Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ra_UpLxJPwbD5CLI7ntkAh5G4V4.roa
File: ra_UpLxJPwbD5CLI7ntkAh5G4V4.roa (raw, json)
Hash identifier: hhrFlCS3EgjeLEKd+EChpymxXPVEwj8Rt6qqZoHblN4=
Subject key identifier: AD:AF:D4:A4:BC:49:3F:06:C3:E4:22:C8:EE:7B:64:02:1E:46:E1:5E
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0F1A6968C110719BBD71344AA1C1910B5
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ra_UpLxJPwbD5CLI7ntkAh5G4V4.roa
Signing time: Wed 30 Sep 2026 09:30:21 +0000
ROA not before: Wed 30 Sep 2026 09:30:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.172.33.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:a6:96:8c:11:07:19:bb:d7:13:44:aa:1c:19:10:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 30 09:30:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adafd4a4bc493f06c3e422c8ee7b64021e46e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:62:eb:e8:cb:ad:c4:99:90:dd:39:45:27:
15:55:85:d3:9b:d5:04:2c:ca:5d:b6:50:21:27:81:
ef:36:e5:e2:7c:2b:b5:89:bb:3c:aa:cb:f2:3a:d5:
ad:ca:a0:37:94:36:56:30:78:ae:a4:a0:57:2d:01:
dd:5f:76:61:31:0c:fc:ee:d0:41:c2:e2:ff:b7:27:
aa:b9:d5:57:3b:1d:b2:d8:84:dd:45:7e:cf:69:4b:
4e:b0:e1:8c:1a:20:51:e3:9d:15:45:55:de:8e:de:
1b:1e:ac:6f:b0:6d:3c:31:4f:90:46:df:68:a8:d0:
01:5e:2d:66:6a:25:bd:45:56:64:d0:25:88:d4:5e:
56:12:48:ea:80:7f:5e:e0:9d:2d:35:c3:5f:27:b6:
59:39:6e:7d:2a:28:41:81:0d:fc:3d:9c:b0:c2:c0:
fc:a2:18:f5:71:f5:4c:aa:c2:1c:88:65:27:bf:11:
92:f4:07:c8:f3:97:ae:80:6a:eb:ce:36:19:06:7e:
60:f6:75:01:a6:a6:86:e7:87:5f:ee:6f:9f:b3:b9:
f8:49:7c:80:b6:2b:44:29:49:7d:3f:de:c5:d3:db:
b1:61:c5:6e:ee:ff:55:5c:3b:de:db:ff:ca:5b:db:
ee:99:79:cf:33:74:8d:45:bf:71:f2:38:dd:cb:2d:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:D4:A4:BC:49:3F:06:C3:E4:22:C8:EE:7B:64:02:1E:46:E1:5E
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ra_UpLxJPwbD5CLI7ntkAh5G4V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0/24
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ae:6f:e9:a8:a7:59:b0:a0:82:cf:fe:7a:6b:b4:89:c8:14:
96:64:22:d8:34:f5:5c:9b:f7:a1:84:e2:ac:33:74:d7:4a:62:
5d:ae:75:71:19:6d:c9:ce:55:d0:fa:98:3d:6c:2a:5a:8d:cc:
6a:8b:10:19:91:43:dd:99:3b:a5:da:41:f7:16:c8:ea:8e:0e:
03:4b:50:b5:38:be:49:c6:d2:f1:1e:11:f9:15:d9:06:74:aa:
2f:fc:ac:8c:e2:c3:65:f5:c2:28:08:6d:cb:ed:7e:1e:96:3a:
f1:ae:a5:19:40:a5:76:2f:99:66:ce:60:47:ee:c1:04:bb:6a:
79:05:44:02:a8:c6:de:c4:b8:b1:81:8a:70:67:7c:b6:2a:e9:
17:a0:80:36:7e:3d:fa:9d:35:3a:a7:e5:04:20:39:99:de:50:
77:da:0f:96:0f:ea:e9:b0:7e:df:3d:39:53:ac:db:41:a4:2b:
64:73:1c:d7:a5:a2:19:a8:ae:64:2f:ed:09:f9:9a:84:77:63:
f0:af:d0:94:f0:97:76:37:ea:c3:89:64:46:b3:2e:74:6f:8a:
64:87:f8:60:31:5a:d1:7f:ef:e1:55:10:bb:24:6c:87:e8:5f:
b2:31:4b:36:ab:f4:7f:dd:23:49:f9:5e:bc:e5:37:0e:25:ff:
81:6f:25:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDxppaMEQcZu9cTRKocGRC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjYwOTMwMDkzMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGFmZDRhNGJjNDkzZjA2YzNlNDIyYzhlZTdiNjQwMjFlNDZlMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXVi6+jLrcSZkN05RScVVYXTm9UE
LMpdtlAhJ4HvNuXifCu1ibs8qsvyOtWtyqA3lDZWMHiupKBXLQHdX3ZhMQz87tBB
wuL/tyequdVXOx2y2ITdRX7PaUtOsOGMGiBR450VRVXejt4bHqxvsG08MU+QRt9o
qNABXi1maiW9RVZk0CWI1F5WEkjqgH9e4J0tNcNfJ7ZZOW59KihBgQ38PZywwsD8
ohj1cfVMqsIciGUnvxGS9AfI85eugGrrzjYZBn5g9nUBpqaG54df7m+fs7n4SXyA
titEKUl9P97F09uxYcVu7v9VXDve2//KW9vumXnPM3SNRb9x8jjdyy3B/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK2v1KS8ST8Gw+QiyO57ZAIeRuFeMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvcmFfVXBMeEpQd2JENUNMSTdudGtBaDVHNFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABawhAwQA
WRdbMA0GCSqGSIb3DQEBCwUAA4IBAQAtrm/pqKdZsKCCz/56a7SJyBSWZCLYNPVc
m/ehhOKsM3TXSmJdrnVxGW3JzlXQ+pg9bCpajcxqixAZkUPdmTul2kH3Fsjqjg4D
S1C1OL5JxtLxHhH5FdkGdKov/KyM4sNl9cIoCG3L7X4eljrxrqUZQKV2L5lmzmBH
7sEEu2p5BUQCqMbexLixgYpwZ3y2KukXoIA2fj36nTU6p+UEIDmZ3lB32g+WD+rp
sH7fPTlTrNtBpCtkcxzXpaIZqK5kL+0J+ZqEd2Pwr9CU8Jd2N+rDiWRGsy50b4pk
h/hgMVrRf+/hVRC7JGyH6F+yMUs2q/R/3SNJ+V685TcOJf+BbyUM
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:14 2026 by rpki-client