Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/gQt5rO11iazVIlm1HaoS1XjTomo.roa
File: gQt5rO11iazVIlm1HaoS1XjTomo.roa (raw, json)
Hash identifier: TYTsgTz3jwRNWm/bjIscWI7r1p2LFoVROym+8x52XLA=
Subject key identifier: 81:0B:79:AC:ED:75:89:AC:D5:22:59:B5:1D:AA:12:D5:78:D3:A2:6A
Certificate issuer: /CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
Certificate serial: 019F5BC3268186B10DC97F3D77B0F3B09174
Authority key identifier: F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/gQt5rO11iazVIlm1HaoS1XjTomo.roa
Signing time: Mon 13 Jul 2026 13:55:43 +0000
ROA not before: Mon 13 Jul 2026 13:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.58.40.0/23 maxlen: 23
193.58.40.0/24 maxlen: 24
193.58.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:c3:26:81:86:b1:0d:c9:7f:3d:77:b0:f3:b0:91:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
Validity
Not Before: Jul 13 13:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=810b79aced7589acd52259b51daa12d578d3a26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:e5:4e:5c:a8:14:3a:03:2e:95:70:e8:1c:
31:7f:c9:c5:bb:6e:f5:78:01:07:6c:c7:19:04:5c:
5d:60:bb:da:56:60:c7:50:22:e1:10:54:95:d5:ce:
c3:4b:50:ae:96:cb:cc:59:68:87:5e:e4:24:1d:e7:
f8:a1:3b:f1:00:0c:1a:a9:d2:e7:49:5b:25:07:bc:
02:cd:e7:47:ab:ae:23:33:f1:22:6a:1e:ac:96:f9:
3b:fd:37:cb:7b:da:02:c0:20:6b:82:67:68:a1:cb:
fb:d0:32:0f:20:77:7d:e0:f2:2a:ca:e6:27:d7:9c:
8c:d3:10:a8:86:b9:09:24:bd:0b:9c:ad:96:2d:ac:
82:c1:0b:7c:8d:f4:8c:ab:ca:53:7e:85:c2:8c:74:
24:e9:6a:bf:36:83:63:21:e6:69:8e:8f:32:25:e6:
6b:f6:8f:bf:9b:4b:d3:00:33:f5:12:ba:a6:62:d3:
3c:bf:69:ad:68:43:21:c6:ae:ef:40:2a:02:c2:c1:
67:c8:5f:2c:60:17:f3:51:61:ca:d6:a6:e1:35:29:
53:0d:83:fd:6b:52:8e:35:5d:8c:5b:dd:b9:6b:d1:
f7:d7:cd:17:63:f8:79:2d:9d:13:bb:46:1f:d4:9c:
de:42:73:93:f4:d6:3c:26:92:a2:c6:ae:f3:b4:ba:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:79:AC:ED:75:89:AC:D5:22:59:B5:1D:AA:12:D5:78:D3:A2:6A
X509v3 Authority Key Identifier:
keyid:F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/gQt5rO11iazVIlm1HaoS1XjTomo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.40.0/23
Signature Algorithm: sha256WithRSAEncryption
21:33:31:43:ca:2e:ed:e6:c3:59:f8:86:63:29:86:4c:7d:3e:
bb:2e:f5:ae:4d:ab:3c:89:c4:56:0d:9a:53:cc:bd:6c:82:4a:
f9:62:6b:e6:e0:b4:08:5c:e7:e1:c1:e4:77:5d:91:46:51:8b:
ad:df:8d:36:6c:63:8a:46:7b:f3:44:55:56:ab:37:3e:29:6e:
ad:1c:d4:f2:67:e3:29:32:37:e0:d4:23:a9:94:5e:14:ac:1d:
1e:36:a6:aa:67:22:00:fc:e8:1c:7b:2d:97:e0:c3:e0:d2:2f:
6c:a2:83:37:32:14:26:0e:6e:e1:c6:a3:31:0e:eb:06:1b:de:
13:8d:75:05:c0:fd:2e:93:3b:06:eb:69:a3:71:3a:7d:35:77:
92:14:8a:7d:8e:b5:f5:61:9e:8e:b5:8e:8e:c9:34:33:bc:95:
cb:c5:9b:79:90:2b:43:ca:c2:4c:83:66:a1:e4:a8:b7:83:81:
d2:cf:79:81:5f:de:12:94:d7:47:5a:4d:9e:a1:45:6b:09:44:
41:d9:22:33:b4:08:0b:79:d6:10:b2:d9:2b:f2:de:65:53:d7:
d9:76:b0:d8:4f:57:b1:53:ac:84:3b:dd:8a:5e:95:58:72:5b:
17:7a:8d:92:8c:aa:05:98:ba:aa:7d:f4:f0:b8:f4:78:22:d2:
f1:72:96:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9bwyaBhrENyX89d7DzsJF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MWQ4NGM2YjY2ZDI1MjM4Y2IyZDQ3M2RlODUzOTNjYjIz
YzA4ZDMwHhcNMjYwNzEzMTM1NTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTBiNzlhY2VkNzU4OWFjZDUyMjU5YjUxZGFhMTJkNTc4ZDNhMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o3lTlyoFDoDLpVw6Bwxf8nFu271
eAEHbMcZBFxdYLvaVmDHUCLhEFSV1c7DS1CulsvMWWiHXuQkHef4oTvxAAwaqdLn
SVslB7wCzedHq64jM/Eiah6slvk7/TfLe9oCwCBrgmdoocv70DIPIHd94PIqyuYn
15yM0xCohrkJJL0LnK2WLayCwQt8jfSMq8pTfoXCjHQk6Wq/NoNjIeZpjo8yJeZr
9o+/m0vTADP1ErqmYtM8v2mtaEMhxq7vQCoCwsFnyF8sYBfzUWHK1qbhNSlTDYP9
a1KONV2MW925a9H3180XY/h5LZ0Tu0Yf1JzeQnOT9NY8JpKixq7ztLo1EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIELeaztdYms1SJZtR2qEtV406JqMB8GA1UdIwQY
MBaAFPUdhMa2bSUjjLLUc96FOTyyPAjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVIyRXhyWnRKU09Nc3RSejNvVTVQTEk4Q05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xMTY0ZDYtMzllMi00OWZhLWJlYzct
OGZmMTU5MmViYzQzLzEvZ1F0NXJPMTFpYXpWSWxtMUhhb1MxWGpUb21vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xMTY0ZDYtMzllMi00OWZhLWJlYzctOGZmMTU5MmViYzQz
LzEvOVIyRXhyWnRKU09Nc3RSejNvVTVQTEk4Q05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTooMA0G
CSqGSIb3DQEBCwUAA4IBAQAhMzFDyi7t5sNZ+IZjKYZMfT67LvWuTas8icRWDZpT
zL1sgkr5Ymvm4LQIXOfhweR3XZFGUYut3402bGOKRnvzRFVWqzc+KW6tHNTyZ+Mp
Mjfg1COplF4UrB0eNqaqZyIA/Ogcey2X4MPg0i9sooM3MhQmDm7hxqMxDusGG94T
jXUFwP0ukzsG62mjcTp9NXeSFIp9jrX1YZ6OtY6OyTQzvJXLxZt5kCtDysJMg2ah
5Ki3g4HSz3mBX94SlNdHWk2eoUVrCURB2SIztAgLedYQstkr8t5lU9fZdrDYT1ex
U6yEO92KXpVYclsXeo2SjKoFmLqqffTwuPR4ItLxcpZX
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:26 2026 by rpki-client