Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/5InSNvZa6NPl2XUprALXEFXI9UU.roa
File: 5InSNvZa6NPl2XUprALXEFXI9UU.roa (raw, json)
Hash identifier: 4bmKKFl9D3EfIWxPnS9UJq20YLXV0+HL+F87z2lo5Zo=
Subject key identifier: E4:89:D2:36:F6:5A:E8:D3:E5:D9:75:29:AC:02:D7:10:55:C8:F5:45
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 01A0A18648D59CDFE0F2244CAFC06281EE38
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/5InSNvZa6NPl2XUprALXEFXI9UU.roa
Signing time: Mon 14 Sep 2026 20:05:27 +0000
ROA not before: Mon 14 Sep 2026 20:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36352
IP address blocks: 45.156.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:86:48:d5:9c:df:e0:f2:24:4c:af:c0:62:81:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Sep 14 20:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e489d236f65ae8d3e5d97529ac02d71055c8f545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:73:0e:be:d9:25:10:fc:0f:d1:85:d5:ad:
9e:f8:d3:d7:4e:c1:cf:02:17:01:9c:a9:ca:36:f0:
68:db:f4:a1:e8:86:5d:71:75:5e:b1:03:50:a9:68:
6c:4d:e1:6b:61:7f:4d:69:4e:c6:fc:55:2d:d1:f9:
56:9b:4f:17:16:6a:5d:37:33:a8:63:65:38:d3:8b:
af:fb:77:1c:d9:4a:3f:d5:13:b7:2d:7f:eb:f4:df:
61:b4:f3:5e:1f:d4:c6:68:91:69:db:74:43:5b:61:
a3:6b:98:47:58:35:cd:7e:98:75:10:d1:75:96:f3:
df:da:06:c9:3c:97:ea:76:56:8d:73:59:a2:21:61:
82:8c:bb:88:05:c6:42:3d:e6:a5:1d:7e:2b:16:80:
e1:3e:ab:98:89:65:cb:cf:2d:f2:82:0b:f4:6f:85:
5e:68:82:51:e9:5b:a1:b8:60:7b:ce:8b:8a:05:ff:
1e:13:c8:a9:e2:ce:21:c4:10:12:a8:60:27:1c:1f:
05:f7:a0:ed:ad:f2:e7:42:a8:1c:d6:31:9f:be:32:
6c:af:31:e0:5a:b4:5c:af:a4:52:6e:3b:1b:39:32:
a3:d8:8e:b9:89:06:aa:cc:be:9f:5c:9a:eb:bb:e3:
b7:6f:d5:4d:65:0e:43:f4:3d:61:9c:ae:0f:23:76:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:D2:36:F6:5A:E8:D3:E5:D9:75:29:AC:02:D7:10:55:C8:F5:45
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/5InSNvZa6NPl2XUprALXEFXI9UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.118.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:1f:19:01:f3:64:97:a9:41:38:2f:4a:ae:67:00:23:5d:fa:
c3:0f:0b:1f:91:23:0c:ee:92:47:7f:d4:53:9f:ec:01:25:7d:
e6:1d:8e:28:00:f0:7f:f6:d1:48:99:bc:14:2a:cb:bd:14:be:
b3:54:ff:7d:41:d4:65:0c:1e:f3:ff:d5:13:ea:7f:01:a9:63:
8c:66:a1:c9:f9:03:79:d3:ca:31:b1:71:7f:33:6a:21:2e:50:
77:f5:9d:d1:36:b0:c3:e0:c9:f4:9c:57:fd:16:83:3e:66:88:
7f:62:22:be:9b:8a:69:89:38:07:49:73:d2:93:bc:40:f7:df:
06:de:70:9c:80:86:8e:5f:b2:82:ea:cb:96:0e:1e:18:97:c5:
0f:d5:fc:d2:d2:a4:54:e1:db:6c:2d:53:a8:82:8c:66:48:03:
60:3b:86:c9:7b:ac:1f:42:a5:0a:b4:7f:54:3f:28:cf:89:89:
03:d7:16:aa:56:6a:37:f1:13:0c:48:17:68:e7:44:49:18:97:
09:3e:0e:d4:eb:56:12:36:2e:16:02:95:9a:44:80:f3:c6:65:
1e:5e:0c:84:6a:ed:bf:48:5b:03:2d:eb:3b:3a:37:f2:96:db:
4b:48:7a:98:7d:60:70:08:92:bc:12:19:97:e6:9d:cc:6a:9d:
b9:76:21:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaChhkjVnN/g8iRMr8Bige44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2
Y2JiYTMwHhcNMjYwOTE0MjAwNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDg5ZDIzNmY2NWFlOGQzZTVkOTc1MjlhYzAyZDcxMDU1YzhmNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3VzDr7ZJRD8D9GF1a2e+NPXTsHP
AhcBnKnKNvBo2/Sh6IZdcXVesQNQqWhsTeFrYX9NaU7G/FUt0flWm08XFmpdNzOo
Y2U404uv+3cc2Uo/1RO3LX/r9N9htPNeH9TGaJFp23RDW2Gja5hHWDXNfph1ENF1
lvPf2gbJPJfqdlaNc1miIWGCjLuIBcZCPealHX4rFoDhPquYiWXLzy3yggv0b4Ve
aIJR6VuhuGB7zouKBf8eE8ip4s4hxBASqGAnHB8F96DtrfLnQqgc1jGfvjJsrzHg
WrRcr6RSbjsbOTKj2I65iQaqzL6fXJrru+O3b9VNZQ5D9D1hnK4PI3YY2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOSJ0jb2WujT5dl1KawC1xBVyPVFMB8GA1UdIwQY
MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt
MjBkMjQ5MDAxMzBhLzEvNUluU052WmE2TlBsMlhVcHJBTFhFRlhJOVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYtMjBkMjQ5MDAxMzBh
LzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZx2MA0G
CSqGSIb3DQEBCwUAA4IBAQC1HxkB82SXqUE4L0quZwAjXfrDDwsfkSMM7pJHf9RT
n+wBJX3mHY4oAPB/9tFImbwUKsu9FL6zVP99QdRlDB7z/9UT6n8BqWOMZqHJ+QN5
08oxsXF/M2ohLlB39Z3RNrDD4Mn0nFf9FoM+Zoh/YiK+m4ppiTgHSXPSk7xA998G
3nCcgIaOX7KC6suWDh4Yl8UP1fzS0qRU4dtsLVOogoxmSANgO4bJe6wfQqUKtH9U
PyjPiYkD1xaqVmo38RMMSBdo50RJGJcJPg7U61YSNi4WApWaRIDzxmUeXgyEau2/
SFsDLes7OjfylttLSHqYfWBwCJK8EhmX5p3Map25diHH
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:49 2026 by rpki-client