Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/e9owlvY-NY5qGBDhXZ7WFxeggIc.roa
File: e9owlvY-NY5qGBDhXZ7WFxeggIc.roa (raw, json)
Hash identifier: QGa2zFUrPTeR+OERG79pTeFCAO6qtUgwUx98rjXhrvE=
Subject key identifier: 7B:DA:30:96:F6:3E:35:8E:6A:18:10:E1:5D:9E:D6:17:17:A0:80:87
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A057028478FC90C0BD03F72CE0A3A2C3AD
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/e9owlvY-NY5qGBDhXZ7WFxeggIc.roa
Signing time: Mon 31 Aug 2026 08:49:37 +0000
ROA not before: Mon 31 Aug 2026 08:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 5.181.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:02:84:78:fc:90:c0:bd:03:f7:2c:e0:a3:a2:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 31 08:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bda3096f63e358e6a1810e15d9ed61717a08087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:46:57:f9:d9:66:4e:25:9a:45:59:13:2c:
10:ff:e6:d8:49:94:d5:ad:11:2c:48:b0:2e:34:a4:
d4:99:99:07:2b:49:b0:99:e7:57:19:43:52:3b:ed:
41:6a:3f:d0:73:81:f1:21:60:aa:4a:90:d6:56:4a:
01:32:93:b7:1e:25:5c:81:06:15:46:c4:be:44:0d:
2d:64:d2:1e:f1:1b:c5:83:e9:4f:57:5e:07:ec:46:
54:6c:4b:37:30:96:f5:de:e6:05:fc:80:47:18:f9:
cb:d6:63:af:66:67:42:ae:68:27:38:ea:f7:fd:d5:
3f:db:f3:61:85:ab:37:89:7e:10:8d:df:70:5a:df:
8a:47:e9:7c:c2:93:0d:60:6b:ec:bb:d9:13:6c:86:
3b:52:27:76:3b:6e:2d:dd:cc:65:f7:4d:6f:c8:b7:
b2:ca:3c:16:91:ad:a8:76:d3:54:91:1e:ca:4a:b3:
ae:34:a8:2e:a9:e7:b2:9d:74:55:89:65:0c:ef:3d:
18:b8:fa:4c:ce:3c:8a:62:0a:d1:09:e2:76:2a:c7:
fe:6e:d6:45:7b:51:ce:cd:4f:73:cb:23:01:af:fb:
e4:90:79:73:5e:98:8d:13:2a:ef:35:2a:48:a5:86:
dc:ce:0f:31:76:7b:38:85:a5:99:83:5f:91:f4:4c:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:30:96:F6:3E:35:8E:6A:18:10:E1:5D:9E:D6:17:17:A0:80:87
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/e9owlvY-NY5qGBDhXZ7WFxeggIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.1.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e3:95:64:f7:96:4f:71:93:c3:6b:b8:24:83:33:ef:ba:c6:
59:29:86:f3:76:71:04:77:88:9b:07:d9:42:e7:05:55:58:8e:
9c:22:16:86:69:1a:1f:14:d8:86:f9:79:31:f8:f5:39:bd:40:
92:34:ed:23:5d:b9:7f:04:12:51:3d:56:16:ed:40:2a:50:1b:
ef:d7:1b:a3:29:d8:24:66:9d:f9:59:5b:74:69:9f:bd:73:a2:
1d:ac:cf:19:45:ed:92:09:59:ab:ff:bf:80:a7:d8:fc:66:32:
59:10:41:8c:43:62:30:b8:77:bb:dd:3b:62:67:57:c3:68:74:
c8:0f:54:88:30:8d:48:c5:18:25:bc:a0:22:f4:84:46:86:e0:
28:d7:a8:48:5f:6b:96:49:43:17:f9:a2:f9:61:90:eb:62:64:
ee:96:48:4a:80:b6:1d:af:e5:da:70:0b:96:ce:2e:1c:44:b5:
63:64:c7:91:54:9a:a3:aa:21:37:95:ae:e8:b3:78:1e:04:9d:
8a:33:4f:21:da:0b:86:cb:77:f3:df:db:d3:f4:7a:46:0d:e3:
08:7f:f3:5a:2a:2a:d7:83:89:95:78:88:2a:b8:b1:79:e5:ca:
46:3f:f5:fe:d5:bb:75:0d:19:0c:66:6f:b4:9b:cf:53:cf:a1:
bf:f1:b9:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBXAoR4/JDAvQP3LOCjosOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjYwODMxMDg0OTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmRhMzA5NmY2M2UzNThlNmExODEwZTE1ZDllZDYxNzE3YTA4MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRGV/nZZk4lmkVZEywQ/+bYSZTV
rREsSLAuNKTUmZkHK0mwmedXGUNSO+1Baj/Qc4HxIWCqSpDWVkoBMpO3HiVcgQYV
RsS+RA0tZNIe8RvFg+lPV14H7EZUbEs3MJb13uYF/IBHGPnL1mOvZmdCrmgnOOr3
/dU/2/Nhhas3iX4Qjd9wWt+KR+l8wpMNYGvsu9kTbIY7Uid2O24t3cxl901vyLey
yjwWka2odtNUkR7KSrOuNKguqeeynXRViWUM7z0YuPpMzjyKYgrRCeJ2Ksf+btZF
e1HOzU9zyyMBr/vkkHlzXpiNEyrvNSpIpYbczg8xdns4haWZg1+R9EzgOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvaMJb2PjWOahgQ4V2e1hcXoICHMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvZTlvd2x2WS1OWTVxR0JEaFhaN1dGeGVnZ0ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbUBMA0G
CSqGSIb3DQEBCwUAA4IBAQB345Vk95ZPcZPDa7gkgzPvusZZKYbzdnEEd4ibB9lC
5wVVWI6cIhaGaRofFNiG+Xkx+PU5vUCSNO0jXbl/BBJRPVYW7UAqUBvv1xujKdgk
Zp35WVt0aZ+9c6IdrM8ZRe2SCVmr/7+Ap9j8ZjJZEEGMQ2IwuHe73TtiZ1fDaHTI
D1SIMI1IxRglvKAi9IRGhuAo16hIX2uWSUMX+aL5YZDrYmTulkhKgLYdr+XacAuW
zi4cRLVjZMeRVJqjqiE3la7os3geBJ2KM08h2guGy3fz39vT9HpGDeMIf/NaKirX
g4mVeIgquLF55cpGP/X+1bt1DRkMZm+0m89Tz6G/8bkb
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:34 2026 by rpki-client