Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/AXHkO7cRGRqDI2sSUufOLMuS90A.roa
File: AXHkO7cRGRqDI2sSUufOLMuS90A.roa (raw, json)
Hash identifier: xJ0nNqbHhFIsG3W5iQvo6hEDSszB8MTGJogfeozBa2k=
Subject key identifier: 01:71:E4:3B:B7:11:19:1A:83:23:6B:12:52:E7:CE:2C:CB:92:F7:40
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1912AD55D746A7757F8EDB0BF2157547B
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/AXHkO7cRGRqDI2sSUufOLMuS90A.roa
Signing time: Sat 31 Oct 2026 08:54:25 +0000
ROA not before: Sat 31 Oct 2026 08:54:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 187.7.204.0/24 maxlen: 24
187.52.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:2a:d5:5d:74:6a:77:57:f8:ed:b0:bf:21:57:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 31 08:54:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0171e43bb711191a83236b1252e7ce2ccb92f740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:d5:38:72:55:e2:2c:f9:37:c4:cf:a6:0c:
2c:2c:4f:c1:21:2d:c2:5a:b0:4c:16:9d:77:03:55:
88:b0:ad:b9:e3:64:9f:8e:4b:7b:e6:de:52:52:c6:
2b:56:38:37:71:d3:e9:10:3f:da:cc:f1:96:48:d6:
7f:fb:4d:a1:4f:ca:67:90:44:c6:ab:b0:6e:41:b8:
0b:ad:b3:84:bd:06:c1:b7:a0:77:63:1f:82:de:fa:
51:65:72:34:a7:64:92:1e:ae:b6:06:c9:ad:c4:c8:
4a:6b:23:36:58:b1:0a:10:3b:d7:de:ad:78:23:3f:
03:32:ac:d4:60:a2:5b:a8:74:49:bb:55:d5:c9:7b:
f7:d9:4d:4a:bb:dd:8b:67:c9:31:84:db:74:b9:ab:
43:76:9c:49:16:64:0f:c3:f7:c6:e0:3f:5c:24:7c:
ae:7d:a7:a5:e3:77:e8:8c:07:84:6a:2f:5f:1d:04:
ee:fb:f2:bd:e5:dd:19:1d:e0:0d:bd:ad:c4:d4:2b:
fa:77:e7:f2:4d:60:52:4d:3c:19:94:81:25:6d:dc:
a4:24:82:c6:bd:cd:f1:05:35:80:19:2e:0a:7a:ea:
7a:72:13:7a:d7:0e:b8:97:df:10:fc:4d:2a:5e:32:
e3:fa:e6:1e:65:87:7a:2a:b0:6e:c3:e7:08:72:9e:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:E4:3B:B7:11:19:1A:83:23:6B:12:52:E7:CE:2C:CB:92:F7:40
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/AXHkO7cRGRqDI2sSUufOLMuS90A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.204.0/24
187.52.38.0/24
Signature Algorithm: sha256WithRSAEncryption
31:63:9c:22:29:e3:18:74:ec:4d:dc:6f:5d:c6:52:7a:9b:ec:
fb:62:7a:1f:52:30:42:ef:a1:3d:de:0a:b8:06:81:0e:4d:39:
15:ba:f3:89:19:1b:ed:0c:dd:2e:52:cf:e1:97:d5:80:7e:6a:
3e:ce:85:e8:bd:33:d5:ee:4f:46:13:9e:6f:b4:d8:6d:d8:51:
3b:8e:b8:b6:a7:9e:4f:2f:67:b6:fc:4a:ae:7b:2a:d6:92:dd:
bd:56:54:ce:0a:07:9c:31:d3:f7:0d:96:4b:4a:70:f6:51:f6:
0d:e2:d7:b3:60:82:3f:4f:ca:57:47:91:8f:9d:19:e2:54:e6:
d1:03:61:f3:32:0a:4f:5b:3d:38:38:cf:78:d0:4c:4a:d6:6c:
5f:38:5f:12:2c:6c:41:a9:31:78:10:0b:9b:21:3b:bf:2f:75:
98:af:49:20:4d:a2:59:79:b5:98:94:65:01:78:85:1b:67:fd:
14:91:9b:e5:43:2d:8d:7d:c1:92:08:73:d7:62:38:87:9f:35:
20:75:89:3d:2f:de:58:fe:db:cd:b0:31:0e:a4:6d:33:63:95:
fe:f9:a7:a7:2e:c8:02:13:60:2e:29:de:29:e0:e4:e6:31:ef:
91:26:c8:a1:7a:87:ff:02:6a:46:f0:c0:28:7d:f7:96:41:d2:
7a:de:f3:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGRKtVddGp3V/jtsL8hV1R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYxMDMxMDg1NDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTcxZTQzYmI3MTExOTFhODMyMzZiMTI1MmU3Y2UyY2NiOTJmNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpzVOHJV4iz5N8TPpgwsLE/BIS3C
WrBMFp13A1WIsK2542Sfjkt75t5SUsYrVjg3cdPpED/azPGWSNZ/+02hT8pnkETG
q7BuQbgLrbOEvQbBt6B3Yx+C3vpRZXI0p2SSHq62BsmtxMhKayM2WLEKEDvX3q14
Iz8DMqzUYKJbqHRJu1XVyXv32U1Ku92LZ8kxhNt0uatDdpxJFmQPw/fG4D9cJHyu
fael43fojAeEai9fHQTu+/K95d0ZHeANva3E1Cv6d+fyTWBSTTwZlIElbdykJILG
vc3xBTWAGS4Keup6chN61w64l98Q/E0qXjLj+uYeZYd6KrBuw+cIcp6CPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAFx5Du3ERkagyNrElLnzizLkvdAMB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvQVhIa083Y1JHUnFESTJzU1V1Zk9MTXVTOTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuwfMAwQA
uzQmMA0GCSqGSIb3DQEBCwUAA4IBAQAxY5wiKeMYdOxN3G9dxlJ6m+z7YnofUjBC
76E93gq4BoEOTTkVuvOJGRvtDN0uUs/hl9WAfmo+zoXovTPV7k9GE55vtNht2FE7
jri2p55PL2e2/EqueyrWkt29VlTOCgecMdP3DZZLSnD2UfYN4tezYII/T8pXR5GP
nRniVObRA2HzMgpPWz04OM940ExK1mxfOF8SLGxBqTF4EAubITu/L3WYr0kgTaJZ
ebWYlGUBeIUbZ/0UkZvlQy2NfcGSCHPXYjiHnzUgdYk9L95Y/tvNsDEOpG0zY5X+
+aenLsgCE2AuKd4p4OTmMe+RJsiheof/AmpG8MAoffeWQdJ63vNM
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:31:58 2026 by rpki-client