Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/X7BmyTsEbGnFLW3J_leT1himypU.roa
File: X7BmyTsEbGnFLW3J_leT1himypU.roa (raw, json)
Hash identifier: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=
Subject key identifier: 5F:B0:66:C9:3B:04:6C:69:C5:2D:6D:C9:FE:57:93:D6:18:A6:CA:95
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019E031DABF7977085F893513D61960FB1D5
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/X7BmyTsEbGnFLW3J_leT1himypU.roa
Signing time: Thu 07 May 2026 15:45:36 +0000
ROA not before: Thu 07 May 2026 15:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211111
IP address blocks: 195.66.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:1d:ab:f7:97:70:85:f8:93:51:3d:61:96:0f:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: May 7 15:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fb066c93b046c69c52d6dc9fe5793d618a6ca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:33:6f:78:8b:85:cf:da:2b:30:2b:58:0a:
21:7d:26:7b:25:84:00:53:96:c3:d7:a9:af:db:56:
0d:40:d0:36:d5:ea:61:00:73:1a:35:07:7f:c3:42:
43:74:08:fa:a9:45:02:e0:63:c4:0b:0d:ca:00:14:
f6:64:80:58:08:ce:24:15:43:28:66:d1:71:12:66:
01:10:53:36:36:5e:95:4e:9f:54:e1:6c:99:5f:b7:
c8:78:15:29:72:47:5c:25:7a:e7:ff:8b:7e:5f:e9:
1e:c1:aa:8b:10:34:4e:5d:76:aa:c5:6b:69:f8:aa:
0c:37:38:f5:03:b2:b7:6d:89:6e:a6:df:a3:a3:a9:
02:16:56:13:c3:8d:7a:bd:86:71:0a:74:d2:fc:5b:
88:85:33:7a:de:1f:18:1c:e7:13:91:3c:38:6f:63:
d1:9d:8f:c5:52:8a:92:c9:ec:18:47:d4:72:6b:1e:
14:c2:f6:4e:7b:49:88:b8:8c:bf:34:50:28:79:57:
39:37:30:34:13:ed:2d:d5:3e:0c:47:06:0a:29:e3:
3f:6c:ef:88:dd:87:4f:7b:1c:01:80:89:9b:fa:ed:
be:0a:3f:46:bf:21:41:d4:66:e9:77:41:c8:43:f1:
ab:38:4f:6c:18:e5:bc:9f:57:b9:50:aa:f0:9b:1b:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:66:C9:3B:04:6C:69:C5:2D:6D:C9:FE:57:93:D6:18:A6:CA:95
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/X7BmyTsEbGnFLW3J_leT1himypU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.29.0/24
Signature Algorithm: sha256WithRSAEncryption
06:56:51:bd:68:2e:07:53:c5:c2:5c:6b:f8:1e:7c:16:16:05:
06:5d:d5:00:79:bd:0d:9c:01:69:76:44:0b:2c:4d:04:e7:b2:
2f:cc:8c:70:b2:17:03:3a:c7:40:d6:55:a4:f4:d7:56:22:ff:
88:ea:6f:29:e3:32:78:4a:cf:29:18:65:cd:d8:1e:bc:17:b7:
26:da:5a:ff:65:d2:9f:d7:93:71:1a:78:0a:5d:16:59:c1:35:
ef:ea:db:42:52:0c:e6:7c:f0:35:1c:b5:7c:77:28:2e:2b:d9:
9c:87:9c:35:b9:b7:da:19:a5:97:a1:87:42:8e:a0:5f:38:f7:
fc:d2:f7:fe:bf:f6:1f:82:7f:53:41:c1:ec:68:20:67:46:6c:
4b:05:bb:e5:94:8f:3e:7e:dd:44:4f:80:58:5b:18:db:b3:fe:
91:80:46:34:54:a5:85:46:15:08:44:a7:f7:a5:2b:40:05:e3:
98:36:f0:49:45:ae:2f:67:f3:ff:fd:0d:09:40:40:31:c4:dd:
05:84:7c:5f:1a:24:b2:2c:bf:82:e3:0d:67:7d:bd:0f:0b:84:
49:f9:9c:32:aa:40:dd:5a:a8:7d:bd:d2:83:2e:69:6c:66:48:
9f:7f:ca:99:73:2f:0f:d6:e5:46:cc:e1:76:fe:33:9e:5a:64:
0a:cf:d9:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4DHav3l3CF+JNRPWGWD7HVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQzZjNlNjE5OTBmZDNlNTc2N2RlYmU5OGU1MWNjMTlj
YWM3MDgwHhcNMjYwNTA3MTU0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmIwNjZjOTNiMDQ2YzY5YzUyZDZkYzlmZTU3OTNkNjE4YTZjYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVszb3iLhc/aKzArWAohfSZ7JYQA
U5bD16mv21YNQNA21ephAHMaNQd/w0JDdAj6qUUC4GPECw3KABT2ZIBYCM4kFUMo
ZtFxEmYBEFM2Nl6VTp9U4WyZX7fIeBUpckdcJXrn/4t+X+kewaqLEDROXXaqxWtp
+KoMNzj1A7K3bYlupt+jo6kCFlYTw416vYZxCnTS/FuIhTN63h8YHOcTkTw4b2PR
nY/FUoqSyewYR9Ryax4UwvZOe0mIuIy/NFAoeVc5NzA0E+0t1T4MRwYKKeM/bO+I
3YdPexwBgImb+u2+Cj9GvyFB1Gbpd0HIQ/GrOE9sGOW8n1e5UKrwmxuBswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+wZsk7BGxpxS1tyf5Xk9YYpsqVMB8GA1UdIwQY
MBaAFOH0Pz5hmQ/T5XZ96+mOUcwZyscIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAt
MzIzNDE2MGRiY2Q0LzEvWDdCbXlUc0ViR25GTFczSl9sZVQxaGlteXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAtMzIzNDE2MGRiY2Q0
LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0IdMA0G
CSqGSIb3DQEBCwUAA4IBAQAGVlG9aC4HU8XCXGv4HnwWFgUGXdUAeb0NnAFpdkQL
LE0E57IvzIxwshcDOsdA1lWk9NdWIv+I6m8p4zJ4Ss8pGGXN2B68F7cm2lr/ZdKf
15NxGngKXRZZwTXv6ttCUgzmfPA1HLV8dyguK9mch5w1ubfaGaWXoYdCjqBfOPf8
0vf+v/Yfgn9TQcHsaCBnRmxLBbvllI8+ft1ET4BYWxjbs/6RgEY0VKWFRhUIRKf3
pStABeOYNvBJRa4vZ/P//Q0JQEAxxN0FhHxfGiSyLL+C4w1nfb0PC4RJ+ZwyqkDd
Wqh9vdKDLmlsZkiff8qZcy8P1uVGzOF2/jOeWmQKz9mm
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:54 2026 by rpki-client