Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/ky9geymSVrF0um29NL9Ks30dd4k.roa
File: ky9geymSVrF0um29NL9Ks30dd4k.roa (raw, json)
Hash identifier: FEgPS5VaKHByfL43nfZ+MqpY7vFaNCLRziMzetcS2FU=
Subject key identifier: 93:2F:60:7B:29:92:56:B1:74:BA:6D:BD:34:BF:4A:B3:7D:1D:77:89
Certificate issuer: /CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
Certificate serial: 01A03E5488E4269F86495FC6727FF0022A06
Authority key identifier: F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/ky9geymSVrF0um29NL9Ks30dd4k.roa
Signing time: Wed 26 Aug 2026 13:48:42 +0000
ROA not before: Wed 26 Aug 2026 13:48:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39555
IP address blocks: 89.105.160.0/19 maxlen: 19
2a00:cac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:54:88:e4:26:9f:86:49:5f:c6:72:7f:f0:02:2a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
Validity
Not Before: Aug 26 13:48:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=932f607b299256b174ba6dbd34bf4ab37d1d7789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:79:c8:5e:63:02:12:03:eb:54:33:68:26:
3d:17:d5:03:07:35:63:c0:49:17:ca:4f:d6:6b:2a:
b3:6b:a6:74:04:ca:75:3d:ff:75:11:32:79:61:88:
60:b9:b2:b8:de:4f:74:61:56:9f:eb:fd:7d:4c:7a:
79:c6:9c:36:d3:bd:70:85:11:ae:53:93:10:b8:8b:
71:35:b1:1c:5c:41:36:f1:52:22:1e:ed:92:31:3b:
91:0d:a7:dd:05:73:40:ad:17:58:fa:f8:34:92:b1:
91:91:de:16:f3:ff:a8:e9:f4:c1:7e:05:5d:f0:61:
43:db:5c:15:1e:b6:d0:7b:69:a7:b8:e7:bd:2e:c8:
03:ce:b2:7b:b8:c8:a1:5f:8b:dd:07:73:23:bf:f3:
bc:e5:bc:05:f2:8e:fc:3f:32:81:ae:86:6e:c6:9f:
a3:21:92:e0:42:58:24:ac:72:7b:ea:4f:a2:b2:2d:
45:43:6f:8a:e5:3a:99:b7:31:ec:ca:c9:24:06:a8:
61:53:33:60:05:c3:14:fc:a3:02:28:65:60:9f:f3:
74:c5:ff:0b:47:f8:ec:4c:f9:5e:96:b8:47:25:0a:
ee:27:61:6e:23:70:95:9e:71:1a:8a:0c:fe:03:02:
28:a0:65:6f:18:ea:0f:95:04:06:46:a5:b5:08:5b:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:60:7B:29:92:56:B1:74:BA:6D:BD:34:BF:4A:B3:7D:1D:77:89
X509v3 Authority Key Identifier:
keyid:F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/ky9geymSVrF0um29NL9Ks30dd4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.160.0/19
IPv6:
2a00:cac0::/32
Signature Algorithm: sha256WithRSAEncryption
69:bc:c9:2a:f3:0d:31:ed:5d:a0:66:8f:96:f8:93:2f:7e:dd:
13:77:1a:c8:32:57:83:55:9e:a3:bb:85:83:7f:32:28:d2:ea:
52:d0:a6:79:78:81:e8:30:f4:a3:9b:35:69:d6:28:36:5a:6f:
01:82:59:34:1b:36:99:83:d5:9d:bc:72:28:e5:aa:ee:03:53:
d2:7d:e3:8d:44:8e:98:c6:77:17:a3:37:cf:5d:8c:5b:75:d8:
cd:c2:ba:b7:1f:c2:eb:86:1d:ec:93:11:46:76:d8:b7:e0:f0:
cd:e8:10:2a:3f:24:2b:3c:36:57:b2:2b:2d:82:f2:bb:3a:8e:
d3:d8:f6:45:f5:40:8a:60:57:27:8c:a1:6d:e2:82:87:8e:47:
80:a6:75:5c:4d:e1:b9:3a:ab:a7:8e:ad:f6:e6:2f:fc:01:c5:
bd:15:9a:0d:aa:4d:ef:ba:9b:6c:3a:a0:6f:3b:ca:1e:a3:92:
1a:47:d3:e0:a0:2d:a2:98:54:4b:9a:10:54:ba:c3:a5:84:f2:
22:2a:09:69:55:f4:e9:92:fc:1c:23:c7:ef:82:86:ef:64:ad:
4e:38:e6:3f:4b:bf:d3:92:51:1a:9a:26:e5:f9:b7:17:b1:25:
07:5a:3f:15:af:89:82:44:cb:41:a8:f1:4a:6a:82:6b:b7:76:
b8:9f:28:12
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaA+VIjkJp+GSV/Gcn/wAioGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzE2ZGY3NTFiYzdjNzFiMDAzOTZlOGVjYTc4NjlmMTYx
ZjZkMzMwHhcNMjYwODI2MTM0ODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzJmNjA3YjI5OTI1NmIxNzRiYTZkYmQzNGJmNGFiMzdkMWQ3Nzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0F5yF5jAhID61QzaCY9F9UDBzVj
wEkXyk/Wayqza6Z0BMp1Pf91ETJ5YYhgubK43k90YVaf6/19THp5xpw2071whRGu
U5MQuItxNbEcXEE28VIiHu2SMTuRDafdBXNArRdY+vg0krGRkd4W8/+o6fTBfgVd
8GFD21wVHrbQe2mnuOe9LsgDzrJ7uMihX4vdB3Mjv/O85bwF8o78PzKBroZuxp+j
IZLgQlgkrHJ76k+isi1FQ2+K5TqZtzHsyskkBqhhUzNgBcMU/KMCKGVgn/N0xf8L
R/jsTPlelrhHJQruJ2FuI3CVnnEaigz+AwIooGVvGOoPlQQGRqW1CFumowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJMvYHspklaxdLptvTS/SrN9HXeJMB8GA1UdIwQY
MBaAFPXBbfdRvHxxsAOW6Oynhp8WH20zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNGdDkxRzhmSEd3QTVibzdLZUdueFlmYlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81N2RiZGQtYzdjMC00Zjk3LThiY2Ut
NjViN2YxYmM3MjkzLzEva3k5Z2V5bVNWckYwdW0yOU5MOUtzMzBkZDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81N2RiZGQtYzdjMC00Zjk3LThiY2UtNjViN2YxYmM3Mjkz
LzEvOWNGdDkxRzhmSEd3QTVibzdLZUdueFlmYlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFWWmgMA0E
AgACMAcDBQAqAMrAMA0GCSqGSIb3DQEBCwUAA4IBAQBpvMkq8w0x7V2gZo+W+JMv
ft0TdxrIMleDVZ6ju4WDfzIo0upS0KZ5eIHoMPSjmzVp1ig2Wm8Bglk0GzaZg9Wd
vHIo5aruA1PSfeONRI6YxncXozfPXYxbddjNwrq3H8Lrhh3skxFGdti34PDN6BAq
PyQrPDZXsistgvK7Oo7T2PZF9UCKYFcnjKFt4oKHjkeApnVcTeG5Oqunjq325i/8
AcW9FZoNqk3vuptsOqBvO8oeo5IaR9PgoC2imFRLmhBUusOlhPIiKglpVfTpkvwc
I8fvgobvZK1OOOY/S7/TklEamibl+bcXsSUHWj8Vr4mCRMtBqPFKaoJrt3a4nygS
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:08 2026 by rpki-client