Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5jP_t7DRkDD-BWDNR6d-aUosRVc.roa
File: 5jP_t7DRkDD-BWDNR6d-aUosRVc.roa (raw, json)
Hash identifier: KRgPRaWta1Vu3cUO2C9EU9V9lKe/tGFG86Mf/45UiIE=
Subject key identifier: E6:33:FF:B7:B0:D1:90:30:FE:05:60:CD:47:A7:7E:69:4A:2C:45:57
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019E740C0EAC7C1D52A9228F79B6ED8C28A4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5jP_t7DRkDD-BWDNR6d-aUosRVc.roa
Signing time: Fri 29 May 2026 14:03:27 +0000
ROA not before: Fri 29 May 2026 14:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210655
IP address blocks: 2a0c:9a40:8b90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:0c:0e:ac:7c:1d:52:a9:22:8f:79:b6:ed:8c:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: May 29 14:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e633ffb7b0d19030fe0560cd47a77e694a2c4557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:23:cd:e8:92:ae:00:5a:43:ac:c3:62:95:
e0:cd:02:38:bd:ca:b7:4e:dd:77:2e:77:bf:e4:fd:
2c:16:81:3f:f4:e3:98:9c:05:9c:23:87:fe:29:d1:
13:79:54:39:88:67:35:d5:f6:99:ca:4b:e5:db:73:
70:eb:6b:16:2b:18:55:ce:a9:12:da:40:8f:2d:89:
0b:a0:9e:14:b3:f0:73:96:6b:bf:35:31:66:6a:7a:
51:f5:56:31:9f:73:07:04:98:50:8d:a1:21:c9:d5:
f4:be:9f:3b:18:e9:f7:79:8e:c2:1e:5f:0d:43:7a:
13:2a:64:e6:f0:36:9e:4b:ed:1e:6f:aa:2e:a6:8b:
03:c5:37:af:f9:6d:ff:c0:da:84:c5:41:e1:2c:15:
c4:c0:79:78:2b:87:ec:ed:6d:fe:0c:ff:b0:92:49:
69:12:1f:d9:f6:9c:4b:9d:48:af:4f:19:8a:1a:5d:
6a:c5:18:4f:85:a9:8f:65:ee:5b:86:d2:ca:47:df:
99:1c:50:53:d9:19:2b:58:cc:ec:b2:49:3e:56:95:
bf:1e:ed:cd:06:70:55:0b:92:09:55:b2:53:94:c2:
31:20:ea:bb:1d:be:41:ae:ef:eb:fb:67:74:c9:1c:
76:0a:d0:b3:d9:67:a4:62:24:53:a9:e4:b3:e0:f5:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:33:FF:B7:B0:D1:90:30:FE:05:60:CD:47:A7:7E:69:4A:2C:45:57
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5jP_t7DRkDD-BWDNR6d-aUosRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8b90::/48
Signature Algorithm: sha256WithRSAEncryption
77:a7:e0:c8:f4:ce:6b:08:f9:7b:43:e9:97:bb:5f:d5:2c:5c:
56:71:7d:4f:3c:c1:79:38:7b:1b:35:0b:1e:f5:32:ca:56:1d:
fa:0c:e1:c2:59:e9:f5:f8:50:e6:10:e9:d2:1b:7a:f9:ca:46:
7a:d1:b6:91:b5:36:ed:e1:18:b2:8f:35:57:00:53:f2:bc:fa:
15:cd:b2:8c:6b:7c:e5:4c:45:d7:74:fe:f5:cc:b8:d0:e7:41:
0b:6e:f2:ac:91:4a:64:c4:2f:11:c4:9f:e7:2a:f9:aa:70:5b:
a3:1b:04:a2:06:ab:91:96:22:70:8c:7c:9e:f9:3d:03:76:db:
00:39:12:d8:92:d7:12:4a:2a:5c:0e:da:9a:35:5f:d6:19:6c:
86:4d:77:73:a2:fc:74:50:6f:ec:4d:ae:0d:b6:b0:3d:a4:2c:
bd:d8:66:18:4e:40:53:04:1b:76:e5:c5:e1:36:95:8a:cd:95:
e8:85:a9:61:2e:d2:ac:4a:3a:88:ed:d9:71:17:81:fb:1e:30:
84:3a:b0:6e:43:c0:28:e5:07:e7:b9:b4:a1:81:c2:76:a3:17:
c0:99:c9:55:74:93:ed:24:c0:60:e0:27:f2:d4:53:8f:33:56:
15:1c:54:65:87:49:08:1c:8e:1a:ca:b7:e3:5f:f1:86:cc:c0:
c0:e9:5a:c4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ50DA6sfB1SqSKPebbtjCikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwNTI5MTQwMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjMzZmZiN2IwZDE5MDMwZmUwNTYwY2Q0N2E3N2U2OTRhMmM0NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0YjzeiSrgBaQ6zDYpXgzQI4vcq3
Tt13Lne/5P0sFoE/9OOYnAWcI4f+KdETeVQ5iGc11faZykvl23Nw62sWKxhVzqkS
2kCPLYkLoJ4Us/Bzlmu/NTFmanpR9VYxn3MHBJhQjaEhydX0vp87GOn3eY7CHl8N
Q3oTKmTm8DaeS+0eb6ouposDxTev+W3/wNqExUHhLBXEwHl4K4fs7W3+DP+wkklp
Eh/Z9pxLnUivTxmKGl1qxRhPhamPZe5bhtLKR9+ZHFBT2RkrWMzsskk+VpW/Hu3N
BnBVC5IJVbJTlMIxIOq7Hb5Bru/r+2d0yRx2CtCz2WekYiRTqeSz4PV2EQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOYz/7ew0ZAw/gVgzUenfmlKLEVXMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvNWpQX3Q3RFJrREQtQldETlI2ZC1hVW9zUlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIuQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB3p+DI9M5rCPl7Q+mXu1/VLFxWcX1PPMF5OHsb
NQse9TLKVh36DOHCWen1+FDmEOnSG3r5ykZ60baRtTbt4RiyjzVXAFPyvPoVzbKM
a3zlTEXXdP71zLjQ50ELbvKskUpkxC8RxJ/nKvmqcFujGwSiBquRliJwjHye+T0D
dtsAORLYktcSSipcDtqaNV/WGWyGTXdzovx0UG/sTa4NtrA9pCy92GYYTkBTBBt2
5cXhNpWKzZXohalhLtKsSjqI7dlxF4H7HjCEOrBuQ8Ao5QfnubShgcJ2oxfAmclV
dJPtJMBg4Cfy1FOPM1YVHFRlh0kIHI4ayrfjX/GGzMDA6VrE
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:51 2026 by rpki-client