Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/79yIqS0DOHNFOX4FWu-Lz4mxc2E.roa
File: 79yIqS0DOHNFOX4FWu-Lz4mxc2E.roa (raw, json)
Hash identifier: WEhTWZUWf+Q+Dos240BmsIKSnVLKkD+6noFFfrajxkI=
Subject key identifier: EF:DC:88:A9:2D:03:38:73:45:39:7E:05:5A:EF:8B:CF:89:B1:73:61
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A12A29F58CE597869A7BB782DAFCA4E8A5
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/79yIqS0DOHNFOX4FWu-Lz4mxc2E.roa
Signing time: Sun 11 Oct 2026 08:52:35 +0000
ROA not before: Sun 11 Oct 2026 08:52:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.73.0/24 maxlen: 24
84.252.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:29:f5:8c:e5:97:86:9a:7b:b7:82:da:fc:a4:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 11 08:52:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efdc88a92d03387345397e055aef8bcf89b17361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:bf:93:87:f2:29:81:e2:9d:90:40:84:9a:
6d:d8:21:97:b8:b9:52:1f:f8:12:22:f8:85:38:07:
67:c3:41:9b:7d:93:7d:37:ea:44:b6:bb:80:9d:e5:
52:39:17:eb:89:9a:bd:0b:ef:c5:25:fd:63:44:a9:
7c:27:b5:ea:ff:50:67:83:08:1a:7d:86:58:1d:6a:
7d:27:ac:92:4b:df:73:08:69:e7:03:ba:a4:22:96:
ca:10:c3:15:9e:d3:97:cd:e5:e6:67:e5:45:1b:fe:
63:50:77:03:d2:8b:80:c6:7b:8b:02:8d:dd:f1:dd:
af:6c:27:87:ad:aa:8c:7c:86:fb:ee:99:27:c1:29:
40:04:fa:1d:14:e5:c2:b1:60:62:ed:8b:c5:5f:3b:
95:a8:56:02:5e:9d:d8:2a:9b:61:96:ff:43:41:f3:
d2:b8:40:d1:73:75:d5:6e:c4:b8:74:f9:2d:74:71:
cd:0d:b1:8d:99:5e:3c:23:61:3d:d5:50:58:73:e5:
c7:f8:ff:0d:6e:08:ea:fd:fb:ee:f6:97:f0:92:c7:
b4:64:ba:85:60:dd:7c:f2:ef:a3:74:a4:2d:36:d4:
59:1b:29:31:3f:6e:34:99:61:a3:a7:e8:59:11:c4:
65:86:d6:24:9f:c6:ad:75:38:20:99:6d:96:36:9b:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:88:A9:2D:03:38:73:45:39:7E:05:5A:EF:8B:CF:89:B1:73:61
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/79yIqS0DOHNFOX4FWu-Lz4mxc2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/23
84.252.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:09:46:7b:b9:40:7c:16:2f:e9:4e:0c:66:8e:ca:d2:f5:2e:
43:8f:06:43:03:fb:51:2f:04:a5:1a:bd:c3:75:fe:80:c7:4a:
0a:ea:23:c5:9c:1a:ac:57:bc:db:2c:39:63:5c:d8:be:a1:f2:
c5:bd:6c:77:70:35:1d:6b:9f:77:33:90:f0:3c:7c:23:fc:87:
d4:ef:a5:93:7a:85:ee:ce:55:bc:e5:16:49:76:99:cd:5d:78:
66:de:df:1e:56:33:72:53:85:56:9d:10:0d:bd:b7:6b:c6:30:
d2:bb:75:7c:57:e1:dc:ca:ee:1e:ac:2e:63:92:0d:63:f0:be:
62:ee:9a:57:8c:9a:97:2b:6d:e5:bc:ec:92:8b:19:c6:39:79:
8c:c2:de:e4:9f:b3:90:9f:fc:52:50:f7:0c:82:69:1a:ea:c2:
14:c8:5f:58:9f:45:b6:69:f7:20:15:ae:88:64:eb:7c:47:cd:
d4:af:fa:4a:81:15:fb:0c:b5:16:3e:30:9d:e2:31:5d:e6:7a:
23:1a:35:6e:3c:14:3d:96:c0:4d:83:f4:02:17:29:cf:f6:b8:
b7:c7:36:96:43:b1:a8:81:1a:09:aa:9c:73:31:2c:98:c5:9b:
cb:98:25:02:e4:39:a8:4b:e0:d0:07:c0:a3:81:7f:de:07:b3:
34:92:d7:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEqKfWM5ZeGmnu3gtr8pOilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYxMDExMDg1MjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmRjODhhOTJkMDMzODczNDUzOTdlMDU1YWVmOGJjZjg5YjE3MzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WG/k4fyKYHinZBAhJpt2CGXuLlS
H/gSIviFOAdnw0GbfZN9N+pEtruAneVSORfriZq9C+/FJf1jRKl8J7Xq/1Bngwga
fYZYHWp9J6ySS99zCGnnA7qkIpbKEMMVntOXzeXmZ+VFG/5jUHcD0ouAxnuLAo3d
8d2vbCeHraqMfIb77pknwSlABPodFOXCsWBi7YvFXzuVqFYCXp3YKpthlv9DQfPS
uEDRc3XVbsS4dPktdHHNDbGNmV48I2E91VBYc+XH+P8Nbgjq/fvu9pfwkse0ZLqF
YN188u+jdKQtNtRZGykxP240mWGjp+hZEcRlhtYkn8atdTggmW2WNpt15QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO/ciKktAzhzRTl+BVrvi8+JsXNhMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvNzl5SXFTMERPSE5GT1g0Rld1LUx6NG14YzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBWhIAwQA
VPxCMA0GCSqGSIb3DQEBCwUAA4IBAQCcCUZ7uUB8Fi/pTgxmjsrS9S5DjwZDA/tR
LwSlGr3Ddf6Ax0oK6iPFnBqsV7zbLDljXNi+ofLFvWx3cDUda593M5DwPHwj/IfU
76WTeoXuzlW85RZJdpnNXXhm3t8eVjNyU4VWnRANvbdrxjDSu3V8V+Hcyu4erC5j
kg1j8L5i7ppXjJqXK23lvOySixnGOXmMwt7kn7OQn/xSUPcMgmka6sIUyF9Yn0W2
afcgFa6IZOt8R83Ur/pKgRX7DLUWPjCd4jFd5nojGjVuPBQ9lsBNg/QCFynP9ri3
xzaWQ7GogRoJqpxzMSyYxZvLmCUC5DmoS+DQB8CjgX/eB7M0ktfi
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:10 2026 by rpki-client