Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/5Vieq-wulwB6FaJx0xDN_dm4FF4.roa
File: 5Vieq-wulwB6FaJx0xDN_dm4FF4.roa (raw, json)
Hash identifier: QYUnQtWcGZ16DHSfHYt9mKOqdeXlb5mTBtNDg7p01bA=
Subject key identifier: E5:58:9E:AB:EC:2E:97:00:7A:15:A2:71:D3:10:CD:FD:D9:B8:14:5E
Certificate issuer: /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial: 019CE14F85E44B566551EC5DA019215486FE
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/5Vieq-wulwB6FaJx0xDN_dm4FF4.roa
Signing time: Thu 12 Mar 2026 09:10:10 +0000
ROA not before: Thu 12 Mar 2026 09:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200795
IP address blocks: 195.149.123.0/24 maxlen: 24
2001:67c:d2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:4f:85:e4:4b:56:65:51:ec:5d:a0:19:21:54:86:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Validity
Not Before: Mar 12 09:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5589eabec2e97007a15a271d310cdfdd9b8145e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:92:7a:19:c9:c0:30:19:01:69:d3:c0:55:
f6:ec:69:89:37:38:80:ce:e1:f5:1e:23:43:81:b2:
59:fe:0b:72:c3:c2:8d:f0:27:2f:ee:22:61:d6:16:
51:f7:00:1c:48:be:b8:b8:84:94:12:e9:e1:55:73:
21:bd:ca:c5:e5:e5:60:61:4e:97:da:7e:99:ac:76:
68:da:94:90:61:12:74:75:f9:be:77:7b:16:9b:40:
c4:2b:35:c6:ad:09:b8:00:62:45:2a:ed:f5:03:3a:
77:a9:70:d9:fb:d2:14:86:f3:8d:f9:70:66:aa:1e:
bb:01:b3:ee:49:3e:6d:a2:23:b8:af:d7:a5:04:eb:
be:99:cf:67:6a:ff:3a:dc:30:05:34:dd:d2:33:1c:
86:2d:7e:f2:e9:80:74:8e:e9:55:dc:72:aa:ca:6e:
c9:2e:4f:8b:2c:aa:9f:b2:de:0f:29:6c:b6:f7:2c:
e1:e3:ff:61:ae:2f:16:f7:e6:18:ed:6a:56:54:59:
91:f5:a8:1e:96:09:38:9e:ef:09:b9:a8:ab:e7:66:
77:75:74:b5:c8:fc:6c:63:24:9f:e5:72:b6:ee:32:
22:90:43:da:72:51:37:72:9f:2b:6f:c5:87:bc:43:
29:e2:b9:c9:04:2f:fd:2d:e6:91:6d:45:34:9f:0d:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:9E:AB:EC:2E:97:00:7A:15:A2:71:D3:10:CD:FD:D9:B8:14:5E
X509v3 Authority Key Identifier:
keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/5Vieq-wulwB6FaJx0xDN_dm4FF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.123.0/24
IPv6:
2001:67c:d2c::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ff:ee:b1:26:5c:c0:4a:26:e0:15:47:b4:d2:c4:7c:fe:9a:
7f:04:6e:5d:8e:7e:cc:63:b1:09:f3:c6:38:bb:64:70:ea:49:
77:e6:8a:40:f8:5a:e7:7e:d3:9f:3a:9f:5e:40:c1:2c:cb:64:
ab:ad:5d:68:9c:6e:11:13:f0:02:2e:4a:b2:17:98:ac:62:31:
07:b3:38:f3:bb:98:da:51:87:eb:c6:5f:7c:19:e4:93:e9:c4:
a6:09:a7:0a:af:c2:c7:c0:b1:f1:07:b7:57:ea:67:a7:9b:c7:
10:bb:40:0c:a1:17:63:05:16:fd:b2:87:82:15:09:9e:f7:aa:
fb:7c:81:17:47:6c:ba:af:23:34:9c:7b:5c:72:b0:eb:05:2a:
d3:38:1c:d6:58:ae:99:62:f5:94:39:c3:2e:5b:15:e9:3b:1e:
ff:3e:7c:29:3a:7b:d0:c4:db:c0:f0:e0:73:cb:42:df:50:23:
65:0d:be:bb:bb:b6:ce:78:5c:86:66:6a:64:17:08:82:17:35:
ba:c4:4a:8b:85:fc:3f:68:65:6a:f2:44:af:2e:88:a8:cb:f4:
a0:d4:31:50:7a:82:19:b6:96:e0:5c:0c:a0:68:a4:c7:b3:73:
dc:c9:4e:e2:f0:04:d7:58:b8:6f:95:e5:f1:45:b5:7e:62:14:
9f:9c:83:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZzhT4XkS1ZlUexdoBkhVIb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzAwYzU1M2E1NGRhMDViOTM2MzVhNjU0Y2FkYTAzYzZk
OWRmMmIwHhcNMjYwMzEyMDkxMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTU4OWVhYmVjMmU5NzAwN2ExNWEyNzFkMzEwY2RmZGQ5YjgxNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7uSehnJwDAZAWnTwFX27GmJNziA
zuH1HiNDgbJZ/gtyw8KN8Ccv7iJh1hZR9wAcSL64uISUEunhVXMhvcrF5eVgYU6X
2n6ZrHZo2pSQYRJ0dfm+d3sWm0DEKzXGrQm4AGJFKu31Azp3qXDZ+9IUhvON+XBm
qh67AbPuST5toiO4r9elBOu+mc9nav863DAFNN3SMxyGLX7y6YB0julV3HKqym7J
Lk+LLKqfst4PKWy29yzh4/9hri8W9+YY7WpWVFmR9agelgk4nu8Juair52Z3dXS1
yPxsYySf5XK27jIikEPaclE3cp8rb8WHvEMp4rnJBC/9LeaRbUU0nw1JFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOVYnqvsLpcAehWicdMQzf3ZuBReMB8GA1UdIwQY
MBaAFMbADFU6VNoFuTY1plTK2gPG2d8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgt
M2ZiZGQ5ZGJiZDkyLzEvNVZpZXEtd3Vsd0I2RmFKeDB4RE5fZG00RkY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgtM2ZiZGQ5ZGJiZDky
LzEveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw5V7MA8E
AgACMAkDBwAgAQZ8DSwwDQYJKoZIhvcNAQELBQADggEBAE7/7rEmXMBKJuAVR7TS
xHz+mn8Ebl2OfsxjsQnzxji7ZHDqSXfmikD4Wud+0586n15AwSzLZKutXWicbhET
8AIuSrIXmKxiMQezOPO7mNpRh+vGX3wZ5JPpxKYJpwqvwsfAsfEHt1fqZ6ebxxC7
QAyhF2MFFv2yh4IVCZ73qvt8gRdHbLqvIzSce1xysOsFKtM4HNZYrpli9ZQ5wy5b
Fek7Hv8+fCk6e9DE28Dw4HPLQt9QI2UNvru7ts54XIZmamQXCIIXNbrESouF/D9o
ZWryRK8uiKjL9KDUMVB6ghm2luBcDKBopMezc9zJTuLwBNdYuG+V5fFFtX5iFJ+c
g5k=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:16 2026 by rpki-client