Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/5p1Y35_GI3gPP_iDF2w6rov24dU.roa
File: 5p1Y35_GI3gPP_iDF2w6rov24dU.roa (raw, json)
Hash identifier: ZjYtTL0KyI8EVgr2ZoSoXG3ueE/HFre3VnSgaejq4uk=
Subject key identifier: E6:9D:58:DF:9F:C6:23:78:0F:3F:F8:83:17:6C:3A:AE:8B:F6:E1:D5
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A1BFCF8CC506F173CE9FB4B1FDDE9C4FF3
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/5p1Y35_GI3gPP_iDF2w6rov24dU.roa
Signing time: Mon 09 Nov 2026 10:16:52 +0000
ROA not before: Mon 09 Nov 2026 10:16:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 87.58.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:cf:8c:c5:06:f1:73:ce:9f:b4:b1:fd:de:9c:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Nov 9 10:16:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e69d58df9fc623780f3ff883176c3aae8bf6e1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:53:5a:a3:60:a8:b1:df:35:84:cc:1b:4a:
81:4c:3d:35:35:5e:15:88:12:55:28:3c:d3:a0:07:
b4:2c:ad:96:44:6d:9a:27:4c:18:16:86:6e:6f:82:
f1:38:f6:59:69:44:b9:05:2c:f3:33:12:d9:54:08:
9a:0d:9e:d6:60:7c:da:d4:4e:0c:0d:59:42:c9:c9:
8b:58:7f:52:b2:78:5f:da:89:1e:14:af:45:49:47:
3c:77:81:42:83:c6:cd:73:ec:9c:42:9d:87:d8:e4:
8e:75:17:a7:7f:32:7a:12:9d:34:81:d1:a3:4b:f4:
61:f7:19:07:51:75:61:45:c6:22:91:f1:74:a6:93:
30:df:6b:db:0e:39:c5:2e:8d:75:2f:c4:7b:4c:f4:
36:4a:a7:9e:90:2b:17:67:f1:6d:64:84:dc:d3:6f:
23:5a:fe:ad:3e:8f:4b:19:4d:b4:73:45:93:3d:8f:
03:c9:be:7e:c8:a4:da:99:c6:7d:8f:55:4b:4d:27:
88:07:75:9c:d4:b9:66:65:a3:70:fd:bf:b8:77:92:
7a:c8:3d:d9:fe:2e:99:c7:33:18:c9:ab:f2:74:f9:
13:79:37:47:5f:15:97:b2:26:f3:5c:8e:50:95:3f:
ea:58:68:a7:eb:2a:e4:08:41:fb:27:3c:f0:96:ad:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:58:DF:9F:C6:23:78:0F:3F:F8:83:17:6C:3A:AE:8B:F6:E1:D5
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/5p1Y35_GI3gPP_iDF2w6rov24dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.140.0/24
Signature Algorithm: sha256WithRSAEncryption
62:79:fe:54:76:5f:37:5f:45:ab:f4:8c:d1:ce:bb:63:51:7f:
12:56:58:c4:42:8d:97:ed:57:5e:b0:1a:f2:28:c1:c3:c0:f1:
53:72:19:b4:f6:89:3e:bf:7b:aa:75:e6:a6:c0:a9:c6:61:d4:
83:b6:7a:dc:0d:4c:4b:e1:25:49:d4:bb:c8:da:1f:71:34:b6:
d8:14:02:6a:3d:80:14:29:62:33:d9:da:f6:9d:bc:dc:5e:2f:
fa:a7:0c:2c:99:0d:aa:e2:57:8c:4a:61:de:54:92:d9:6e:c7:
f9:3c:d9:71:ba:3d:34:2a:63:c3:a2:1a:43:32:8c:44:4f:11:
95:be:f5:fa:71:f2:4d:37:0f:fc:4c:3d:f1:f9:86:60:da:cf:
ae:3e:ee:02:2a:20:60:cd:cd:50:b9:e0:77:04:ae:1e:b2:48:
6c:1f:37:cd:a9:e9:00:8c:51:59:d5:8b:15:37:4f:5b:ed:3e:
d5:4a:40:ee:5a:e7:66:f4:b0:23:29:08:55:84:7d:66:f3:ab:
15:d9:29:4a:8f:9e:46:93:31:b3:ab:15:13:fe:0a:7d:bc:77:
3f:73:a9:65:cb:fc:9e:a4:15:3d:1a:5e:9c:14:fc:fe:28:23:
83:79:87:67:15:75:24:46:b1:5f:2b:8b:41:55:0c:50:c8:6a:
59:7f:0f:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG/z4zFBvFzzp+0sf3enE/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYxMTA5MTAxNjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjlkNThkZjlmYzYyMzc4MGYzZmY4ODMxNzZjM2FhZThiZjZlMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6VTWqNgqLHfNYTMG0qBTD01NV4V
iBJVKDzToAe0LK2WRG2aJ0wYFoZub4LxOPZZaUS5BSzzMxLZVAiaDZ7WYHza1E4M
DVlCycmLWH9Ssnhf2okeFK9FSUc8d4FCg8bNc+ycQp2H2OSOdRenfzJ6Ep00gdGj
S/Rh9xkHUXVhRcYikfF0ppMw32vbDjnFLo11L8R7TPQ2SqeekCsXZ/FtZITc028j
Wv6tPo9LGU20c0WTPY8Dyb5+yKTamcZ9j1VLTSeIB3Wc1LlmZaNw/b+4d5J6yD3Z
/i6ZxzMYyavydPkTeTdHXxWXsibzXI5QlT/qWGin6yrkCEH7Jzzwlq0ZnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOadWN+fxiN4Dz/4gxdsOq6L9uHVMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvNXAxWTM1X0dJM2dQUF9pREYydzZyb3YyNGRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVzqMMA0G
CSqGSIb3DQEBCwUAA4IBAQBief5Udl83X0Wr9IzRzrtjUX8SVljEQo2X7VdesBry
KMHDwPFTchm09ok+v3uqdeamwKnGYdSDtnrcDUxL4SVJ1LvI2h9xNLbYFAJqPYAU
KWIz2dr2nbzcXi/6pwwsmQ2q4leMSmHeVJLZbsf5PNlxuj00KmPDohpDMoxETxGV
vvX6cfJNNw/8TD3x+YZg2s+uPu4CKiBgzc1QueB3BK4eskhsHzfNqekAjFFZ1YsV
N09b7T7VSkDuWudm9LAjKQhVhH1m86sV2SlKj55GkzGzqxUT/gp9vHc/c6lly/ye
pBU9Gl6cFPz+KCODeYdnFXUkRrFfK4tBVQxQyGpZfw+X
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:40:37 2026 by rpki-client