eb:38:28:bc:4a:c4:d1:5e:
af:31:ff:9d:4e:b0:51:ce:ee:72:22:11:ee:df:6f:
6a:14:f2:02:6d:59:df:9d:b1:e1:e9:08:bc:57:20:
70:81:2b:e6:bd:01:14:5e:1d:bf:da:f7:74:da:2a:
2d:69:8e:6d:56:36:9d:a1:db:7b:8a:7a:0d:6a:a8:
f0:e0:0c:a9:01:16:3d:b4:a9:2e:f7:0d:6d:d6:2d:
41:19:d7:57:54:6f:9a:f0:95:a0:27:3c:8a:d7:f3:
d2:49:a1:1b:c9:c9:78:04:cc:d9:a0:d0:50:11:d3:
ba:d0:1f:df:f4:a2:c5:e9:f9:83:6d:67:ff:c2:da:
f2:d4:f8:66:7b:93:6c:d1:10:90:a3:80:6c:78:88:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:39:48:A7:76:2A:F5:E6:01:85:0A:71:A8:D4:1B:CF:BF:74:32
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/9sI5SKd2KvXmAYUKcajUG8-_dDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.160.8.128/25
Signature Algorithm: sha256WithRSAEncryption
d4:f6:d0:f2:f6:4a:06:76:cf:ff:98:91:79:b7:33:1f:84:85:
dd:4f:0c:32:f0:47:e8:94:08:bd:44:b6:ad:ae:2e:04:3a:f7:
16:f2:72:3f:af:d7:2b:af:03:00:38:cd:f4:be:e9:bb:a7:46:
9b:e7:d9:da:89:6f:e4:e5:36:1e:4e:d3:2f:8d:e3:cf:04:30:
b0:f5:4d:4f:f7:c5:fc:35:84:d3:b3:a8:1e:d0:cc:6b:38:26:
bd:46:32:14:3e:2e:7a:ed:88:8a:b5:ed:d5:25:81:cf:bd:9a:
8c:67:a7:09:45:a1:d4:b4:3c:32:c1:4d:49:48:9b:c0:28:c2:
d3:73:35:d1:24:a2:7b:23:b9:61:ec:2b:b3:b5:ad:ab:c3:60:
53:5d:91:33:9e:42:f7:0e:e5:13:bc:a5:08:14:64:f7:c9:2b:
bf:35:52:16:7c:d1:16:75:cd:eb:a9:3d:7f:86:d5:c5:1f:49:
b3:00:fe:d8:d4:b4:bf:75:ad:17:6f:53:e6:87:6f:97:02:70:
a5:45:38:07:79:f5:62:10:7d:ea:3d:96:e1:f0:3b:f9:fd:ad:
df:b9:4d:cd:75:4e:8c:e0:f4:04:71:29:84:45:95:2c:e4:70:
52:2f:6c:12:9b:56:03:dd:97:d0:1f:7e:9a:0f:48:29:7b:9c:
c0:12:88:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ2/1p+PDr/4yqYbjMTAedzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjYwNDI0MTQxMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmMyMzk0OGE3NzYyYWY1ZTYwMTg1MGE3MWE4ZDQxYmNmYmY3NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZHDJ4EVtbL4EOGXCAtZYDcGg2rZ
PeZA1GiGx6BdhiGhSHrN3LGklqULmhIAcFRr1yxkxWmbcwhp9ni91MgcoifVkcwZ
TB8yxYwgXliKGC9QEZke5l+DZBQKb6oOqJhjCvNI3ZEDozHH1z4IyK5p6zgovErE
0V6vMf+dTrBRzu5yIhHu329qFPICbVnfnbHh6Qi8VyBwgSvmvQEUXh2/2vd02iot
aY5tVjadodt7inoNaqjw4AypARY9tKku9w1t1i1BGddXVG+a8JWgJzyK1/PSSaEb
ycl4BMzZoNBQEdO60B/f9KLF6fmDbWf/wtry1Phme5Ns0RCQo4BseIjBqQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPbCOUindir15gGFCnGo1BvPv3QyMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvOXNJNVNLZDJLdlhtQVlVS2NhalVHOC1fZERJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHUaAIgDAN
BgkqhkiG9w0BAQsFAAOCAQEA1PbQ8vZKBnbP/5iRebczH4SF3U8MMvBH6JQIvUS2
ra4uBDr3FvJyP6/XK68DADjN9L7pu6dGm+fZ2olv5OU2Hk7TL43jzwQwsPVNT/fF
/DWE07OoHtDMazgmvUYyFD4ueu2IirXt1SWBz72ajGenCUWh1LQ8MsFNSUibwCjC
03M10SSieyO5Yewrs7Wtq8NgU12RM55C9w7lE7ylCBRk98krvzVSFnzRFnXN66k9
f4bVxR9JswD+2NS0v3WtF29T5odvlwJwpUU4B3n1YhB96j2W4fA7+f2t37lNzXVO
jOD0BHEphEWVLORwUi9sEptWA92X0B9+mg9IKXucwBKI3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:48 2026 by rpki-client