Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/n5blPzAxj6urB6U69h-1_6oKGxM.roa
File: n5blPzAxj6urB6U69h-1_6oKGxM.roa (raw, json)
Hash identifier: wVHabnnbMu4awX0MmEHsebkGh6JiyzOhJKMjTxirSzY=
Subject key identifier: 9F:96:E5:3F:30:31:8F:AB:AB:07:A5:3A:F6:1F:B5:FF:AA:0A:1B:13
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019EF9706A2DF777173240FA82ABF7E32959
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/n5blPzAxj6urB6U69h-1_6oKGxM.roa
Signing time: Wed 24 Jun 2026 11:42:34 +0000
ROA not before: Wed 24 Jun 2026 11:42:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213871
IP address blocks: 88.218.41.0/24 maxlen: 24
103.76.130.0/24 maxlen: 24
193.16.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:70:6a:2d:f7:77:17:32:40:fa:82:ab:f7:e3:29:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jun 24 11:42:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f96e53f30318fabab07a53af61fb5ffaa0a1b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:32:ae:1a:d9:4d:49:fe:15:92:f0:a0:45:
3d:3d:45:fb:58:31:e9:b8:00:68:40:50:92:54:cf:
2b:f8:84:47:ea:1f:af:53:cf:b6:49:8b:62:b0:f0:
86:82:c2:2f:17:b9:8d:49:df:48:75:ba:de:13:d9:
9d:8d:2a:0e:b4:e1:0e:60:a1:d7:8e:d1:9b:2b:1e:
2a:a7:8c:5c:5e:54:93:3b:05:d8:e4:10:46:91:4e:
f3:fc:1f:6d:c5:d6:a4:62:ca:6a:4f:2d:1e:61:ac:
20:cb:a4:e6:cc:e4:10:53:cf:36:a8:2b:c2:97:eb:
4f:7c:6c:dd:fe:4f:8c:1e:9b:b0:89:54:b7:76:31:
93:39:d3:0c:2b:31:4a:bc:92:3b:a8:4d:99:67:ca:
6c:3b:36:50:2d:8e:35:42:ae:de:dd:f0:46:d7:ca:
f3:8a:84:21:8b:da:a0:1e:e7:42:95:15:14:33:48:
de:a0:21:7f:17:51:d9:da:52:03:34:94:b1:9a:3f:
ba:88:93:3d:a7:d1:1c:80:9e:60:44:ef:51:21:a3:
6f:aa:94:c7:67:c1:99:b3:5f:f5:99:13:54:b8:30:
0d:f5:02:ea:34:85:4c:57:5f:98:d3:77:af:ab:11:
67:12:34:bb:90:c1:1a:d3:7b:45:9e:ae:5e:22:ba:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:96:E5:3F:30:31:8F:AB:AB:07:A5:3A:F6:1F:B5:FF:AA:0A:1B:13
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/n5blPzAxj6urB6U69h-1_6oKGxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
103.76.130.0/24
193.16.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:53:3f:84:2a:c2:bc:b0:2d:c6:8c:ed:1d:f5:b7:d9:e8:57:
f6:a8:28:78:48:3d:6f:d2:7a:a9:58:21:90:14:a5:83:37:8d:
2b:aa:6e:b1:c7:84:7f:3c:cc:70:23:73:cd:57:c0:8b:ea:81:
c3:86:22:fd:ec:e7:53:2e:cb:7c:ee:55:5c:de:98:61:ea:c7:
09:32:95:2d:77:bb:7d:b4:6d:13:5d:c1:9c:97:df:05:d6:84:
d7:16:94:5a:7e:ab:dd:e4:4e:64:24:01:54:46:0d:ea:c6:41:
28:ec:ae:68:c2:d1:50:a3:18:a9:f3:24:08:90:90:23:ab:fc:
a4:19:0a:10:58:39:d6:e1:18:4b:ea:74:fc:16:58:87:a6:2a:
54:05:a5:6b:fc:f9:15:32:f8:50:ad:17:27:9b:b2:54:6a:d2:
f3:40:7d:ac:6d:1a:c1:02:f0:aa:05:95:94:9d:b1:c1:dc:71:
64:08:d2:02:98:db:75:4d:00:f3:9c:52:dc:6b:50:b0:1f:61:
40:16:39:9f:aa:de:58:45:f9:ff:5a:0f:54:41:80:96:70:0f:
a4:a9:a2:2e:27:d7:a0:0b:31:e9:d2:b5:b2:3f:54:ae:dd:e4:
cd:d1:12:53:3a:b8:e6:1b:1b:fa:8c:53:b4:5c:ac:59:c3:88:
8c:34:32:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ75cGot93cXMkD6gqv34ylZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw
YWU2NmMwHhcNMjYwNjI0MTE0MjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjk2ZTUzZjMwMzE4ZmFiYWIwN2E1M2FmNjFmYjVmZmFhMGExYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVoyrhrZTUn+FZLwoEU9PUX7WDHp
uABoQFCSVM8r+IRH6h+vU8+2SYtisPCGgsIvF7mNSd9IdbreE9mdjSoOtOEOYKHX
jtGbKx4qp4xcXlSTOwXY5BBGkU7z/B9txdakYspqTy0eYawgy6TmzOQQU882qCvC
l+tPfGzd/k+MHpuwiVS3djGTOdMMKzFKvJI7qE2ZZ8psOzZQLY41Qq7e3fBG18rz
ioQhi9qgHudClRUUM0jeoCF/F1HZ2lIDNJSxmj+6iJM9p9EcgJ5gRO9RIaNvqpTH
Z8GZs1/1mRNUuDAN9QLqNIVMV1+Y03evqxFnEjS7kMEa03tFnq5eIrpCqwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ+W5T8wMY+rqwelOvYftf+qChsTMB8GA1UdIwQY
MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt
MmViNzBhMzYwMmU5LzEvbjVibFB6QXhqNnVyQjZVNjloLTFfNm9LR3hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5
LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNopAwQA
Z0yCAwQAwRCRMA0GCSqGSIb3DQEBCwUAA4IBAQBrUz+EKsK8sC3GjO0d9bfZ6Ff2
qCh4SD1v0nqpWCGQFKWDN40rqm6xx4R/PMxwI3PNV8CL6oHDhiL97OdTLst87lVc
3phh6scJMpUtd7t9tG0TXcGcl98F1oTXFpRafqvd5E5kJAFURg3qxkEo7K5owtFQ
oxip8yQIkJAjq/ykGQoQWDnW4RhL6nT8FliHpipUBaVr/PkVMvhQrRcnm7JUatLz
QH2sbRrBAvCqBZWUnbHB3HFkCNICmNt1TQDznFLca1CwH2FAFjmfqt5YRfn/Wg9U
QYCWcA+kqaIuJ9egCzHp0rWyP1Su3eTN0RJTOrjmGxv6jFO0XKxZw4iMNDLG
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client