Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/7pth_lTZD9gsICPhQEW97xKIM6k.roa
File: 7pth_lTZD9gsICPhQEW97xKIM6k.roa (raw, json)
Hash identifier: se10HW0vAKpZ/FyK6hpEkEmCRTmIFPVzCSzDZc5rBOU=
Subject key identifier: EE:9B:61:FE:54:D9:0F:D8:2C:20:23:E1:40:45:BD:EF:12:88:33:A9
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019E1AAE323BD77BD6AAFA647623EFC42D52
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/7pth_lTZD9gsICPhQEW97xKIM6k.roa
Signing time: Tue 12 May 2026 05:34:44 +0000
ROA not before: Tue 12 May 2026 05:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 5.160.110.0/24 maxlen: 24
5.160.144.0/24 maxlen: 24
5.160.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:ae:32:3b:d7:7b:d6:aa:fa:64:76:23:ef:c4:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: May 12 05:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee9b61fe54d90fd82c2023e14045bdef128833a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:23:00:ce:7c:db:eb:75:85:1f:e3:6d:33:
54:37:9c:9a:32:8c:ad:3e:dc:4c:40:1b:a0:51:b8:
a3:00:5d:09:b2:75:81:c8:d0:bb:b9:cb:87:96:d0:
19:e6:72:2b:eb:88:1c:65:30:4e:8a:36:36:3a:64:
55:7f:d8:dc:4f:ca:57:e6:a8:78:50:30:2d:f3:44:
0c:95:11:08:97:7b:4a:77:13:87:f7:9c:ee:5e:ed:
40:19:21:be:69:ef:36:60:a2:5f:5b:61:b3:56:57:
1a:ac:2d:af:33:dc:a0:97:36:64:04:78:18:c7:a1:
9d:62:b5:d8:87:31:33:57:c7:fc:c1:85:4a:36:6f:
df:9d:66:ea:97:7d:d4:0a:ab:40:a5:86:ad:ec:95:
c6:5d:cf:f2:e6:4a:98:fb:7c:f4:ef:24:48:97:ce:
17:af:e4:2c:46:15:a0:e1:ac:ec:ab:2f:dd:f3:f0:
9b:9f:59:79:e8:70:11:2c:61:bc:e3:e3:a5:ac:18:
7c:5c:9b:0d:cd:02:d2:d8:4e:2e:31:4d:78:5f:a3:
be:8f:7f:8a:ec:f4:ee:f7:90:06:ef:1e:f4:84:69:
58:c4:db:2d:eb:ac:cc:03:d4:ff:39:5a:f4:fd:07:
2c:04:63:95:1a:c7:de:72:bd:ba:dc:cc:cf:65:90:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:61:FE:54:D9:0F:D8:2C:20:23:E1:40:45:BD:EF:12:88:33:A9
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/7pth_lTZD9gsICPhQEW97xKIM6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.110.0/24
5.160.144.0/24
5.160.198.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dd:26:45:87:e9:c3:66:77:ce:2c:8e:bd:e5:68:5f:09:5b:
e6:52:92:e7:94:c8:4c:a9:9e:79:50:08:5e:23:1b:90:e7:26:
14:00:1b:f8:90:36:24:78:fb:19:ae:4b:1a:b8:da:0b:37:25:
0b:3c:f6:6b:ca:96:cc:6c:c2:10:41:79:f3:b8:8f:45:f2:db:
fd:be:56:e3:12:03:20:8a:fa:ad:9d:f0:1e:93:ec:c3:1f:91:
31:64:91:1c:23:56:c6:ac:7a:68:4d:8f:5c:1d:c7:dd:1e:05:
fe:76:2a:4e:0b:8c:30:40:c8:c8:0f:28:dc:6d:89:c7:d4:25:
90:b2:f0:92:9d:2b:c1:f9:f5:d5:a3:a9:d9:61:10:b0:1c:4d:
16:a0:f7:f4:a9:30:b4:0c:82:d5:04:02:85:92:24:c8:26:2a:
05:ca:8b:ea:6e:69:3a:0a:56:99:5f:03:de:86:9d:c1:de:67:
80:e0:20:fe:7e:f3:45:52:69:cb:2d:46:ba:1f:3f:9f:a8:51:
f5:72:af:e4:f0:75:be:80:14:ac:9d:ea:78:a5:46:42:52:33:
5d:9c:0c:30:b9:bc:71:0f:bb:a9:db:f5:da:21:b4:f3:f1:b2:
36:a1:d7:d5:6b:83:13:96:f2:d3:b5:75:c1:b0:33:7d:21:4d:
20:f3:9a:2b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ4arjI713vWqvpkdiPvxC1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjYwNTEyMDUzNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTliNjFmZTU0ZDkwZmQ4MmMyMDIzZTE0MDQ1YmRlZjEyODgzM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgQjAM582+t1hR/jbTNUN5yaMoyt
PtxMQBugUbijAF0JsnWByNC7ucuHltAZ5nIr64gcZTBOijY2OmRVf9jcT8pX5qh4
UDAt80QMlREIl3tKdxOH95zuXu1AGSG+ae82YKJfW2GzVlcarC2vM9yglzZkBHgY
x6GdYrXYhzEzV8f8wYVKNm/fnWbql33UCqtApYat7JXGXc/y5kqY+3z07yRIl84X
r+QsRhWg4azsqy/d8/Cbn1l56HARLGG84+OlrBh8XJsNzQLS2E4uMU14X6O+j3+K
7PTu95AG7x70hGlYxNst66zMA9T/OVr0/QcsBGOVGsfecr263MzPZZA2iwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO6bYf5U2Q/YLCAj4UBFve8SiDOpMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvN3B0aF9sVFpEOWdzSUNQaFFFVzk3eEtJTTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi
LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABaBuAwQA
BaCQAwQABaDGMA0GCSqGSIb3DQEBCwUAA4IBAQAS3SZFh+nDZnfOLI695WhfCVvm
UpLnlMhMqZ55UAheIxuQ5yYUABv4kDYkePsZrksauNoLNyULPPZrypbMbMIQQXnz
uI9F8tv9vlbjEgMgivqtnfAek+zDH5ExZJEcI1bGrHpoTY9cHcfdHgX+dipOC4ww
QMjIDyjcbYnH1CWQsvCSnSvB+fXVo6nZYRCwHE0WoPf0qTC0DILVBAKFkiTIJioF
yovqbmk6ClaZXwPehp3B3meA4CD+fvNFUmnLLUa6Hz+fqFH1cq/k8HW+gBSsnep4
pUZCUjNdnAwwubxxD7up2/XaIbTz8bI2odfVa4MTlvLTtXXBsDN9IU0g85or
-----END CERTIFICATE-----
Generated at Wed May 13 00:53:59 2026 by rpki-client