Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/5NaZ6c95j_5xRV-TpU7yYDvwrwU.roa
File: 5NaZ6c95j_5xRV-TpU7yYDvwrwU.roa (raw, json)
Hash identifier: Som+fXrvcNDluf6F6e4BtuZzJ8oW00n1scIQzCa2aeo=
Subject key identifier: E4:D6:99:E9:CF:79:8F:FE:71:45:5F:93:A5:4E:F2:60:3B:F0:AF:05
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A13E0DC9C4EA063ED7DEEB318394CB6D5F
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/5NaZ6c95j_5xRV-TpU7yYDvwrwU.roa
Signing time: Thu 15 Oct 2026 05:34:13 +0000
ROA not before: Thu 15 Oct 2026 05:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.24.0/24 maxlen: 24
45.8.25.0/24 maxlen: 24
80.46.129.0/24 maxlen: 24
2a0e:4201::/32 maxlen: 48
2a0e:4202::/32 maxlen: 48
2a0e:4203::/32 maxlen: 48
2a0e:4205::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:0d:c9:c4:ea:06:3e:d7:de:eb:31:83:94:cb:6d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 15 05:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4d699e9cf798ffe71455f93a54ef2603bf0af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:d0:f6:62:c9:44:5c:f5:33:ec:b5:39:fe:
de:2f:21:62:62:b7:32:ea:b3:2d:4b:43:22:be:b2:
a6:08:74:92:a1:33:6c:4e:42:a3:cb:7a:06:3f:1c:
4a:10:0c:4a:83:19:7a:6a:89:b7:cc:79:0e:0b:e2:
69:1e:c7:9f:bb:2e:06:84:0c:25:d1:34:0e:b7:ca:
20:89:b8:d6:21:3b:ea:84:23:df:24:84:ea:01:6b:
2f:65:f3:3c:2a:9a:a0:5b:95:64:cf:3c:4b:0d:95:
90:54:bc:6d:d8:32:dc:36:f1:6c:a1:e4:d1:4d:9d:
fc:84:95:c4:1a:ba:38:7a:d2:a7:56:13:c0:7d:b7:
8e:ff:96:c6:96:bc:2e:1a:c8:b2:81:ab:00:92:a6:
06:ac:73:58:9e:86:ff:c2:08:d7:86:51:85:77:9a:
08:78:47:d3:d6:90:b9:f9:4f:a7:47:e4:00:35:ca:
6a:03:f5:e6:e6:a0:91:6d:ad:70:a8:c4:98:ca:d1:
82:8e:d5:03:bd:fb:fc:72:84:a1:85:08:f1:bb:ea:
a2:db:fa:1e:46:f0:c7:87:23:42:99:1b:9a:96:65:
eb:0f:56:41:bf:9d:1b:01:71:38:33:96:6b:0f:e0:
9c:cc:03:41:30:60:8b:39:42:c5:4b:7e:34:41:4f:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D6:99:E9:CF:79:8F:FE:71:45:5F:93:A5:4E:F2:60:3B:F0:AF:05
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/5NaZ6c95j_5xRV-TpU7yYDvwrwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.24.0/23
80.46.129.0/24
IPv6:
2a0e:4201::-2a0e:4203:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:4205::/32
Signature Algorithm: sha256WithRSAEncryption
09:7e:c3:5a:92:83:a6:73:fb:2a:23:df:95:b9:4b:43:01:ce:
c2:b9:a7:d3:fd:e0:a3:10:50:61:e1:e2:6d:75:a9:66:75:21:
8d:ba:d2:80:44:d5:9a:ba:57:4c:74:a8:e8:38:ee:29:f3:b4:
73:ce:44:39:25:3e:f1:c3:f6:36:4d:9a:eb:95:20:cf:7e:46:
0c:22:19:5a:3d:57:d6:e0:82:09:97:d2:a2:5d:c7:e5:44:bb:
fa:a4:f5:b2:ff:a9:05:33:a1:99:da:6b:0a:94:04:80:88:8d:
ca:fe:7a:4a:89:27:1d:6c:f7:b5:23:37:fb:a8:62:9a:60:ba:
9b:08:35:91:1c:3c:bc:d5:a9:96:96:63:18:27:ab:8a:db:49:
75:5f:91:ad:ff:1d:d9:d4:e8:34:b1:fa:17:3c:4d:72:35:1b:
b2:7a:09:d6:95:e6:e5:11:b6:b0:e6:a5:26:05:b9:de:8c:9d:
d2:69:6d:2a:89:a6:b8:3d:bf:05:ab:08:f1:53:4a:d7:e7:19:
1d:22:37:ab:7a:77:f2:96:79:d9:6a:a9:b1:16:90:f3:01:08:
8a:1c:c0:9b:19:f8:22:1d:7b:06:2b:ea:3c:7f:cd:b3:3a:a0:
f0:31:07:57:8f:33:9d:bb:0e:5c:55:e4:ed:22:a9:d7:73:7e:
26:75:b3:dc
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAaE+DcnE6gY+197rMYOUy21fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjYxMDE1MDUzNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGQ2OTllOWNmNzk4ZmZlNzE0NTVmOTNhNTRlZjI2MDNiZjBhZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bQ9mLJRFz1M+y1Of7eLyFiYrcy
6rMtS0MivrKmCHSSoTNsTkKjy3oGPxxKEAxKgxl6aom3zHkOC+JpHsefuy4GhAwl
0TQOt8ogibjWITvqhCPfJITqAWsvZfM8KpqgW5VkzzxLDZWQVLxt2DLcNvFsoeTR
TZ38hJXEGro4etKnVhPAfbeO/5bGlrwuGsiygasAkqYGrHNYnob/wgjXhlGFd5oI
eEfT1pC5+U+nR+QANcpqA/Xm5qCRba1wqMSYytGCjtUDvfv8coShhQjxu+qi2/oe
RvDHhyNCmRualmXrD1ZBv50bAXE4M5ZrD+CczANBMGCLOULFS340QU/newIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFOTWmenPeY/+cUVfk6VO8mA78K8FMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvNU5hWjZjOTVqXzV4UlYtVHBVN3lZRHZ3cndVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQBLQgYAwQA
UC6BMB0EAgACMBcwDgMFACoOQgEDBQIqDkIAAwUAKg5CBTANBgkqhkiG9w0BAQsF
AAOCAQEACX7DWpKDpnP7KiPflblLQwHOwrmn0/3goxBQYeHibXWpZnUhjbrSgETV
mrpXTHSo6DjuKfO0c85EOSU+8cP2Nk2a65Ugz35GDCIZWj1X1uCCCZfSol3H5US7
+qT1sv+pBTOhmdprCpQEgIiNyv56SoknHWz3tSM3+6himmC6mwg1kRw8vNWplpZj
GCerittJdV+Rrf8d2dToNLH6FzxNcjUbsnoJ1pXm5RG2sOalJgW53oyd0mltKomm
uD2/BasI8VNK1+cZHSI3q3p38pZ52WqpsRaQ8wEIihzAmxn4Ih17BivqPH/Nszqg
8DEHV48znbsOXFXk7SKp13N+JnWz3A==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:48:41 2026 by rpki-client