Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/5xg54AVWW6Xi4BJUknnWOr4xprs.roa
File: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (raw, json)
Hash identifier: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=
Subject key identifier: E7:18:39:E0:05:56:5B:A5:E2:E0:12:54:92:79:D6:3A:BE:31:A6:BB
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 019CF6AEFF0D2C916D4C656BF9C53D3709A9
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/5xg54AVWW6Xi4BJUknnWOr4xprs.roa
Signing time: Mon 16 Mar 2026 12:46:29 +0000
ROA not before: Mon 16 Mar 2026 12:46:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214180
IP address blocks: 80.88.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:ae:ff:0d:2c:91:6d:4c:65:6b:f9:c5:3d:37:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Mar 16 12:46:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e71839e005565ba5e2e012549279d63abe31a6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:c0:f0:33:15:6d:51:e3:c7:6c:e9:f3:2b:
d2:30:55:d1:3f:48:18:08:29:86:a1:87:1a:4b:38:
d1:e9:18:52:e4:8e:b3:08:10:ab:51:c4:cd:05:9e:
39:d6:16:b6:bb:7a:43:79:93:55:7d:7e:45:95:80:
5c:9c:b4:b6:f2:0a:f9:3a:d3:29:02:28:e4:09:4b:
db:3c:8e:45:a2:19:00:72:0c:11:17:88:11:44:9b:
21:4d:e3:95:92:1b:ca:61:c8:24:75:f5:75:bd:a7:
05:34:af:eb:53:d2:f6:a7:ee:6a:59:c0:8f:43:15:
fe:f5:c7:9d:68:e1:43:a8:1e:87:4d:af:d5:a3:c6:
c1:23:23:f2:64:6f:98:1c:9e:25:24:a3:76:dc:db:
6f:26:5f:0c:ce:5b:c7:fb:32:c5:e0:4d:60:ff:b4:
b1:66:67:cf:30:f0:ed:54:46:a9:40:fb:75:d9:1b:
c9:5e:f5:80:36:38:e9:73:0d:8b:78:d2:26:91:0c:
82:51:18:6c:6a:33:d9:ea:7f:57:f7:76:a3:00:ba:
17:02:a7:37:de:15:0a:3b:6f:66:60:49:c9:f1:95:
29:5a:c8:6f:23:82:10:1f:93:15:33:f7:b2:51:4b:
8c:c7:4c:96:27:78:92:2f:52:3c:ad:da:31:96:07:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:39:E0:05:56:5B:A5:E2:E0:12:54:92:79:D6:3A:BE:31:A6:BB
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/5xg54AVWW6Xi4BJUknnWOr4xprs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ff:f4:93:3c:4c:33:59:52:2e:56:f7:3a:9c:7c:43:27:df:
61:03:06:d2:0f:53:fb:76:a4:89:f4:96:0c:6f:db:1f:9f:a1:
4d:1c:6c:73:3c:d3:18:83:b2:fa:45:6c:2c:82:3e:70:0e:14:
62:2f:4b:24:18:2b:55:cc:55:88:04:51:c9:17:c1:2e:a6:ce:
c0:83:80:62:9f:44:d3:dd:4a:0c:0a:0d:20:60:01:8d:b2:8b:
7a:8f:13:3d:05:97:d3:44:71:e8:04:d7:38:a0:97:f6:8d:44:
7c:e3:0d:0b:a1:6e:8b:66:bd:15:b4:18:7a:f5:85:86:bc:14:
e6:67:1a:29:f3:d6:c8:2b:d9:9e:2b:32:f6:4f:3a:41:3c:60:
51:0f:e9:3a:25:2e:c9:f6:44:b2:31:3e:6f:14:bd:ea:8b:38:
a9:21:87:df:c5:85:eb:30:6a:90:12:06:32:f7:ce:2a:6c:ba:
56:55:25:65:30:17:15:9f:d6:af:a8:fb:6b:c2:f2:f7:21:f2:
ff:5b:c1:cb:89:9b:cc:57:a0:83:64:3e:68:73:22:d0:98:37:
17:c7:2f:de:6d:58:fd:50:cc:2b:ca:7d:20:ae:17:1b:c9:26:
80:35:2c:cd:73:94:58:35:d2:31:5a:50:e1:c6:f3:dc:c0:36:
9c:84:a0:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz2rv8NLJFtTGVr+cU9NwmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl
ODY0ZmYwHhcNMjYwMzE2MTI0NjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzE4MzllMDA1NTY1YmE1ZTJlMDEyNTQ5Mjc5ZDYzYWJlMzFhNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IrA8DMVbVHjx2zp8yvSMFXRP0gY
CCmGoYcaSzjR6RhS5I6zCBCrUcTNBZ451ha2u3pDeZNVfX5FlYBcnLS28gr5OtMp
AijkCUvbPI5FohkAcgwRF4gRRJshTeOVkhvKYcgkdfV1vacFNK/rU9L2p+5qWcCP
QxX+9cedaOFDqB6HTa/Vo8bBIyPyZG+YHJ4lJKN23NtvJl8MzlvH+zLF4E1g/7Sx
ZmfPMPDtVEapQPt12RvJXvWANjjpcw2LeNImkQyCURhsajPZ6n9X93ajALoXAqc3
3hUKO29mYEnJ8ZUpWshvI4IQH5MVM/eyUUuMx0yWJ3iSL1I8rdoxlgfFMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOcYOeAFVlul4uASVJJ51jq+Maa7MB8GA1UdIwQY
MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt
NzczM2JkODg4ZTI4LzEvNXhnNTRBVldXNlhpNEJKVWtubldPcjR4cHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4
LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFhuMA0G
CSqGSIb3DQEBCwUAA4IBAQB7//STPEwzWVIuVvc6nHxDJ99hAwbSD1P7dqSJ9JYM
b9sfn6FNHGxzPNMYg7L6RWwsgj5wDhRiL0skGCtVzFWIBFHJF8Eups7Ag4Bin0TT
3UoMCg0gYAGNsot6jxM9BZfTRHHoBNc4oJf2jUR84w0LoW6LZr0VtBh69YWGvBTm
Zxop89bIK9meKzL2TzpBPGBRD+k6JS7J9kSyMT5vFL3qizipIYffxYXrMGqQEgYy
984qbLpWVSVlMBcVn9avqPtrwvL3IfL/W8HLiZvMV6CDZD5ocyLQmDcXxy/ebVj9
UMwryn0grhcbySaANSzNc5RYNdIxWlDhxvPcwDachKBq
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:00 2026 by rpki-client