Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/5QtZG_mV7VV1GRdeZq86Esaesz8.roa
File: 5QtZG_mV7VV1GRdeZq86Esaesz8.roa (raw, json)
Hash identifier: vwP9tY7Rv5/nW7y1Pg9d56cYqktNpXr8MdjZ8jXw0F4=
Subject key identifier: E5:0B:59:1B:F9:95:ED:55:75:19:17:5E:66:AF:3A:12:C6:9E:B3:3F
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019F465464DFDBD7F655F74E189BCD1AA846
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/5QtZG_mV7VV1GRdeZq86Esaesz8.roa
Signing time: Thu 09 Jul 2026 10:02:43 +0000
ROA not before: Thu 09 Jul 2026 10:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:1900::/29 maxlen: 29
2a11:e500::/29 maxlen: 29
2a12:3100::/29 maxlen: 29
2a12:5180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:54:64:df:db:d7:f6:55:f7:4e:18:9b:cd:1a:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jul 9 10:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e50b591bf995ed557519175e66af3a12c69eb33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:8d:dd:af:e4:f2:40:b8:f2:1e:37:bc:c7:
4e:19:bf:30:43:2d:78:42:45:50:90:05:7a:da:98:
31:40:24:9d:09:db:70:b3:78:23:68:ff:46:c4:1b:
75:21:52:60:e1:90:3b:3e:bb:9d:ce:ae:26:77:b7:
b2:bc:1f:bb:21:4f:9a:37:27:9e:48:47:e8:a1:7e:
86:38:42:18:0d:9f:ab:1a:3a:48:4c:9b:55:2f:49:
58:f1:e3:70:4b:66:94:10:ee:fb:03:19:02:52:ea:
ee:cb:3e:2a:52:9e:e8:d0:f4:1b:e7:fc:91:78:d0:
29:c7:ba:75:88:9c:7b:05:28:0a:a2:26:b1:95:dd:
37:a3:ae:ab:25:bb:f0:7c:c3:4e:99:3b:12:ed:36:
a0:16:c8:ea:d7:f3:b5:d0:06:9d:2a:85:9b:01:c9:
44:59:ed:18:3e:be:d7:c3:7f:2d:95:1e:07:f6:be:
be:8d:a5:e5:03:8b:08:2d:ea:72:72:f9:0b:ec:fa:
c1:9f:d5:0a:7c:0c:11:9a:29:76:48:7c:36:e3:cc:
b1:84:67:53:9c:03:e9:94:1e:29:51:53:3f:56:07:
6c:5e:6d:d9:e4:cd:08:60:1c:68:cd:2f:e6:77:9f:
65:29:1c:99:e9:02:00:16:eb:20:ed:34:4e:a9:10:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:59:1B:F9:95:ED:55:75:19:17:5E:66:AF:3A:12:C6:9E:B3:3F
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/5QtZG_mV7VV1GRdeZq86Esaesz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1900::/29
2a11:e500::/29
2a12:3100::/29
2a12:5180::/29
Signature Algorithm: sha256WithRSAEncryption
5f:92:06:6e:57:4c:97:99:24:01:3d:36:95:1c:45:85:d2:53:
30:62:54:de:65:56:ef:28:b6:8c:56:28:d2:4a:df:33:5e:ae:
3c:9a:0b:c9:36:2b:89:35:fe:b3:ed:23:ca:cb:f8:95:ae:54:
ab:9f:b9:b1:c8:82:8e:67:76:28:4d:e2:b9:35:92:19:cc:93:
93:e0:60:2f:a8:b0:1f:4f:02:d0:32:0b:92:c0:09:46:7e:ed:
48:c9:5b:50:94:d3:ad:49:25:f4:32:81:92:7f:0a:c5:7a:9d:
51:36:8d:d6:bd:9b:91:8b:6d:05:79:bc:48:d8:3f:72:ef:7d:
8b:e3:82:2e:ae:b2:da:1f:9b:58:ed:93:f1:5c:80:bb:14:4a:
0f:7c:ed:0a:78:18:84:98:cc:ee:e0:16:a8:70:96:df:2d:81:
57:22:29:fd:40:f5:88:62:f3:d5:d3:ca:fa:06:ff:17:f2:43:
ac:85:be:b6:b3:8a:7b:d9:35:53:bf:d7:23:13:54:13:3d:8c:
29:8b:12:51:ba:70:3c:86:23:c1:92:65:9f:ae:cc:b8:29:31:
69:f4:c7:ef:25:2c:08:ac:0d:82:20:73:20:42:90:2d:57:bf:
14:7a:a7:c7:5b:67:81:db:4b:34:e1:03:09:bc:bf:48:a0:d8:
73:b1:80:1b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ9GVGTf29f2VfdOGJvNGqhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjYwNzA5MTAwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTBiNTkxYmY5OTVlZDU1NzUxOTE3NWU2NmFmM2ExMmM2OWViMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sCN3a/k8kC48h43vMdOGb8wQy14
QkVQkAV62pgxQCSdCdtws3gjaP9GxBt1IVJg4ZA7Prudzq4md7eyvB+7IU+aNyee
SEfooX6GOEIYDZ+rGjpITJtVL0lY8eNwS2aUEO77AxkCUuruyz4qUp7o0PQb5/yR
eNApx7p1iJx7BSgKoiaxld03o66rJbvwfMNOmTsS7TagFsjq1/O10AadKoWbAclE
We0YPr7Xw38tlR4H9r6+jaXlA4sILepycvkL7PrBn9UKfAwRmil2SHw248yxhGdT
nAPplB4pUVM/VgdsXm3Z5M0IYBxozS/md59lKRyZ6QIAFusg7TROqRA7SQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFOULWRv5le1VdRkXXmavOhLGnrM/MB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvNVF0WkdfbVY3VlYxR1JkZVpxODZFc2Flc3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKhEZAAMF
AyoR5QADBQMqEjEAAwUDKhJRgDANBgkqhkiG9w0BAQsFAAOCAQEAX5IGbldMl5kk
AT02lRxFhdJTMGJU3mVW7yi2jFYo0krfM16uPJoLyTYriTX+s+0jysv4la5Uq5+5
sciCjmd2KE3iuTWSGcyTk+BgL6iwH08C0DILksAJRn7tSMlbUJTTrUkl9DKBkn8K
xXqdUTaN1r2bkYttBXm8SNg/cu99i+OCLq6y2h+bWO2T8VyAuxRKD3ztCngYhJjM
7uAWqHCW3y2BVyIp/UD1iGLz1dPK+gb/F/JDrIW+trOKe9k1U7/XIxNUEz2MKYsS
UbpwPIYjwZJln67MuCkxafTH7yUsCKwNgiBzIEKQLVe/FHqnx1tngdtLNOEDCby/
SKDYc7GAGw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:23 2026 by rpki-client