Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/3A_5REI1WoaAIOXX3NcVfMmONwE.roa
File: 3A_5REI1WoaAIOXX3NcVfMmONwE.roa (raw, json)
Hash identifier: DcSlI4Zg58MWz5+nMQ75Gey9VrmFr8SDTp+sLJwmSBQ=
Subject key identifier: DC:0F:F9:44:42:35:5A:86:80:20:E5:D7:DC:D7:15:7C:C9:8E:37:01
Certificate issuer: /CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Certificate serial: 01A134459E151FB8E3D0518932F78C093870
Authority key identifier: A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/3A_5REI1WoaAIOXX3NcVfMmONwE.roa
Signing time: Tue 13 Oct 2026 07:58:59 +0000
ROA not before: Tue 13 Oct 2026 07:58:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 91.211.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:45:9e:15:1f:b8:e3:d0:51:89:32:f7:8c:09:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Validity
Not Before: Oct 13 07:58:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc0ff94442355a868020e5d7dcd7157cc98e3701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:2a:81:f5:1e:ad:66:d9:6e:82:ca:b7:a0:
05:15:43:e9:68:d6:26:2a:ee:70:32:6d:c2:b4:d2:
42:2f:b4:7d:7f:52:99:8f:2e:1f:5f:e3:9a:cb:2c:
40:17:10:33:13:89:5e:41:46:39:54:e4:25:df:94:
eb:2d:16:98:68:b5:71:29:0b:9a:54:b4:25:a2:25:
a5:8e:bf:8d:e7:8d:85:33:87:fb:0f:c0:57:68:df:
c1:01:d7:ee:f9:2a:75:44:66:0f:da:9c:33:f2:8d:
18:ce:86:c9:4b:2f:c0:50:90:95:0d:a6:f2:91:75:
71:a6:ba:b0:00:99:ab:99:7e:c8:13:c1:de:35:02:
0c:95:6e:3f:d3:29:64:f1:f8:4f:e7:2f:4d:12:46:
78:f9:1f:fb:fe:31:0c:51:d2:26:1b:1d:00:74:c8:
b9:7a:cd:25:9d:c2:1a:4e:72:3e:df:34:e2:7d:ad:
d4:f5:c0:44:7d:92:4f:45:a4:20:6b:c6:7c:c8:ae:
39:fe:b9:f9:69:fd:bb:67:ed:ed:70:0c:44:f0:f0:
a2:4d:cb:14:96:06:96:99:67:81:c1:41:8f:a2:a3:
6e:9e:59:e9:b1:71:29:13:df:c7:9f:d7:f3:3c:a9:
2b:de:3a:04:1f:07:fb:da:28:e4:a5:3b:b5:e7:46:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:F9:44:42:35:5A:86:80:20:E5:D7:DC:D7:15:7C:C9:8E:37:01
X509v3 Authority Key Identifier:
keyid:A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/3A_5REI1WoaAIOXX3NcVfMmONwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.32.0/22
Signature Algorithm: sha256WithRSAEncryption
43:f5:8d:ec:f9:7f:40:94:eb:82:2b:38:65:b5:ef:3e:db:a0:
69:34:89:5d:6f:04:a5:a9:3f:e8:6c:e7:f3:80:bb:a5:91:79:
73:de:ec:a7:71:87:3e:2d:52:68:2c:d8:d7:0c:11:78:85:d8:
a9:9f:1b:41:0a:ad:b2:c1:0c:4a:7f:4c:e6:61:09:d7:4f:bf:
48:bd:76:db:61:53:3a:b4:5b:d3:29:0b:8e:6b:95:16:77:65:
0c:40:07:87:a4:5b:f0:a8:2a:74:b4:4e:07:c3:50:12:e6:b0:
d2:9f:a7:5e:34:45:28:ea:c7:44:a4:d2:db:65:af:44:30:eb:
20:94:e4:c6:b9:0c:24:0a:b2:76:a7:8d:58:c8:42:48:77:f4:
e5:be:f2:83:7f:bc:31:bd:25:a7:24:5a:3b:31:15:4a:2c:5c:
ee:9b:b7:ca:e6:cd:71:b9:6d:41:dd:c5:fd:48:b0:bd:00:17:
9d:05:c5:eb:ea:49:2b:d7:8f:a5:a7:b7:81:d0:d4:e9:2a:83:
d2:87:fd:a1:1c:43:e3:35:3c:28:47:47:eb:f3:76:0c:6a:1d:
69:87:f8:ea:29:57:b2:3c:ee:7b:b7:f2:69:b6:e0:7b:22:f4:
ab:42:ff:2d:31:1f:28:40:89:ba:5b:ef:b0:8c:e8:f3:9c:43:
7c:25:49:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE0RZ4VH7jj0FGJMveMCThwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YmY3ZTg0MTI5N2UxNTZmYTFmZWQ1NTFhOGE3OTkzMWNi
OTA0ZDQwHhcNMjYxMDEzMDc1ODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzBmZjk0NDQyMzU1YTg2ODAyMGU1ZDdkY2Q3MTU3Y2M5OGUzNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfcqgfUerWbZboLKt6AFFUPpaNYm
Ku5wMm3CtNJCL7R9f1KZjy4fX+OayyxAFxAzE4leQUY5VOQl35TrLRaYaLVxKQua
VLQloiWljr+N542FM4f7D8BXaN/BAdfu+Sp1RGYP2pwz8o0YzobJSy/AUJCVDaby
kXVxprqwAJmrmX7IE8HeNQIMlW4/0ylk8fhP5y9NEkZ4+R/7/jEMUdImGx0AdMi5
es0lncIaTnI+3zTifa3U9cBEfZJPRaQga8Z8yK45/rn5af27Z+3tcAxE8PCiTcsU
lgaWmWeBwUGPoqNunlnpsXEpE9/Hn9fzPKkr3joEHwf72ijkpTu150ZTAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwP+URCNVqGgCDl19zXFXzJjjcBMB8GA1UdIwQY
MBaAFKi/foQSl+FW+h/tVRqKeZMcuQTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUw5LWhCS1g0VmI2SC0xVkdvcDVreHk1Qk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81OWYzZmItYzY1ZS00ZWI0LTg0NzAt
ODM4MmUxOTQ5OTc2LzEvM0FfNVJFSTFXb2FBSU9YWDNOY1ZmTW1PTndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81OWYzZmItYzY1ZS00ZWI0LTg0NzAtODM4MmUxOTQ5OTc2
LzEvcUw5LWhCS1g0VmI2SC0xVkdvcDVreHk1Qk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9MgMA0G
CSqGSIb3DQEBCwUAA4IBAQBD9Y3s+X9AlOuCKzhlte8+26BpNIldbwSlqT/obOfz
gLulkXlz3uyncYc+LVJoLNjXDBF4hdipnxtBCq2ywQxKf0zmYQnXT79IvXbbYVM6
tFvTKQuOa5UWd2UMQAeHpFvwqCp0tE4Hw1AS5rDSn6deNEUo6sdEpNLbZa9EMOsg
lOTGuQwkCrJ2p41YyEJId/TlvvKDf7wxvSWnJFo7MRVKLFzum7fK5s1xuW1B3cX9
SLC9ABedBcXr6kkr14+lp7eB0NTpKoPSh/2hHEPjNTwoR0fr83YMah1ph/jqKVey
PO57t/JptuB7IvSrQv8tMR8oQIm6W++wjOjznEN8JUlC
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:16 2026 by rpki-client