Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/A5lQjMuyEwnxIDxaUmDnFfxaoks.roa
File: A5lQjMuyEwnxIDxaUmDnFfxaoks.roa (raw, json)
Hash identifier: P6Mc4NENcql9pqKO6/1f2kVi6ScGBPjag1XyyEN7xRE=
Subject key identifier: 03:99:50:8C:CB:B2:13:09:F1:20:3C:5A:52:60:E7:15:FC:5A:A2:4B
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019E373F5051757E8F99132E8D7FF1C99D1F
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/A5lQjMuyEwnxIDxaUmDnFfxaoks.roa
Signing time: Sun 17 May 2026 18:42:36 +0000
ROA not before: Sun 17 May 2026 18:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44955
IP address blocks: 91.208.114.0/24 maxlen: 24
91.224.109.0/24 maxlen: 32
91.241.78.0/24 maxlen: 24
109.70.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:3f:50:51:75:7e:8f:99:13:2e:8d:7f:f1:c9:9d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: May 17 18:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0399508ccbb21309f1203c5a5260e715fc5aa24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:e3:31:5c:bb:74:2d:20:70:23:da:6f:77:
eb:7f:90:1e:0f:e5:8e:9e:af:38:e5:4e:08:f0:b0:
27:52:54:4a:46:27:8b:49:92:6c:7b:e8:85:02:72:
b5:cc:42:d7:df:44:fb:82:0e:2c:fa:1f:6d:b7:94:
27:96:38:95:6c:3a:b4:65:5f:03:f3:8b:6a:41:ac:
a9:40:45:6b:a6:3b:d9:7a:3b:72:99:a1:ef:c5:57:
cc:b5:ea:fb:6f:86:6f:ec:5d:5d:08:98:b0:f9:70:
4b:7b:07:6b:f8:ea:29:bf:12:1c:d1:ac:e1:ae:3d:
d9:48:30:c2:21:11:ae:43:d5:2a:cc:82:03:f9:d1:
69:ab:05:fa:60:db:b8:11:bf:9a:41:bf:e2:bd:53:
0d:d7:8a:69:a5:fb:aa:aa:ae:91:38:b2:4a:42:ff:
41:ae:e2:04:c5:fd:8b:f0:1c:15:b5:07:65:dc:a5:
1d:32:00:90:1b:57:d7:8b:68:47:37:0b:09:e7:5c:
aa:87:57:e4:3c:90:08:a5:89:3e:3c:64:91:ce:95:
a2:02:8a:8a:dd:6b:6f:8a:8e:7c:7b:f7:d2:3d:74:
31:d0:7a:76:23:fd:e1:36:b7:db:1c:fe:c5:1d:b8:
98:c0:48:63:33:26:d2:f2:70:07:e2:ca:bd:db:c8:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:50:8C:CB:B2:13:09:F1:20:3C:5A:52:60:E7:15:FC:5A:A2:4B
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/A5lQjMuyEwnxIDxaUmDnFfxaoks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
91.224.109.0/24
91.241.78.0/24
109.70.72.0/24
Signature Algorithm: sha256WithRSAEncryption
25:92:07:37:3b:db:57:4c:f3:2e:ec:22:0b:39:60:dc:9d:27:
99:3d:3b:df:3b:9f:8a:be:48:d5:61:4d:28:ad:88:36:b1:0e:
55:bc:87:78:ab:11:3c:5c:ba:06:d5:4e:f7:4b:f4:90:be:1f:
d0:38:5e:97:af:09:d1:de:e7:27:8d:eb:39:45:6e:c8:6b:b3:
c7:39:82:1a:64:d1:1c:4b:19:f1:38:05:ea:c2:d1:55:dd:47:
a4:2b:e7:aa:f1:a9:49:b5:9c:f3:ab:63:a9:3c:ba:2c:f9:af:
04:d6:0b:a9:b4:34:6e:db:42:f5:9d:8b:76:a6:7b:d3:95:83:
3d:6f:70:9a:96:29:3e:40:47:e9:30:ba:3d:53:7e:38:43:23:
b2:b1:78:44:00:aa:24:ca:3d:35:8c:20:1a:56:5b:23:c5:c6:
d1:77:d8:19:aa:b5:bd:48:af:eb:c3:8d:f9:20:0e:df:ca:aa:
47:a1:e6:b4:28:91:d5:42:63:cd:22:90:4b:13:60:b1:a7:26:
45:82:1a:72:99:c6:08:65:c0:4d:6b:b6:27:16:d1:06:b3:2d:
1c:11:7a:ea:4c:bf:41:ed:06:77:c3:3c:c4:b0:3e:1c:29:b6:
b6:06:ee:77:11:78:75:d7:54:89:52:31:3b:1b:8a:59:46:32:
05:05:3f:85
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ43P1BRdX6PmRMujX/xyZ0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwNTE3MTg0MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzk5NTA4Y2NiYjIxMzA5ZjEyMDNjNWE1MjYwZTcxNWZjNWFhMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZDjMVy7dC0gcCPab3frf5AeD+WO
nq845U4I8LAnUlRKRieLSZJse+iFAnK1zELX30T7gg4s+h9tt5QnljiVbDq0ZV8D
84tqQaypQEVrpjvZejtymaHvxVfMter7b4Zv7F1dCJiw+XBLewdr+OopvxIc0azh
rj3ZSDDCIRGuQ9UqzIID+dFpqwX6YNu4Eb+aQb/ivVMN14pppfuqqq6ROLJKQv9B
ruIExf2L8BwVtQdl3KUdMgCQG1fXi2hHNwsJ51yqh1fkPJAIpYk+PGSRzpWiAoqK
3Wtvio58e/fSPXQx0Hp2I/3hNrfbHP7FHbiYwEhjMybS8nAH4sq928h5SwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAOZUIzLshMJ8SA8WlJg5xX8WqJLMB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvQTVsUWpNdXlFd254SUR4YVVtRG5GZnhhb2tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW9ByAwQA
W+BtAwQAW/FOAwQAbUZIMA0GCSqGSIb3DQEBCwUAA4IBAQAlkgc3O9tXTPMu7CIL
OWDcnSeZPTvfO5+KvkjVYU0orYg2sQ5VvId4qxE8XLoG1U73S/SQvh/QOF6XrwnR
3ucnjes5RW7Ia7PHOYIaZNEcSxnxOAXqwtFV3UekK+eq8alJtZzzq2OpPLos+a8E
1guptDRu20L1nYt2pnvTlYM9b3Calik+QEfpMLo9U344QyOysXhEAKokyj01jCAa
VlsjxcbRd9gZqrW9SK/rw435IA7fyqpHoea0KJHVQmPNIpBLE2CxpyZFghpymcYI
ZcBNa7YnFtEGsy0cEXrqTL9B7QZ3wzzEsD4cKba2Bu53EXh111SJUjE7G4pZRjIF
BT+F
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:39 2026 by rpki-client