Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/dx5kKwsHUfeaLHIBuy1rdyZUN1c.roa
File: dx5kKwsHUfeaLHIBuy1rdyZUN1c.roa (raw, json)
Hash identifier: MvSYpg6vlKWZg0bSYJ636EBXNeo8SL/Itfm86FpKxtI=
Subject key identifier: 77:1E:64:2B:0B:07:51:F7:9A:2C:72:01:BB:2D:6B:77:26:54:37:57
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019F7DFF0AEFB49FF8F5663DD065F0B9CA72
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/dx5kKwsHUfeaLHIBuy1rdyZUN1c.roa
Signing time: Mon 20 Jul 2026 05:28:14 +0000
ROA not before: Mon 20 Jul 2026 05:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 79.110.0.0/22 maxlen: 22
94.231.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:ff:0a:ef:b4:9f:f8:f5:66:3d:d0:65:f0:b9:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jul 20 05:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=771e642b0b0751f79a2c7201bb2d6b7726543757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:83:8a:2d:6e:7c:f8:e0:2d:51:7b:00:a0:
4c:1a:c8:ce:45:d5:b7:a6:5e:2a:15:da:5d:a8:bd:
81:58:76:6c:cf:50:83:00:f9:4d:ec:d6:f7:16:fb:
78:9b:c6:44:3f:60:0b:8e:aa:b4:ab:23:53:27:86:
cb:84:2d:a0:b5:c7:76:d4:da:c5:60:66:30:56:1a:
66:af:5e:0a:f0:d8:d4:9f:2c:92:ee:ae:19:de:1c:
e0:28:54:ef:21:cb:3c:18:4a:1e:bb:51:64:73:00:
23:a1:6f:03:af:79:6d:af:e6:3b:b9:bc:41:ee:8f:
19:35:0e:32:45:15:5f:76:47:76:d1:9e:4f:ca:ed:
01:2c:6c:4d:a8:b3:16:5f:90:54:55:90:52:76:d7:
c2:ec:b4:f2:3a:ec:e4:4e:e9:46:c7:66:0f:5e:76:
fc:67:ae:1b:70:b5:4d:e6:24:eb:ce:47:4e:c4:2a:
93:5e:67:52:6b:3c:13:0c:31:f7:dd:55:4b:8a:2c:
66:b0:f8:81:c3:94:1b:a0:49:b1:d4:ad:df:ab:06:
19:56:3e:73:50:d3:10:8a:83:85:df:17:8b:a7:6e:
64:08:8f:82:43:dc:8f:69:62:aa:df:a8:67:1e:7c:
cd:9f:d5:10:e5:29:ba:85:84:81:aa:c0:49:a2:fc:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:64:2B:0B:07:51:F7:9A:2C:72:01:BB:2D:6B:77:26:54:37:57
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/dx5kKwsHUfeaLHIBuy1rdyZUN1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.0.0/22
94.231.237.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:e3:21:81:33:f9:8f:62:94:68:03:db:b6:8d:34:08:4f:
0d:a8:a0:17:37:1a:a6:98:b6:a9:2c:fa:db:88:28:fe:03:1a:
52:a9:34:a8:14:ab:f4:ad:72:5d:c5:d9:60:e5:08:e7:ff:56:
51:91:f5:56:14:23:1f:f3:f3:40:c9:98:20:1b:1a:c8:17:cb:
f2:db:37:e9:5e:7f:40:eb:63:98:f4:b1:aa:64:0c:31:d4:d8:
59:06:be:fa:a3:4a:91:25:c9:e4:08:13:aa:7c:76:d1:92:05:
d5:81:c2:37:c0:65:88:29:9b:e6:f9:5e:45:fe:4a:2e:49:5a:
5c:98:43:8f:8e:6f:34:34:fa:49:84:59:5f:60:ed:97:c1:a7:
99:7f:9a:61:95:f6:b8:70:cd:fe:70:b3:c0:8d:cf:ef:d5:58:
c9:fe:6d:b7:55:5f:fe:8a:19:2c:ee:4f:23:04:61:d1:fb:dc:
0b:91:ed:0f:05:01:26:75:c9:f6:45:2b:52:aa:30:72:0f:13:
b0:dd:25:1b:6d:fe:98:cd:3e:81:10:d1:ac:d3:19:e9:05:b6:
b0:67:cf:84:b6:c6:9c:06:f4:be:69:96:f9:f6:47:d7:77:1f:
90:e9:1b:33:e9:9a:47:18:d5:fb:47:c4:d3:5a:17:bd:24:9d:
9e:ba:d6:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ99/wrvtJ/49WY90GXwucpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjYwNzIwMDUyODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzFlNjQyYjBiMDc1MWY3OWEyYzcyMDFiYjJkNmI3NzI2NTQzNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU+Dii1ufPjgLVF7AKBMGsjORdW3
pl4qFdpdqL2BWHZsz1CDAPlN7Nb3Fvt4m8ZEP2ALjqq0qyNTJ4bLhC2gtcd21NrF
YGYwVhpmr14K8NjUnyyS7q4Z3hzgKFTvIcs8GEoeu1FkcwAjoW8Dr3ltr+Y7ubxB
7o8ZNQ4yRRVfdkd20Z5Pyu0BLGxNqLMWX5BUVZBSdtfC7LTyOuzkTulGx2YPXnb8
Z64bcLVN5iTrzkdOxCqTXmdSazwTDDH33VVLiixmsPiBw5QboEmx1K3fqwYZVj5z
UNMQioOF3xeLp25kCI+CQ9yPaWKq36hnHnzNn9UQ5Sm6hYSBqsBJovyNqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHceZCsLB1H3mixyAbsta3cmVDdXMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvZHg1a0t3c0hVZmVhTEhJQnV5MXJkeVpVTjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCT24AAwQA
XuftMA0GCSqGSIb3DQEBCwUAA4IBAQAosOMhgTP5j2KUaAPbto00CE8NqKAXNxqm
mLapLPrbiCj+AxpSqTSoFKv0rXJdxdlg5Qjn/1ZRkfVWFCMf8/NAyZggGxrIF8vy
2zfpXn9A62OY9LGqZAwx1NhZBr76o0qRJcnkCBOqfHbRkgXVgcI3wGWIKZvm+V5F
/kouSVpcmEOPjm80NPpJhFlfYO2XwaeZf5phlfa4cM3+cLPAjc/v1VjJ/m23VV/+
ihks7k8jBGHR+9wLke0PBQEmdcn2RStSqjByDxOw3SUbbf6YzT6BENGs0xnpBbaw
Z8+EtsacBvS+aZb59kfXdx+Q6Rsz6ZpHGNX7R8TTWhe9JJ2eutYh
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:16 2026 by rpki-client