Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/_-OcrgtqtJtonkhDtHKlMGXRclM.roa
File: _-OcrgtqtJtonkhDtHKlMGXRclM.roa (raw, json)
Hash identifier: 63HqijJLyY7RyAWHw4zDInqjhKSY4slzUR8FECafgpI=
Subject key identifier: FF:E3:9C:AE:0B:6A:B4:9B:68:9E:48:43:B4:72:A5:30:65:D1:72:53
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A0D2692DBCD8BD17C1A8B1A20FD7FBF972
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/_-OcrgtqtJtonkhDtHKlMGXRclM.roa
Signing time: Thu 24 Sep 2026 07:55:03 +0000
ROA not before: Thu 24 Sep 2026 07:55:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 5.10.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:69:2d:bc:d8:bd:17:c1:a8:b1:a2:0f:d7:fb:f9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 24 07:55:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffe39cae0b6ab49b689e4843b472a53065d17253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:01:c5:0e:ed:8c:23:3e:9d:8d:36:4a:03:
f7:0b:45:a8:21:27:9c:10:4d:21:b9:a7:e8:6a:f3:
20:95:6b:55:7e:eb:e9:7e:11:01:dc:85:06:34:71:
8a:38:f8:bc:a0:9e:8a:2a:4e:0a:c8:2d:32:b9:05:
96:a4:5e:28:64:28:ed:8e:18:b3:62:7a:2b:df:96:
12:82:77:b6:01:ca:f1:ba:63:a8:3b:40:c7:c7:c2:
04:cf:96:8b:94:1f:21:b3:a9:c2:4e:23:29:89:08:
ad:8c:b4:6d:86:1d:d0:ff:7b:ba:f6:3d:a8:85:44:
58:f6:be:f9:a4:8e:aa:a0:9a:40:ad:b0:aa:2b:62:
75:86:e4:6f:a1:b2:44:05:67:b6:98:8f:b6:1c:20:
08:23:ae:05:a5:ae:44:a8:65:17:ae:fb:28:a5:ab:
7a:c1:a2:51:b2:fe:91:e6:2c:02:6f:5a:eb:2f:19:
1c:d1:fb:3b:8b:16:8a:92:ca:b9:0c:d6:18:25:70:
26:a2:f8:cb:b7:b9:d9:99:a4:98:83:7b:66:0e:7b:
3b:bd:22:56:b6:35:ae:43:9e:de:fd:82:32:b0:c5:
46:c7:f5:09:d2:de:6f:53:b4:b2:8f:e6:da:a2:4a:
fa:47:8b:be:07:d4:8d:d1:83:3b:10:0b:c4:74:33:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:9C:AE:0B:6A:B4:9B:68:9E:48:43:B4:72:A5:30:65:D1:72:53
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/_-OcrgtqtJtonkhDtHKlMGXRclM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.209.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f1:0f:18:c3:0c:b6:b0:00:7b:9f:8e:15:cf:df:66:ae:34:
ee:f4:c3:c5:35:7a:81:10:03:e3:f0:13:73:33:ab:fe:ac:8c:
e6:4e:74:78:ea:fd:f0:fe:72:00:c9:00:d0:74:b7:bc:7b:0f:
4c:6f:d0:78:63:95:d5:25:b8:02:99:47:d6:b8:f7:c5:1e:a8:
94:2f:8e:0f:71:8f:41:c1:c8:6e:85:50:8c:0d:c2:c3:68:a0:
5f:fb:c1:fd:0f:d3:18:96:6b:6f:36:a6:a7:5c:8a:99:69:ac:
d7:59:5e:f0:3a:b4:42:be:0b:52:cb:f1:78:5b:5f:19:78:29:
ab:e1:f2:44:4b:74:96:c8:ed:ee:5a:58:52:a7:f6:b1:18:51:
32:f8:1a:ad:74:b2:7a:18:f8:b9:43:76:25:c7:20:4f:43:88:
72:60:65:81:4c:f3:3c:6b:a4:af:22:85:0e:54:77:3f:cd:15:
93:b4:99:19:1d:f8:ea:a8:c4:b3:23:0d:3b:3b:83:9b:d6:6d:
fd:97:7a:e9:95:f1:39:ae:39:3a:5f:47:2f:41:2f:e0:29:18:
62:11:fb:1a:13:52:39:b9:9e:65:20:44:22:1a:d7:0a:0c:85:
e0:42:a5:ec:46:b3:23:0f:52:cd:e9:73:d3:fc:5c:29:0c:51:
8d:5c:40:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDSaS282L0Xwaixog/X+/lyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjYwOTI0MDc1NTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmUzOWNhZTBiNmFiNDliNjg5ZTQ4NDNiNDcyYTUzMDY1ZDE3MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTQBxQ7tjCM+nY02SgP3C0WoISec
EE0huafoavMglWtVfuvpfhEB3IUGNHGKOPi8oJ6KKk4KyC0yuQWWpF4oZCjtjhiz
Ynor35YSgne2AcrxumOoO0DHx8IEz5aLlB8hs6nCTiMpiQitjLRthh3Q/3u69j2o
hURY9r75pI6qoJpArbCqK2J1huRvobJEBWe2mI+2HCAII64Fpa5EqGUXrvsopat6
waJRsv6R5iwCb1rrLxkc0fs7ixaKksq5DNYYJXAmovjLt7nZmaSYg3tmDns7vSJW
tjWuQ57e/YIysMVGx/UJ0t5vU7Syj+baokr6R4u+B9SN0YM7EAvEdDNbBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/jnK4LarSbaJ5IQ7RypTBl0XJTMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvXy1PY3JndHF0SnRvbmtoRHRIS2xNR1hSY2xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrRMA0G
CSqGSIb3DQEBCwUAA4IBAQAF8Q8Ywwy2sAB7n44Vz99mrjTu9MPFNXqBEAPj8BNz
M6v+rIzmTnR46v3w/nIAyQDQdLe8ew9Mb9B4Y5XVJbgCmUfWuPfFHqiUL44PcY9B
wchuhVCMDcLDaKBf+8H9D9MYlmtvNqanXIqZaazXWV7wOrRCvgtSy/F4W18ZeCmr
4fJES3SWyO3uWlhSp/axGFEy+BqtdLJ6GPi5Q3YlxyBPQ4hyYGWBTPM8a6SvIoUO
VHc/zRWTtJkZHfjqqMSzIw07O4Ob1m39l3rplfE5rjk6X0cvQS/gKRhiEfsaE1I5
uZ5lIEQiGtcKDIXgQqXsRrMjD1LN6XPT/FwpDFGNXEBn
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:32:06 2026 by rpki-client