Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5_m9P5tSXn9uJOe0735IzNoTTAE.roa
File: 5_m9P5tSXn9uJOe0735IzNoTTAE.roa (raw, json)
Hash identifier: G9eZUWev/10z/S5DPuAZUwbxpU+CVtrJqiXKuNwbulQ=
Subject key identifier: E7:F9:BD:3F:9B:52:5E:7F:6E:24:E7:B4:EF:7E:48:CC:DA:13:4C:01
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047BDC188BE909CE3B2028012DDE19339
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5_m9P5tSXn9uJOe0735IzNoTTAE.roa
Signing time: Fri 28 Aug 2026 09:40:13 +0000
ROA not before: Fri 28 Aug 2026 09:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 92.71.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:bd:c1:88:be:90:9c:e3:b2:02:80:12:dd:e1:93:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7f9bd3f9b525e7f6e24e7b4ef7e48ccda134c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:99:f7:4b:26:86:ab:6f:0e:70:eb:3b:e9:
43:da:0e:67:28:e4:c1:e1:6b:42:2e:a4:10:ce:01:
e9:57:05:f9:d1:d4:28:d7:08:36:54:58:6f:53:cc:
8c:51:70:3c:c0:0d:9e:8d:5d:58:91:f0:1e:b5:1a:
8c:73:44:c9:1e:45:fa:13:e6:17:b6:de:c3:7c:68:
01:41:04:17:52:82:92:87:be:05:02:46:ad:ee:78:
72:3b:61:42:46:53:dc:6a:82:89:bb:3b:d4:3d:a3:
e5:b1:4b:e8:fc:51:9a:38:e0:0e:e2:81:57:b4:ce:
78:38:d6:30:78:3c:66:fc:5b:73:77:73:1b:01:16:
2e:6e:8a:5c:9e:0f:e5:50:ed:94:91:84:4c:be:44:
5d:20:7c:f4:1a:d2:a6:78:81:79:93:82:a4:9d:e8:
92:3a:cf:58:a3:f0:cb:e7:16:1a:88:c9:b7:b3:2b:
0a:cc:57:70:40:6e:ae:46:77:62:86:60:57:59:06:
ac:4a:74:7b:dd:4f:65:76:81:7c:9b:0c:93:c8:39:
8a:3c:32:33:8f:52:8d:d0:12:04:fa:10:fa:78:e5:
62:0f:8b:bc:dc:fb:91:4d:e8:cc:7c:8c:3e:3e:08:
5a:c5:36:54:fb:2f:22:d2:a9:2a:bf:db:0f:86:4a:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F9:BD:3F:9B:52:5E:7F:6E:24:E7:B4:EF:7E:48:CC:DA:13:4C:01
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5_m9P5tSXn9uJOe0735IzNoTTAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:dd:72:30:1c:1e:da:50:28:0e:ee:f6:72:87:c7:61:be:0a:
87:14:a9:71:0d:2c:dd:af:4a:91:f4:71:5f:d2:8e:f2:ec:dd:
bf:a5:c8:69:9f:ba:a9:f7:42:ed:ac:fd:e9:fc:75:02:98:84:
c0:d1:66:56:94:06:19:7b:7d:10:bb:a6:96:db:43:68:de:b0:
b7:8e:5f:d3:b8:11:dc:86:cf:07:d4:5b:f6:41:fd:d4:6e:b0:
46:9e:fc:e6:c2:53:a0:57:bc:e6:6d:7a:a2:30:1d:29:cd:46:
cf:bf:54:62:9b:f7:07:38:ff:39:d0:06:13:25:05:e2:c8:56:
15:f7:d4:cf:b2:1a:97:45:62:8b:34:76:70:b0:0a:cd:dd:1e:
02:fd:7d:44:b8:3b:fd:65:d1:91:4d:c5:7f:76:fa:fd:58:06:
f8:9b:01:56:26:b0:8c:16:f5:d1:c5:d0:e5:c0:ac:b3:9a:22:
10:89:f2:fc:19:d8:78:86:1a:1e:9a:ef:f0:e2:92:6b:f4:0a:
93:ef:14:8e:b7:60:b9:bf:23:48:f0:97:a7:34:b6:05:cc:30:
aa:d2:16:90:78:ed:02:04:f3:ac:ed:1b:23:ce:a3:df:ee:62:
08:cd:58:c2:b2:aa:e9:d4:20:c8:14:9c:d6:08:2a:ec:78:71:
62:d1:6b:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHvcGIvpCc47ICgBLd4ZM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwODI4MDk0MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Y5YmQzZjliNTI1ZTdmNmUyNGU3YjRlZjdlNDhjY2RhMTM0YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4yZ90smhqtvDnDrO+lD2g5nKOTB
4WtCLqQQzgHpVwX50dQo1wg2VFhvU8yMUXA8wA2ejV1YkfAetRqMc0TJHkX6E+YX
tt7DfGgBQQQXUoKSh74FAkat7nhyO2FCRlPcaoKJuzvUPaPlsUvo/FGaOOAO4oFX
tM54ONYweDxm/Ftzd3MbARYubopcng/lUO2UkYRMvkRdIHz0GtKmeIF5k4KkneiS
Os9Yo/DL5xYaiMm3sysKzFdwQG6uRndihmBXWQasSnR73U9ldoF8mwyTyDmKPDIz
j1KN0BIE+hD6eOViD4u83PuRTejMfIw+PghaxTZU+y8i0qkqv9sPhkqBTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOf5vT+bUl5/biTntO9+SMzaE0wBMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvNV9tOVA1dFNYbjl1Sk9lMDczNUl6Tm9UVEFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXEegMA0G
CSqGSIb3DQEBCwUAA4IBAQCh3XIwHB7aUCgO7vZyh8dhvgqHFKlxDSzdr0qR9HFf
0o7y7N2/pchpn7qp90LtrP3p/HUCmITA0WZWlAYZe30Qu6aW20No3rC3jl/TuBHc
hs8H1Fv2Qf3UbrBGnvzmwlOgV7zmbXqiMB0pzUbPv1Rim/cHOP850AYTJQXiyFYV
99TPshqXRWKLNHZwsArN3R4C/X1EuDv9ZdGRTcV/dvr9WAb4mwFWJrCMFvXRxdDl
wKyzmiIQifL8Gdh4hhoemu/w4pJr9AqT7xSOt2C5vyNI8JenNLYFzDCq0haQeO0C
BPOs7RsjzqPf7mIIzVjCsqrp1CDIFJzWCCrseHFi0Ws8
-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:47 2026 by rpki-client