Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/DnAMEipRWT4zScgCErBfImrHIYM.roa
File: DnAMEipRWT4zScgCErBfImrHIYM.roa (raw, json)
Hash identifier: cJyfemKh5vlzqlnJgKkTt1cfO363Sh99iZPfMnWSktk=
Subject key identifier: 0E:70:0C:12:2A:51:59:3E:33:49:C8:02:12:B0:5F:22:6A:C7:21:83
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019D9CB54D40338DFF23D30982FAA124069D
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/DnAMEipRWT4zScgCErBfImrHIYM.roa
Signing time: Fri 17 Apr 2026 18:30:20 +0000
ROA not before: Fri 17 Apr 2026 18:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 192.94.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:b5:4d:40:33:8d:ff:23:d3:09:82:fa:a1:24:06:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Apr 17 18:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e700c122a51593e3349c80212b05f226ac72183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:65:e0:3e:3a:f3:02:3f:42:d2:b3:0d:c3:
41:d0:30:b2:59:a7:e3:22:38:93:b4:fc:72:ab:81:
36:0a:bb:c0:e3:79:1d:4e:f4:3e:f0:3a:3e:e1:5f:
2e:12:9f:fc:7b:be:dc:90:c6:34:bd:1c:d7:ae:05:
ca:e3:7a:83:fd:99:86:f0:ed:8e:fd:21:9a:12:ce:
26:42:c4:7f:1a:ca:ca:1d:39:da:b1:a5:a4:38:27:
1b:ff:2a:a5:06:47:5e:0e:fa:20:9e:11:ba:67:e0:
c8:6e:d5:60:0a:6b:11:11:07:cd:17:6b:42:9b:fd:
4b:6d:a1:97:b4:2c:2b:fd:71:21:c5:e5:01:57:1d:
bc:97:cd:84:6b:c6:92:e0:fb:57:84:e7:b7:5f:72:
28:f6:ae:7f:60:0a:1b:6f:aa:e7:94:01:1d:4b:4d:
4d:de:c9:a8:18:75:93:5e:ab:ef:83:c8:41:e8:d1:
14:79:cd:12:dc:cc:d4:b5:46:38:83:c2:23:f9:5f:
7b:2a:91:77:7e:de:2d:cb:ea:d8:f6:bd:a4:a7:14:
98:4c:d4:9b:6e:42:90:06:ab:f7:b0:88:ea:3f:e6:
9d:e8:57:74:7f:79:67:53:53:a8:04:81:7b:53:45:
cc:50:1b:d2:24:aa:8d:92:51:6b:30:56:34:cb:c4:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:0C:12:2A:51:59:3E:33:49:C8:02:12:B0:5F:22:6A:C7:21:83
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/DnAMEipRWT4zScgCErBfImrHIYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f2:e6:16:7c:10:62:67:3c:be:6a:4a:fe:35:35:af:a1:9b:
72:92:69:e5:08:33:32:02:e5:98:cd:41:87:36:43:a9:cd:ab:
ea:9a:9d:36:ad:5c:91:41:88:cb:10:08:2b:a6:0f:1a:2f:40:
ae:df:90:56:7d:a7:5c:1f:81:41:d0:a9:42:42:db:cb:c2:dd:
1a:99:c5:8f:8b:67:57:dc:45:cc:04:66:47:c9:4f:f3:1e:29:
08:3a:41:b1:18:90:02:60:b5:58:7d:df:09:08:93:4d:79:ce:
be:38:01:70:b8:89:d8:82:44:ea:ec:43:ce:e4:b9:67:f5:91:
a2:26:cb:6e:b6:43:1b:ee:cd:8a:71:82:7d:39:04:2c:73:14:
d9:fc:06:a9:3d:8e:fd:6f:0b:ea:ed:42:15:c4:b3:ba:c2:3e:
5b:8e:df:69:9c:d7:61:5b:e9:e6:43:45:ac:cc:ef:fa:e7:56:
cf:7a:3a:33:e1:1d:af:3d:e5:47:94:37:33:03:fb:8b:70:3b:
5b:58:df:50:dc:14:a6:65:98:df:c2:84:81:c7:59:b5:4d:9b:
3b:bd:02:ee:2e:21:aa:1f:14:57:20:4d:25:32:48:37:09:25:
b5:10:20:5c:52:fe:8b:9f:db:77:33:c2:15:83:7c:f0:d5:7b:
e3:69:fc:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2ctU1AM43/I9MJgvqhJAadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjYwNDE3MTgzMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTcwMGMxMjJhNTE1OTNlMzM0OWM4MDIxMmIwNWYyMjZhYzcyMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH9l4D468wI/QtKzDcNB0DCyWafj
IjiTtPxyq4E2CrvA43kdTvQ+8Do+4V8uEp/8e77ckMY0vRzXrgXK43qD/ZmG8O2O
/SGaEs4mQsR/GsrKHTnasaWkOCcb/yqlBkdeDvognhG6Z+DIbtVgCmsREQfNF2tC
m/1LbaGXtCwr/XEhxeUBVx28l82Ea8aS4PtXhOe3X3Io9q5/YAobb6rnlAEdS01N
3smoGHWTXqvvg8hB6NEUec0S3MzUtUY4g8Ij+V97KpF3ft4ty+rY9r2kpxSYTNSb
bkKQBqv3sIjqP+ad6Fd0f3lnU1OoBIF7U0XMUBvSJKqNklFrMFY0y8Tq0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5wDBIqUVk+M0nIAhKwXyJqxyGDMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvRG5BTUVpcFJXVDR6U2NnQ0VyQmZJbXJISVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF46MA0G
CSqGSIb3DQEBCwUAA4IBAQAI8uYWfBBiZzy+akr+NTWvoZtykmnlCDMyAuWYzUGH
NkOpzavqmp02rVyRQYjLEAgrpg8aL0Cu35BWfadcH4FB0KlCQtvLwt0amcWPi2dX
3EXMBGZHyU/zHikIOkGxGJACYLVYfd8JCJNNec6+OAFwuInYgkTq7EPO5Lln9ZGi
JstutkMb7s2KcYJ9OQQscxTZ/AapPY79bwvq7UIVxLO6wj5bjt9pnNdhW+nmQ0Ws
zO/651bPejoz4R2vPeVHlDczA/uLcDtbWN9Q3BSmZZjfwoSBx1m1TZs7vQLuLiGq
HxRXIE0lMkg3CSW1ECBcUv6Ln9t3M8IVg3zw1XvjafzQ
-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:13 2026 by rpki-client