Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/ensnx0i9w4fYOEWjWCj9qvwf_yM.roa
File: ensnx0i9w4fYOEWjWCj9qvwf_yM.roa (raw, json)
Hash identifier: xSn1SzHdCPKxt8WuutL2r9Dk6TwmHP24ctox6PICqtQ=
Subject key identifier: 7A:7B:27:C7:48:BD:C3:87:D8:38:45:A3:58:28:FD:AA:FC:1F:FF:23
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 01A1B06E1D155C9B56D4856811A46589C0EC
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/ensnx0i9w4fYOEWjWCj9qvwf_yM.roa
Signing time: Fri 06 Nov 2026 10:36:08 +0000
ROA not before: Fri 06 Nov 2026 10:36:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 86.62.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:6e:1d:15:5c:9b:56:d4:85:68:11:a4:65:89:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Nov 6 10:36:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a7b27c748bdc387d83845a35828fdaafc1fff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:77:c6:3e:fd:4f:d7:a8:d0:20:6d:f7:e8:
27:dc:20:32:80:8e:bf:ea:99:26:52:4e:3a:f1:d2:
be:ec:a0:62:27:f4:15:35:3d:2f:93:d3:f4:16:b8:
0d:e7:71:01:af:bd:92:b6:c4:3f:17:ab:51:d1:6e:
3f:ce:fa:81:76:82:f4:11:6a:8e:56:d0:94:40:78:
5e:3a:52:0e:7f:58:5e:5b:9c:15:f1:fe:0f:88:1a:
75:78:2f:d5:7b:74:36:bc:8f:d7:fa:d3:e1:c2:36:
60:dd:f0:75:f0:41:f6:9e:03:e4:31:e4:da:ed:75:
aa:23:b8:42:34:ae:60:7c:c2:16:3b:a6:54:12:9a:
83:b1:57:74:b6:28:c1:7e:db:09:33:f8:42:f6:14:
ce:1a:60:d3:1a:1e:b7:b3:99:25:7b:64:ba:83:f4:
b7:88:cf:a8:70:0d:40:d7:bd:4c:85:76:d0:28:a6:
65:db:3d:01:96:0f:5d:68:c4:21:d9:07:14:ff:93:
cc:59:f3:ad:66:5f:14:02:81:5c:43:ab:88:06:0c:
60:bf:24:1f:55:6b:78:f0:64:26:c3:5e:7e:1c:50:
6c:d9:e1:b3:3e:5b:f9:14:9b:1d:d6:cb:5a:dd:43:
33:e7:31:30:8c:67:e2:84:ec:36:7e:f7:5e:1b:35:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:27:C7:48:BD:C3:87:D8:38:45:A3:58:28:FD:AA:FC:1F:FF:23
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/ensnx0i9w4fYOEWjWCj9qvwf_yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.43.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7f:63:1e:69:98:53:a8:ec:8d:a7:e8:e7:03:1d:cb:7c:0c:
33:82:45:59:33:41:54:d0:d3:6e:78:b6:f5:b0:86:98:1e:d0:
4a:15:38:a7:45:97:a4:ba:ac:ec:c7:ff:73:a6:39:af:ff:ca:
f5:f6:53:fb:a5:cc:c7:bd:40:6f:a6:bc:13:33:f3:a4:1e:7c:
6e:7e:bf:9c:16:45:c3:48:96:83:75:a7:dd:78:c1:e7:84:52:
c1:49:69:da:eb:00:81:22:54:ed:ce:4a:4d:af:d7:0a:98:d7:
ac:7d:f6:2a:93:79:31:7b:e7:04:30:f8:d9:c7:f6:bc:25:be:
2c:88:97:db:20:5d:53:36:4f:f3:70:7c:68:e1:be:32:65:61:
ce:04:e4:bb:f5:0b:e0:13:f9:f7:06:e5:c2:8e:8c:15:43:b3:
e3:57:10:27:46:21:bd:0a:82:07:74:38:7e:e8:cc:e3:b5:a9:
82:e1:cb:05:89:18:21:e4:e3:a8:f6:f3:64:59:6c:54:5e:95:
dd:4b:de:e8:33:31:78:79:77:91:8c:99:df:5e:a2:d0:55:ec:
b3:dc:24:7b:b4:71:4c:a5:0a:e0:00:58:fd:32:75:aa:44:75:
4f:b2:47:13:ef:f5:0f:3d:c3:bb:ad:fa:33:8a:45:5f:22:fe:
28:e0:5e:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGwbh0VXJtW1IVoEaRlicDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTQzNDFlMjNhMzMxNWVkNDQ1NWE1NDVkMWE0OGNlZjI5
ZTc4OTMwHhcNMjYxMTA2MTAzNjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdiMjdjNzQ4YmRjMzg3ZDgzODQ1YTM1ODI4ZmRhYWZjMWZmZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXV3xj79T9eo0CBt9+gn3CAygI6/
6pkmUk468dK+7KBiJ/QVNT0vk9P0FrgN53EBr72StsQ/F6tR0W4/zvqBdoL0EWqO
VtCUQHheOlIOf1heW5wV8f4PiBp1eC/Ve3Q2vI/X+tPhwjZg3fB18EH2ngPkMeTa
7XWqI7hCNK5gfMIWO6ZUEpqDsVd0tijBftsJM/hC9hTOGmDTGh63s5kle2S6g/S3
iM+ocA1A171MhXbQKKZl2z0Blg9daMQh2QcU/5PMWfOtZl8UAoFcQ6uIBgxgvyQf
VWt48GQmw15+HFBs2eGzPlv5FJsd1sta3UMz5zEwjGfihOw2fvdeGzUTlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHp7J8dIvcOH2DhFo1go/ar8H/8jMB8GA1UdIwQY
MBaAFFrkNB4jozFe1EVaVF0aSM7ynniTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUt
MWUwOGRmZDIzNWM3LzEvZW5zbngwaTl3NGZZT0VXaldDajlxdndmX3lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUtMWUwOGRmZDIzNWM3
LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVj4rMA0G
CSqGSIb3DQEBCwUAA4IBAQB4f2MeaZhTqOyNp+jnAx3LfAwzgkVZM0FU0NNueLb1
sIaYHtBKFTinRZekuqzsx/9zpjmv/8r19lP7pczHvUBvprwTM/OkHnxufr+cFkXD
SJaDdafdeMHnhFLBSWna6wCBIlTtzkpNr9cKmNesffYqk3kxe+cEMPjZx/a8Jb4s
iJfbIF1TNk/zcHxo4b4yZWHOBOS79QvgE/n3BuXCjowVQ7PjVxAnRiG9CoIHdDh+
6MzjtamC4csFiRgh5OOo9vNkWWxUXpXdS97oMzF4eXeRjJnfXqLQVeyz3CR7tHFM
pQrgAFj9MnWqRHVPskcT7/UPPcO7rfozikVfIv4o4F7M
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:13 2026 by rpki-client