Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o5yRLw4-lzSmXf2m4922jb7QiH4.roa
File: o5yRLw4-lzSmXf2m4922jb7QiH4.roa (raw, json)
Hash identifier: lGwLHP7Ywdy80qxjFicfs32QCbWPAkIRxuJPjZsw7xA=
Subject key identifier: A3:9C:91:2F:0E:3E:97:34:A6:5D:FD:A6:E3:DD:B6:8D:BE:D0:88:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E7A07BC6357B51C7DDEEAA4D0C67C363A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o5yRLw4-lzSmXf2m4922jb7QiH4.roa
Signing time: Sat 30 May 2026 17:56:27 +0000
ROA not before: Sat 30 May 2026 17:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210331
IP address blocks: 94.156.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 17:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:07:bc:63:57:b5:1c:7d:de:ea:a4:d0:c6:7c:36:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 17:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a39c912f0e3e9734a65dfda6e3ddb68dbed0887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:4a:c0:c0:83:99:3d:d8:63:34:ce:c9:a5:
da:b3:41:d3:30:33:ac:16:35:1c:7d:ab:46:72:4c:
c9:36:72:d7:af:b0:c8:00:b9:e6:bc:88:de:34:0d:
82:6c:14:3f:e1:6c:0f:4c:ba:6b:33:f8:e1:10:5b:
34:ef:53:9d:c3:06:14:3e:3f:90:06:d4:ad:48:9d:
bf:dd:e8:b3:64:77:b2:41:43:b9:a2:89:f8:f7:f0:
1b:47:f2:91:35:41:bd:94:92:27:2b:48:52:90:51:
9b:82:67:b0:f5:fb:43:20:bf:71:c7:e4:c8:61:9c:
fa:01:6d:77:3f:7f:20:f9:4f:fc:d7:db:93:b4:b9:
55:7f:8a:87:34:d3:fa:d4:6b:ba:d4:b3:83:e1:09:
f9:b9:1b:55:52:f8:8e:bc:10:3c:d7:5d:0b:d9:67:
19:ab:33:b0:cf:ca:fd:35:82:b9:c9:d6:db:d4:12:
cb:df:68:91:80:25:35:6b:dc:77:53:5d:9e:58:8d:
bc:74:d3:27:23:91:f1:f0:a0:d0:b0:a6:c8:1f:88:
e2:08:59:ca:0b:2a:f6:e2:a1:01:fd:86:c7:5f:59:
88:2f:0a:bd:71:89:f3:74:4f:05:d8:b8:ab:9d:f0:
e5:a1:6b:87:e0:95:b1:99:9e:df:e9:2c:9a:8b:ff:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:91:2F:0E:3E:97:34:A6:5D:FD:A6:E3:DD:B6:8D:BE:D0:88:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o5yRLw4-lzSmXf2m4922jb7QiH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.11.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:56:6a:9a:ae:64:c0:83:cf:1b:45:1c:e5:da:e3:49:78:8a:
15:6b:10:c5:ee:c2:68:e0:1f:c5:16:83:cd:67:ec:bb:23:93:
c7:7c:d7:e7:3f:4f:0f:75:d3:5e:c2:52:48:4c:f2:81:8c:90:
01:24:41:99:dd:95:14:d6:2a:db:75:df:92:9b:d8:99:53:c3:
6f:a6:2e:ea:2d:30:55:16:c5:94:3a:da:8c:b3:f0:5b:46:eb:
41:1a:b5:3d:87:39:16:c5:29:76:72:e1:e7:75:1c:2e:ba:bc:
74:8f:87:e3:42:b9:de:7a:34:e6:f5:40:4e:bf:0e:47:a6:b6:
b5:c6:7a:0a:8f:c6:7a:3c:95:37:2f:c5:9e:69:5b:97:9b:f6:
f2:e6:97:19:30:a3:0b:a6:9e:ed:39:c2:69:77:6b:de:ca:89:
aa:ce:ee:61:f3:81:51:ee:41:af:54:f4:fd:0e:ab:82:e0:7c:
0e:b1:6a:17:f4:6b:2e:35:29:0e:54:c1:81:88:d2:a4:c3:87:
12:45:8c:1f:b6:49:2c:b8:35:1f:b3:f9:79:6d:30:4e:7b:e0:
14:f7:af:6d:30:5d:14:ed:e5:23:b1:9d:0d:07:9d:39:a5:86:
d9:87:1e:1f:48:e4:83:09:1b:42:0d:2c:fd:ff:c0:2f:98:26:
7a:9f:44:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ56B7xjV7Ucfd7qpNDGfDY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTMwMTc1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzljOTEyZjBlM2U5NzM0YTY1ZGZkYTZlM2RkYjY4ZGJlZDA4ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq95KwMCDmT3YYzTOyaXas0HTMDOs
FjUcfatGckzJNnLXr7DIALnmvIjeNA2CbBQ/4WwPTLprM/jhEFs071OdwwYUPj+Q
BtStSJ2/3eizZHeyQUO5oon49/AbR/KRNUG9lJInK0hSkFGbgmew9ftDIL9xx+TI
YZz6AW13P38g+U/819uTtLlVf4qHNNP61Gu61LOD4Qn5uRtVUviOvBA8110L2WcZ
qzOwz8r9NYK5ydbb1BLL32iRgCU1a9x3U12eWI28dNMnI5Hx8KDQsKbIH4jiCFnK
Cyr24qEB/YbHX1mILwq9cYnzdE8F2LirnfDloWuH4JWxmZ7f6Syai/9K8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOckS8OPpc0pl39puPdto2+0Ih+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbzV5Ukx3NC1selNtWGYybTQ5MjJqYjdRaUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpwLMA0G
CSqGSIb3DQEBCwUAA4IBAQCsVmqarmTAg88bRRzl2uNJeIoVaxDF7sJo4B/FFoPN
Z+y7I5PHfNfnP08PddNewlJITPKBjJABJEGZ3ZUU1irbdd+Sm9iZU8Nvpi7qLTBV
FsWUOtqMs/BbRutBGrU9hzkWxSl2cuHndRwuurx0j4fjQrneejTm9UBOvw5Hpra1
xnoKj8Z6PJU3L8WeaVuXm/by5pcZMKMLpp7tOcJpd2veyomqzu5h84FR7kGvVPT9
DquC4HwOsWoX9GsuNSkOVMGBiNKkw4cSRYwftkksuDUfs/l5bTBOe+AU969tMF0U
7eUjsZ0NB505pYbZhx4fSOSDCRtCDSz9/8AvmCZ6n0Rc
-----END CERTIFICATE-----
Generated at Sat May 30 21:51:44 2026 by rpki-client