Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/V3G5bgdeTXPayOtMU3QaWxt_WPQ.roa
File: V3G5bgdeTXPayOtMU3QaWxt_WPQ.roa (raw, json)
Hash identifier: 5YjnBAdBGZOQG6iBr0yCE/FD+6SzFSO5c3lEy00a87o=
Subject key identifier: 57:71:B9:6E:07:5E:4D:73:DA:C8:EB:4C:53:74:1A:5B:1B:7F:58:F4
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 019FD25158BBF813870FCD92337C0EB097D3
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/V3G5bgdeTXPayOtMU3QaWxt_WPQ.roa
Signing time: Wed 05 Aug 2026 14:26:14 +0000
ROA not before: Wed 05 Aug 2026 14:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29033
IP address blocks: 89.222.0.0/20 maxlen: 24
89.222.32.0/20 maxlen: 24
89.222.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:51:58:bb:f8:13:87:0f:cd:92:33:7c:0e:b0:97:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Aug 5 14:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5771b96e075e4d73dac8eb4c53741a5b1b7f58f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c8:cf:7f:d2:07:72:51:e1:83:1d:f4:92:5f:
e3:7d:37:c0:b5:27:c4:82:50:40:b8:aa:59:71:8a:
2d:4b:c4:ea:0b:39:c0:97:7a:cf:88:e1:24:4e:f1:
6f:09:e2:c5:4a:34:7f:77:43:6b:20:17:68:7f:98:
1b:36:77:51:e6:10:96:ed:91:ba:49:5d:3d:d3:97:
f0:6e:6a:c9:7a:97:f7:84:5f:ce:7d:50:9b:5f:a6:
46:3b:f3:0a:cc:3c:2b:f4:90:27:97:d9:d7:95:c6:
14:b9:1e:de:39:46:cc:4e:0c:91:68:19:22:08:2c:
16:72:01:09:b6:85:5c:78:66:98:93:23:3b:93:5c:
8d:78:1c:21:f2:e6:ef:6c:f4:1b:fe:ed:d6:27:f5:
a2:1d:11:e6:8a:87:18:6a:99:c5:4a:c6:19:c1:78:
f2:51:6a:91:8b:46:81:c4:cc:df:e1:43:90:6e:4a:
e2:7c:bf:24:72:75:df:a6:c6:26:f0:53:2e:3a:99:
2e:4a:e6:cd:7e:39:4c:36:30:42:85:c3:3c:1c:5f:
58:6b:91:2c:a9:f0:d1:70:41:43:59:64:65:f6:dc:
59:69:a6:fb:06:aa:07:a8:10:b5:ec:07:27:e2:d6:
cc:f5:74:13:66:59:ed:13:08:8a:1c:c8:28:95:97:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:B9:6E:07:5E:4D:73:DA:C8:EB:4C:53:74:1A:5B:1B:7F:58:F4
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/V3G5bgdeTXPayOtMU3QaWxt_WPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/20
89.222.32.0/20
Signature Algorithm: sha256WithRSAEncryption
45:0c:c0:35:dd:4e:d6:d8:10:2e:5e:39:44:2e:8d:b6:8e:97:
3c:f6:c4:9c:d6:47:18:f6:06:42:56:b5:55:14:ce:b3:04:90:
50:ac:5a:ff:37:7e:ba:3b:fe:40:a6:39:32:be:3d:6f:2d:5d:
73:07:b3:bc:ed:14:1e:71:99:f9:d1:ec:91:02:a9:6d:60:69:
81:39:2f:97:a1:c9:58:67:79:49:90:db:2d:4b:56:b7:e4:2b:
e2:e3:c7:c8:4b:7d:a4:6a:db:fd:24:30:fd:62:aa:b1:7a:0b:
a7:0e:c9:0f:f7:1f:ec:49:3e:8b:a0:12:45:e8:eb:7a:34:b7:
60:fa:53:16:7a:d0:40:d2:a1:d6:67:37:04:c8:69:02:40:29:
11:4e:fe:f0:20:83:ce:a4:78:54:ce:36:bd:c8:04:d5:6e:df:
a2:26:f0:8a:fd:6d:40:c4:da:8e:c1:e4:f9:94:28:7e:17:46:
cd:53:06:85:8c:65:8f:09:62:f0:62:a9:15:e1:e5:41:a9:b6:
a4:bd:86:8e:cf:53:30:a9:1e:38:7b:c4:5d:51:9c:dc:32:53:
fd:bf:a4:a2:52:c3:50:e6:6f:5b:ab:85:d8:3c:67:f5:a3:92:
f7:e6:c5:7a:34:b8:4e:ee:12:a0:28:62:12:95:94:a1:11:31:
9a:53:95:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/SUVi7+BOHD82SM3wOsJfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTMyOTk5YzQ3ZWIzMWQ1ZmJmMTZlY2MzODcyZWFlZmQ0
M2JhZDcwHhcNMjYwODA1MTQyNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzcxYjk2ZTA3NWU0ZDczZGFjOGViNGM1Mzc0MWE1YjFiN2Y1OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/MjPf9IHclHhgx30kl/jfTfAtSfE
glBAuKpZcYotS8TqCznAl3rPiOEkTvFvCeLFSjR/d0NrIBdof5gbNndR5hCW7ZG6
SV0905fwbmrJepf3hF/OfVCbX6ZGO/MKzDwr9JAnl9nXlcYUuR7eOUbMTgyRaBki
CCwWcgEJtoVceGaYkyM7k1yNeBwh8ubvbPQb/u3WJ/WiHRHmiocYapnFSsYZwXjy
UWqRi0aBxMzf4UOQbkrifL8kcnXfpsYm8FMuOpkuSubNfjlMNjBChcM8HF9Ya5Es
qfDRcEFDWWRl9txZaab7BqoHqBC17Acn4tbM9XQTZlntEwiKHMgolZcReQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFdxuW4HXk1z2sjrTFN0Glsbf1j0MB8GA1UdIwQY
MBaAFAejKZnEfrMdX78W7MOHLq79Q7rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzIt
MmZiMjk1OGFiOGJiLzEvVjNHNWJnZGVUWFBheU90TVUzUWFXeHRfV1BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzItMmZiMjk1OGFiOGJi
LzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWd4AAwQE
Wd4gMA0GCSqGSIb3DQEBCwUAA4IBAQBFDMA13U7W2BAuXjlELo22jpc89sSc1kcY
9gZCVrVVFM6zBJBQrFr/N366O/5Apjkyvj1vLV1zB7O87RQecZn50eyRAqltYGmB
OS+XoclYZ3lJkNstS1a35Cvi48fIS32katv9JDD9YqqxegunDskP9x/sST6LoBJF
6Ot6NLdg+lMWetBA0qHWZzcEyGkCQCkRTv7wIIPOpHhUzja9yATVbt+iJvCK/W1A
xNqOweT5lCh+F0bNUwaFjGWPCWLwYqkV4eVBqbakvYaOz1MwqR44e8RdUZzcMlP9
v6SiUsNQ5m9bq4XYPGf1o5L35sV6NLhO7hKgKGISlZShETGaU5UL
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:06 2026 by rpki-client