Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa
File: 5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa (raw, json)
Hash identifier: s0w7EnEzaL3hvd2P1WfGCyS4/IjBnkkqTOFQOK9O+hc=
Subject key identifier: E5:1F:8C:97:9B:6A:22:6F:C5:26:92:57:91:47:43:89:24:AD:46:36
Certificate issuer: /CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Certificate serial: 019F8FE66669A16BB581F0473E8E9D6F0238
Authority key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa
Signing time: Thu 23 Jul 2026 16:54:29 +0000
ROA not before: Thu 23 Jul 2026 16:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198389
IP address blocks: 167.104.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:e6:66:69:a1:6b:b5:81:f0:47:3e:8e:9d:6f:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Validity
Not Before: Jul 23 16:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51f8c979b6a226fc52692579147438924ad4636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:d2:f4:34:cd:97:20:25:2a:c0:37:c3:1b:
95:2a:8d:59:cc:67:75:9d:f7:a8:6f:3c:a9:43:3c:
42:d3:7f:20:83:4d:fa:d8:b0:e9:42:f5:e7:75:54:
26:cf:4a:16:26:10:fa:08:ef:50:9a:48:13:ff:e9:
10:6e:ac:a9:6f:c1:1b:74:c2:51:3e:02:b0:8b:85:
8b:2d:53:ae:ee:33:11:23:3a:63:05:5d:ee:08:43:
58:83:5c:21:23:e4:6c:7f:98:44:07:eb:13:dd:b2:
ef:3f:12:6f:f7:eb:e0:b6:60:f9:5a:a7:ab:95:43:
89:d3:57:91:b2:28:15:d6:3b:a3:45:b9:26:14:39:
14:8e:e4:79:80:df:80:9f:93:4a:dd:91:e5:5f:ff:
0c:17:00:26:f7:60:97:50:d9:b8:9f:ab:be:57:66:
07:1d:5a:c2:55:b4:af:31:dd:59:b5:88:c2:f0:86:
59:b7:7f:6f:61:23:d2:b3:35:d4:24:12:7a:50:bd:
41:13:61:b3:10:06:f0:6f:fc:b3:54:8a:da:dd:82:
e8:0d:8c:6a:dc:2e:2c:87:cf:d9:5c:79:d9:db:be:
c4:d5:89:a0:8d:aa:95:53:c1:fd:10:db:06:f0:a7:
58:50:1b:16:96:e4:2a:f9:a9:9f:1a:69:0b:2f:31:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1F:8C:97:9B:6A:22:6F:C5:26:92:57:91:47:43:89:24:AD:46:36
X509v3 Authority Key Identifier:
keyid:2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.112.0/21
Signature Algorithm: sha256WithRSAEncryption
52:33:54:8b:03:94:1a:65:76:99:db:bf:a2:5e:96:3a:e4:04:
c8:3f:b9:f4:59:94:31:d4:e4:eb:f8:7c:c3:46:81:b8:b6:da:
f7:71:cc:a7:bb:3a:b1:ea:fa:7f:3d:4d:11:de:9a:d3:bb:05:
6c:39:72:c3:45:6c:62:0d:e1:9b:bb:10:67:c2:2a:57:a7:0c:
5a:9b:1c:04:c1:95:65:81:bd:45:79:73:a2:10:89:d7:0a:0e:
d7:8c:1a:73:6a:72:dc:ee:e4:da:52:0f:d9:d1:5e:32:7b:99:
88:0a:92:00:e4:21:af:59:e4:63:22:c0:3a:b3:28:07:f1:e6:
d2:b3:1d:bc:ef:4a:a9:d6:77:8f:32:3b:d0:80:3c:6e:af:72:
eb:bd:47:12:42:af:57:0d:0e:d1:2e:c1:53:53:d0:3c:73:8e:
c7:79:cb:c4:79:c3:65:04:f7:59:d5:3f:08:c2:c0:08:5e:ca:
06:b1:10:fe:58:46:88:03:aa:91:45:b0:ce:cd:82:21:d3:5b:
fa:d9:49:b0:da:a2:c6:4f:72:b9:3b:94:b4:04:32:b8:bb:01:
58:00:bf:c0:b4:a2:d4:af:33:fb:7b:32:06:80:5e:fb:b7:c1:
6a:ee:ac:8e:07:4c:77:0d:9a:d5:a8:a6:a1:11:33:8f:99:10:
44:73:69:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+P5mZpoWu1gfBHPo6dbwI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzA1YzcyMzI1MjJmMWI1MTg0YjFhOTIzYWQ1ZGY1YWNj
YTgyOTYwHhcNMjYwNzIzMTY1NDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTFmOGM5NzliNmEyMjZmYzUyNjkyNTc5MTQ3NDM4OTI0YWQ0NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg7S9DTNlyAlKsA3wxuVKo1ZzGd1
nfeobzypQzxC038gg0362LDpQvXndVQmz0oWJhD6CO9QmkgT/+kQbqypb8EbdMJR
PgKwi4WLLVOu7jMRIzpjBV3uCENYg1whI+Rsf5hEB+sT3bLvPxJv9+vgtmD5Wqer
lUOJ01eRsigV1jujRbkmFDkUjuR5gN+An5NK3ZHlX/8MFwAm92CXUNm4n6u+V2YH
HVrCVbSvMd1ZtYjC8IZZt39vYSPSszXUJBJ6UL1BE2GzEAbwb/yzVIra3YLoDYxq
3C4sh8/ZXHnZ277E1YmgjaqVU8H9ENsG8KdYUBsWluQq+amfGmkLLzHqlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUfjJebaiJvxSaSV5FHQ4kkrUY2MB8GA1UdIwQY
MBaAFCtwXHIyUi8bUYSxqSOtXfWsyoKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hYTFjOTEtMzVkZi00MmYwLTg4Nzct
NTE2ZTA1OGU4Nzg0LzEvNVItTWw1dHFJbV9GSnBKWGtVZERpU1N0UmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hYTFjOTEtMzVkZi00MmYwLTg4NzctNTE2ZTA1OGU4Nzg0
LzEvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp2hwMA0G
CSqGSIb3DQEBCwUAA4IBAQBSM1SLA5QaZXaZ27+iXpY65ATIP7n0WZQx1OTr+HzD
RoG4ttr3ccynuzqx6vp/PU0R3prTuwVsOXLDRWxiDeGbuxBnwipXpwxamxwEwZVl
gb1FeXOiEInXCg7XjBpzanLc7uTaUg/Z0V4ye5mICpIA5CGvWeRjIsA6sygH8ebS
sx2870qp1nePMjvQgDxur3LrvUcSQq9XDQ7RLsFTU9A8c47HecvEecNlBPdZ1T8I
wsAIXsoGsRD+WEaIA6qRRbDOzYIh01v62Umw2qLGT3K5O5S0BDK4uwFYAL/AtKLU
rzP7ezIGgF77t8Fq7qyOB0x3DZrVqKahETOPmRBEc2nN
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:41 2026 by rpki-client