Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa
File: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (raw, json)
Hash identifier: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=
Subject key identifier: 57:51:06:21:FA:FB:06:F0:4C:7D:A8:54:69:4E:0D:56:79:6A:74:44
Certificate issuer: /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial: 019DF884E4BB521970FECED91E37554BC1BA
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa
Signing time: Tue 05 May 2026 14:22:31 +0000
ROA not before: Tue 05 May 2026 14:22:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 193.5.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:84:e4:bb:52:19:70:fe:ce:d9:1e:37:55:4b:c1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
Validity
Not Before: May 5 14:22:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57510621fafb06f04c7da854694e0d56796a7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:96:55:42:df:1c:e0:ea:2a:f8:cd:b3:34:
96:39:e0:e2:74:56:93:1c:db:b5:5b:0c:7b:38:42:
cb:77:59:05:9e:05:c1:95:f7:7c:88:56:67:d7:61:
65:46:14:c7:0e:de:38:e5:49:53:9d:28:42:62:0f:
ab:1e:55:3a:b2:c8:ee:62:59:86:d7:67:46:46:0b:
d1:6c:ad:a2:2f:f8:33:26:6e:a3:7b:0c:6f:4b:c1:
d9:53:71:4f:e9:92:a9:fa:a0:bd:69:80:c2:6c:95:
bf:24:af:99:c8:59:12:47:63:ed:31:a0:33:0b:c0:
ae:54:e9:38:92:cf:fd:7b:50:84:13:a9:31:93:50:
68:61:42:15:14:1c:ab:77:e7:04:00:76:d6:d9:d8:
bc:a6:0b:bb:da:25:22:27:30:32:0d:e6:96:50:4b:
f1:1a:d4:9e:a2:d2:c0:e4:33:c1:2a:5c:8d:9f:f7:
f0:36:57:0f:f1:4e:87:90:ea:d9:f2:0d:a4:d8:fa:
6d:ed:49:e8:69:52:c2:02:25:aa:e1:62:ea:cf:5f:
6b:76:86:14:09:09:9e:db:b3:31:25:f6:aa:02:9b:
bb:0d:65:6e:22:5f:25:43:66:39:d3:a2:15:e2:3a:
bd:c9:1f:75:03:b2:ba:92:88:1a:56:75:29:3e:8c:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:06:21:FA:FB:06:F0:4C:7D:A8:54:69:4E:0D:56:79:6A:74:44
X509v3 Authority Key Identifier:
keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:80:13:f7:8d:89:11:14:6a:f7:10:39:51:27:de:65:7b:6d:
74:9d:1e:f5:fc:a1:4c:81:f3:7b:68:69:94:81:1f:38:64:63:
66:c0:c7:31:7c:f1:34:d2:ff:d1:ed:3a:92:3e:1a:f9:52:0f:
8d:d8:f4:23:3c:f6:d3:91:64:b5:83:c4:b9:55:56:29:7d:83:
83:d9:dd:77:f9:c5:a6:ce:9e:28:ee:79:02:0e:f0:43:31:0c:
9d:5d:cf:d3:a1:95:30:8d:30:2c:bf:fa:60:dd:80:c0:f8:34:
35:5f:25:f1:74:1f:b8:ce:dd:b4:28:cb:46:c4:bc:a8:37:00:
3f:bb:2e:14:70:00:73:e4:5c:8a:9c:5a:16:f3:d3:45:4f:d1:
4d:3e:a9:c1:0f:04:91:2b:a7:05:0f:64:7c:25:e0:28:d2:39:
6f:85:c5:0b:2c:af:ba:6f:c0:63:3b:71:a0:eb:15:ac:5b:45:
01:50:4e:34:4c:83:f0:ef:1f:42:25:6c:5c:ca:09:0e:04:18:
13:bb:de:af:50:7e:3e:74:64:70:86:f3:6a:25:92:38:41:21:
26:5f:5b:07:02:f9:6d:3d:5b:0f:9a:70:8b:dc:6c:b2:38:de:
19:fd:57:9c:dc:a4:ad:72:d3:37:c3:32:d1:97:ba:af:a4:06:
a7:00:24:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ34hOS7Uhlw/s7ZHjdVS8G6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMzUyMTNiYWQxNjk5NDgwODM4YzA1NTgwZjA3OGUyNDFk
ZWI1OGEwHhcNMjYwNTA1MTQyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzUxMDYyMWZhZmIwNmYwNGM3ZGE4NTQ2OTRlMGQ1Njc5NmE3NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjeWVULfHODqKvjNszSWOeDidFaT
HNu1Wwx7OELLd1kFngXBlfd8iFZn12FlRhTHDt445UlTnShCYg+rHlU6ssjuYlmG
12dGRgvRbK2iL/gzJm6jewxvS8HZU3FP6ZKp+qC9aYDCbJW/JK+ZyFkSR2PtMaAz
C8CuVOk4ks/9e1CEE6kxk1BoYUIVFByrd+cEAHbW2di8pgu72iUiJzAyDeaWUEvx
GtSeotLA5DPBKlyNn/fwNlcP8U6HkOrZ8g2k2Ppt7UnoaVLCAiWq4WLqz19rdoYU
CQme27MxJfaqApu7DWVuIl8lQ2Y506IV4jq9yR91A7K6kogaVnUpPoz5HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdRBiH6+wbwTH2oVGlODVZ5anREMB8GA1UdIwQY
MBaAFEo1ITutFplICDjAVYDweOJB3rWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQt
MmZkMzNiMjEwZTc2LzEvVjFFR0lmcjdCdkJNZmFoVWFVNE5WbmxxZEVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQtMmZkMzNiMjEwZTc2
LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQWVMA0G
CSqGSIb3DQEBCwUAA4IBAQCEgBP3jYkRFGr3EDlRJ95le210nR71/KFMgfN7aGmU
gR84ZGNmwMcxfPE00v/R7TqSPhr5Ug+N2PQjPPbTkWS1g8S5VVYpfYOD2d13+cWm
zp4o7nkCDvBDMQydXc/ToZUwjTAsv/pg3YDA+DQ1XyXxdB+4zt20KMtGxLyoNwA/
uy4UcABz5FyKnFoW89NFT9FNPqnBDwSRK6cFD2R8JeAo0jlvhcULLK+6b8BjO3Gg
6xWsW0UBUE40TIPw7x9CJWxcygkOBBgTu96vUH4+dGRwhvNqJZI4QSEmX1sHAvlt
PVsPmnCL3GyyON4Z/Vec3KStctM3wzLRl7qvpAanACTb
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:42 2026 by rpki-client