Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/n5DZWGwRfzSzns4eqFSjissC4Ic.roa
File: n5DZWGwRfzSzns4eqFSjissC4Ic.roa (raw, json)
Hash identifier: hHHRlJz1sF3jJiU+5Rs6YUDTVt6DrNfVoH1Q2sTlqY0=
Subject key identifier: 9F:90:D9:58:6C:11:7F:34:B3:9E:CE:1E:A8:54:A3:8A:CB:02:E0:87
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019F5FC39F3C8B61EF7DB5ED594CEB4CCE7B
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/n5DZWGwRfzSzns4eqFSjissC4Ic.roa
Signing time: Tue 14 Jul 2026 08:34:43 +0000
ROA not before: Tue 14 Jul 2026 08:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39134
IP address blocks: 84.47.138.0/24 maxlen: 24
84.47.139.0/24 maxlen: 24
213.208.186.0/23 maxlen: 23
213.208.186.0/24 maxlen: 24
213.208.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:c3:9f:3c:8b:61:ef:7d:b5:ed:59:4c:eb:4c:ce:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jul 14 08:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f90d9586c117f34b39ece1ea854a38acb02e087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:e1:78:3c:86:e1:8b:1a:80:0a:e2:d7:c8:
57:00:5b:57:84:1f:0b:88:ef:5c:fc:ab:47:50:af:
00:37:d7:4d:61:5d:d9:0d:b4:0b:b0:2f:28:cf:84:
ff:29:a3:b9:fb:58:e2:9a:68:d1:c8:70:fd:b5:48:
90:af:6c:75:cf:42:e3:e7:1c:9a:2e:1f:ec:ce:09:
e8:3d:c8:20:90:3a:6d:c6:9a:fa:1a:03:c7:cf:8c:
15:50:ce:7e:30:57:21:e4:d4:ee:43:b9:31:01:08:
4d:71:d8:df:44:31:95:97:16:58:fa:67:87:b0:a3:
72:84:40:98:2f:b4:89:86:5b:f5:23:05:3f:ee:5a:
d1:14:91:c9:27:ad:54:97:b8:a4:a7:bb:25:d2:b2:
14:62:3a:46:70:8f:23:66:58:95:31:9c:4d:99:17:
ce:34:b7:90:d3:17:75:dd:79:23:b2:e0:08:d8:bd:
0e:b6:53:05:6b:d9:25:f3:57:59:89:7e:a1:a8:9d:
4d:6a:9e:9a:24:e4:f0:b9:0a:93:00:b3:79:58:cb:
f7:65:c2:9d:c8:bf:a0:cd:cf:ac:c4:a4:5c:a4:fe:
0b:e4:aa:02:ae:7e:88:4d:5b:09:42:bf:5f:a6:5f:
dd:ba:8f:d5:14:51:29:3c:ee:8b:b4:21:7c:cb:7c:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:D9:58:6C:11:7F:34:B3:9E:CE:1E:A8:54:A3:8A:CB:02:E0:87
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/n5DZWGwRfzSzns4eqFSjissC4Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.138.0/23
213.208.186.0/23
Signature Algorithm: sha256WithRSAEncryption
31:58:e2:89:17:52:68:c2:7b:b8:c5:6d:a1:e6:66:28:89:28:
22:5c:17:c3:25:b3:19:62:70:8a:c4:6e:6e:33:55:66:a0:a5:
ac:d8:de:be:48:ae:24:e8:be:73:68:82:fc:4b:be:3c:3a:c6:
68:bc:6a:7a:33:69:8c:1a:ac:b3:f0:06:73:9a:de:9d:4c:2c:
55:f4:1e:85:c1:fd:03:f6:0b:ec:bc:48:3e:ab:b9:1d:35:db:
44:38:8c:7e:07:3f:e1:5a:21:86:0a:e2:6f:1c:8f:9c:b7:d0:
91:4b:97:31:68:49:d5:a8:d5:8c:58:67:07:3c:df:93:9e:7a:
09:f3:ff:06:6b:bb:46:27:fd:67:1d:5e:22:d4:cc:e1:59:e9:
fd:f5:7c:50:ea:a0:65:0e:7f:8e:30:24:d4:69:97:bb:cd:62:
35:a0:b5:78:9b:03:26:13:a2:67:63:34:8e:8d:dc:12:c0:fb:
03:38:38:7a:fb:a8:4a:f3:d1:8e:e8:e6:51:37:5b:c8:57:98:
30:2c:45:cd:f1:0c:3c:d0:65:c8:24:34:36:fb:da:cb:50:1f:
ab:bb:1f:a5:83:49:3f:df:7f:3a:68:e6:cb:db:6b:54:cf:34:
c5:b7:f5:37:89:7d:5e:02:55:e1:9b:47:ec:cc:a6:d1:a3:fe:
1b:9e:7d:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9fw588i2HvfbXtWUzrTM57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjYwNzE0MDgzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjkwZDk1ODZjMTE3ZjM0YjM5ZWNlMWVhODU0YTM4YWNiMDJlMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBXheDyG4YsagAri18hXAFtXhB8L
iO9c/KtHUK8AN9dNYV3ZDbQLsC8oz4T/KaO5+1jimmjRyHD9tUiQr2x1z0Lj5xya
Lh/szgnoPcggkDptxpr6GgPHz4wVUM5+MFch5NTuQ7kxAQhNcdjfRDGVlxZY+meH
sKNyhECYL7SJhlv1IwU/7lrRFJHJJ61Ul7ikp7sl0rIUYjpGcI8jZliVMZxNmRfO
NLeQ0xd13XkjsuAI2L0OtlMFa9kl81dZiX6hqJ1Nap6aJOTwuQqTALN5WMv3ZcKd
yL+gzc+sxKRcpP4L5KoCrn6ITVsJQr9fpl/duo/VFFEpPO6LtCF8y3xwtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+Q2VhsEX80s57OHqhUo4rLAuCHMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvbjVEWldHd1JmelN6bnM0ZXFGU2ppc3NDNEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVC+KAwQB
1dC6MA0GCSqGSIb3DQEBCwUAA4IBAQAxWOKJF1Jownu4xW2h5mYoiSgiXBfDJbMZ
YnCKxG5uM1VmoKWs2N6+SK4k6L5zaIL8S748OsZovGp6M2mMGqyz8AZzmt6dTCxV
9B6Fwf0D9gvsvEg+q7kdNdtEOIx+Bz/hWiGGCuJvHI+ct9CRS5cxaEnVqNWMWGcH
PN+TnnoJ8/8Ga7tGJ/1nHV4i1MzhWen99XxQ6qBlDn+OMCTUaZe7zWI1oLV4mwMm
E6JnYzSOjdwSwPsDODh6+6hK89GO6OZRN1vIV5gwLEXN8Qw80GXIJDQ2+9rLUB+r
ux+lg0k/3386aObL22tUzzTFt/U3iX1eAlXhm0fszKbRo/4bnn1l
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:44 2026 by rpki-client