Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/5aiykt3mjvJP4kKO_vI52BZHgow.roa
File: 5aiykt3mjvJP4kKO_vI52BZHgow.roa (raw, json)
Hash identifier: iWxQUr7yp7vrCgfoSZihkj/CF4SKzIJOhHhfLwotcEE=
Subject key identifier: E5:A8:B2:92:DD:E6:8E:F2:4F:E2:42:8E:FE:F2:39:D8:16:47:82:8C
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019D005751BFE942AC9FDCE57FC4FD230982
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/5aiykt3mjvJP4kKO_vI52BZHgow.roa
Signing time: Wed 18 Mar 2026 09:46:55 +0000
ROA not before: Wed 18 Mar 2026 09:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16278
IP address blocks: 89.30.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:57:51:bf:e9:42:ac:9f:dc:e5:7f:c4:fd:23:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Mar 18 09:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5a8b292dde68ef24fe2428efef239d81647828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:1f:9f:ea:53:61:2f:40:1b:bb:fa:bc:99:
8c:e9:97:cd:32:9d:47:6f:1a:0e:56:60:a2:f2:b2:
f7:f7:e0:f2:dd:51:6e:8b:6a:7c:d2:24:fb:fa:60:
87:7c:1b:22:f5:16:a3:03:ca:f6:41:dd:42:22:c6:
ca:b2:3c:68:60:88:77:7a:30:57:8b:55:2c:7a:9a:
9f:c9:f7:9d:ce:fe:b6:ea:35:5b:ed:8c:2a:50:73:
e0:56:44:3f:b2:0c:c9:f0:50:e2:bf:aa:0d:94:81:
07:a7:67:b0:14:2f:10:a3:b6:29:d7:88:3b:1c:56:
e1:c4:f1:c3:e3:4c:f1:5c:d6:ed:79:9e:f4:b8:5b:
a8:74:26:15:6c:44:82:e1:01:bc:01:87:3e:90:e4:
30:f3:f6:c1:ec:13:2e:2b:b6:12:94:e1:bb:9c:5f:
71:7b:c1:f4:43:ec:68:94:f7:e7:c4:d7:8c:5f:84:
28:e9:3d:6c:b0:03:4f:0e:11:ef:ef:32:83:9b:01:
a2:04:d5:49:75:ba:3c:3e:24:36:c9:aa:27:d3:a2:
aa:66:ac:30:46:bf:92:97:ab:40:bb:5b:89:5a:7f:
c4:cc:bc:6a:df:47:2c:ad:82:25:88:f3:1d:7b:fc:
66:ad:7b:32:46:e1:cf:7e:4b:ec:82:24:bf:db:05:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:B2:92:DD:E6:8E:F2:4F:E2:42:8E:FE:F2:39:D8:16:47:82:8C
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/5aiykt3mjvJP4kKO_vI52BZHgow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:94:d4:21:6b:f1:8b:dd:ff:81:17:fd:e4:d6:6f:3e:35:f9:
0f:e7:79:86:80:00:5e:3c:09:14:8b:99:a9:dd:a9:5f:6f:4e:
8c:15:dd:af:25:11:8b:9d:b0:6a:48:e5:02:cc:77:c7:4c:67:
af:19:49:53:f4:05:d7:c5:c0:48:4b:83:92:d6:5a:bd:b2:2c:
3d:bc:e1:c4:f0:b4:3f:2b:3f:02:cc:77:ec:9e:a1:ac:71:a9:
39:9c:93:a7:72:d7:ef:23:9d:24:52:56:13:96:a3:8f:2c:a4:
d0:ab:2e:3b:68:94:8c:b1:ed:49:12:64:97:0c:11:e0:9f:7f:
75:78:9f:20:e5:bb:ac:1f:74:71:61:75:4c:22:63:72:1a:42:
09:ba:47:a3:97:e6:ef:b0:52:b8:7b:7a:6d:14:0d:01:83:31:
bf:d2:53:a8:41:b3:57:e7:12:f6:9e:c5:52:d4:3e:44:0f:ec:
7d:fe:1c:78:ea:fa:8e:22:ca:b8:be:91:cb:fe:55:b2:f9:3b:
59:bf:e0:ef:5e:4c:fb:16:be:03:b3:a0:13:03:3c:af:4b:23:
79:4e:9d:30:e3:14:6b:c9:1f:a1:13:4e:fb:83:a7:01:98:b6:
5e:6b:80:d9:0c:a9:b8:59:88:f2:46:15:59:da:27:e0:39:da:
7c:49:3b:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0AV1G/6UKsn9zlf8T9IwmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjYwMzE4MDk0NjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWE4YjI5MmRkZTY4ZWYyNGZlMjQyOGVmZWYyMzlkODE2NDc4MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtQfn+pTYS9AG7v6vJmM6ZfNMp1H
bxoOVmCi8rL39+Dy3VFui2p80iT7+mCHfBsi9RajA8r2Qd1CIsbKsjxoYIh3ejBX
i1Usepqfyfedzv626jVb7YwqUHPgVkQ/sgzJ8FDiv6oNlIEHp2ewFC8Qo7Yp14g7
HFbhxPHD40zxXNbteZ70uFuodCYVbESC4QG8AYc+kOQw8/bB7BMuK7YSlOG7nF9x
e8H0Q+xolPfnxNeMX4Qo6T1ssANPDhHv7zKDmwGiBNVJdbo8PiQ2yaon06KqZqww
Rr+Sl6tAu1uJWn/EzLxq30csrYIliPMde/xmrXsyRuHPfkvsgiS/2wWWIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWospLd5o7yT+JCjv7yOdgWR4KMMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvNWFpeWt0M21qdkpQNGtLT192STUyQlpIZ293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWR7gMA0G
CSqGSIb3DQEBCwUAA4IBAQAPlNQha/GL3f+BF/3k1m8+NfkP53mGgABePAkUi5mp
3alfb06MFd2vJRGLnbBqSOUCzHfHTGevGUlT9AXXxcBIS4OS1lq9siw9vOHE8LQ/
Kz8CzHfsnqGscak5nJOnctfvI50kUlYTlqOPLKTQqy47aJSMse1JEmSXDBHgn391
eJ8g5busH3RxYXVMImNyGkIJukejl+bvsFK4e3ptFA0BgzG/0lOoQbNX5xL2nsVS
1D5ED+x9/hx46vqOIsq4vpHL/lWy+TtZv+DvXkz7Fr4Ds6ATAzyvSyN5Tp0w4xRr
yR+hE077g6cBmLZea4DZDKm4WYjyRhVZ2ifgOdp8STsF
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:07 2026 by rpki-client