Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/5J1ZLpGRglEIpqIkhiDq2AnrLR8.roa
File: 5J1ZLpGRglEIpqIkhiDq2AnrLR8.roa (raw, json)
Hash identifier: YCh1O/pya2tgScmgjqyyOWL9RIorCG7iaoLIO54Rx4k=
Subject key identifier: E4:9D:59:2E:91:91:82:51:08:A6:A2:24:86:20:EA:D8:09:EB:2D:1F
Certificate issuer: /CN=a290f635c2f69e6453ae91d2d1800fede4337351
Certificate serial: 01A13F0FC1A7539AFE303B1A9152AFB38FCE
Authority key identifier: A2:90:F6:35:C2:F6:9E:64:53:AE:91:D2:D1:80:0F:ED:E4:33:73:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opD2NcL2nmRTrpHS0YAP7eQzc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/5J1ZLpGRglEIpqIkhiDq2AnrLR8.roa
Signing time: Thu 15 Oct 2026 10:15:59 +0000
ROA not before: Thu 15 Oct 2026 10:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31229
IP address blocks: 91.199.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/opD2NcL2nmRTrpHS0YAP7eQzc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:0f:c1:a7:53:9a:fe:30:3b:1a:91:52:af:b3:8f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a290f635c2f69e6453ae91d2d1800fede4337351
Validity
Not Before: Oct 15 10:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e49d592e9191825108a6a2248620ead809eb2d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:6a:3c:d1:15:a7:25:68:a8:dd:1d:41:e4:
eb:ad:6c:1a:51:72:8c:14:49:57:53:6f:86:c9:09:
41:8d:83:19:a3:c0:6b:0a:4d:73:39:46:09:13:20:
3f:70:07:ef:83:d6:6a:49:e1:6c:ba:43:7d:d4:1c:
a5:db:55:53:93:63:14:d4:35:ee:a5:d1:c5:d0:1d:
4c:09:12:cd:a0:20:ad:6e:8a:5e:30:a7:67:6b:b9:
59:0a:35:7c:9e:7b:e0:db:50:ff:98:83:7f:78:6d:
ba:d2:03:1a:20:99:02:c3:30:51:6b:95:11:fa:43:
78:7c:c1:9f:86:3e:8a:88:32:37:b1:f1:6b:d4:b4:
7b:18:db:9a:e4:ef:1b:ba:90:54:a1:ef:20:bb:fb:
bc:12:86:20:0f:a8:d8:e6:d9:47:d9:a0:dc:ae:b1:
02:af:fb:fa:39:00:08:a1:88:08:ce:02:fe:c6:74:
24:7a:77:32:4e:ef:7a:24:00:e7:97:5c:b5:48:13:
c8:c2:0c:69:d7:2a:47:63:c6:a0:cc:06:f1:44:0f:
e1:62:f9:ea:5a:51:5a:ca:0c:38:ec:bb:3d:60:8b:
47:b6:57:f3:b4:79:34:bd:da:ca:45:80:5f:ef:cd:
3b:c8:3e:0f:a4:00:ba:d4:fb:11:f8:f6:e0:11:6b:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:59:2E:91:91:82:51:08:A6:A2:24:86:20:EA:D8:09:EB:2D:1F
X509v3 Authority Key Identifier:
keyid:A2:90:F6:35:C2:F6:9E:64:53:AE:91:D2:D1:80:0F:ED:E4:33:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opD2NcL2nmRTrpHS0YAP7eQzc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/5J1ZLpGRglEIpqIkhiDq2AnrLR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.95.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bf:89:90:35:e1:54:d1:6e:83:aa:59:69:26:cc:c0:1e:f6:
8f:8d:52:9b:38:e2:94:b3:bf:63:6f:db:f0:8c:2d:d3:b5:4b:
94:08:c3:29:9f:92:58:fc:45:a4:c0:b6:91:ae:d0:65:e5:4b:
51:75:a6:42:38:cb:46:c7:a3:ce:22:2e:45:ee:0c:f8:98:74:
db:92:32:be:04:b9:de:d1:6a:b8:57:a9:e8:ec:8f:a0:b7:d5:
0a:0e:cf:c9:dc:13:0a:35:7f:c5:c6:7d:b9:d6:75:2d:99:32:
5b:94:76:a2:bc:e1:7e:a5:95:7e:02:59:18:ea:e5:d9:ec:ad:
64:90:7f:67:a0:1f:07:6d:20:34:f9:21:c1:13:a9:ba:5c:c7:
80:0d:1f:7f:4e:ac:bd:5d:e5:51:ed:12:6e:9f:a8:c5:dd:28:
02:01:c0:0f:ac:60:6b:61:11:69:b4:21:8d:c8:33:f0:66:09:
fa:7e:4a:99:4b:8d:71:7e:9c:b1:27:b0:4d:65:5d:94:6f:98:
58:fd:10:09:c0:2e:47:df:49:87:84:e0:4e:45:e8:1a:1a:89:
78:01:7e:94:11:e3:1a:a3:7b:24:8a:15:3a:d9:18:60:da:fd:
aa:1c:66:22:83:9d:75:a2:bd:b3:83:40:4b:c9:7a:86:e7:fc:
be:d0:1c:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE/D8GnU5r+MDsakVKvs4/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTBmNjM1YzJmNjllNjQ1M2FlOTFkMmQxODAwZmVkZTQz
MzczNTEwHhcNMjYxMDE1MTAxNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDlkNTkyZTkxOTE4MjUxMDhhNmEyMjQ4NjIwZWFkODA5ZWIyZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1BqPNEVpyVoqN0dQeTrrWwaUXKM
FElXU2+GyQlBjYMZo8BrCk1zOUYJEyA/cAfvg9ZqSeFsukN91Byl21VTk2MU1DXu
pdHF0B1MCRLNoCCtbopeMKdna7lZCjV8nnvg21D/mIN/eG260gMaIJkCwzBRa5UR
+kN4fMGfhj6KiDI3sfFr1LR7GNua5O8bupBUoe8gu/u8EoYgD6jY5tlH2aDcrrEC
r/v6OQAIoYgIzgL+xnQkencyTu96JADnl1y1SBPIwgxp1ypHY8agzAbxRA/hYvnq
WlFaygw47Ls9YItHtlfztHk0vdrKRYBf7807yD4PpAC61PsR+PbgEWuuZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOSdWS6RkYJRCKaiJIYg6tgJ6y0fMB8GA1UdIwQY
MBaAFKKQ9jXC9p5kU66R0tGAD+3kM3NRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BEMk5jTDJubVJUcnBIUzBZQVA3ZVF6YzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9mZjAwMzEtYTdmNy00NGRhLTliNWEt
NjFjMzczNzJiZGI2LzEvNUoxWkxwR1JnbEVJcHFJa2hpRHEyQW5yTFI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9mZjAwMzEtYTdmNy00NGRhLTliNWEtNjFjMzczNzJiZGI2
LzEvb3BEMk5jTDJubVJUcnBIUzBZQVA3ZVF6YzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dfMA0G
CSqGSIb3DQEBCwUAA4IBAQAEv4mQNeFU0W6DqllpJszAHvaPjVKbOOKUs79jb9vw
jC3TtUuUCMMpn5JY/EWkwLaRrtBl5UtRdaZCOMtGx6POIi5F7gz4mHTbkjK+BLne
0Wq4V6no7I+gt9UKDs/J3BMKNX/Fxn251nUtmTJblHaivOF+pZV+AlkY6uXZ7K1k
kH9noB8HbSA0+SHBE6m6XMeADR9/Tqy9XeVR7RJun6jF3SgCAcAPrGBrYRFptCGN
yDPwZgn6fkqZS41xfpyxJ7BNZV2Ub5hY/RAJwC5H30mHhOBORegaGol4AX6UEeMa
o3skihU62Rhg2v2qHGYig511or2zg0BLyXqG5/y+0Bwg
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:29 2026 by rpki-client