Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/H5Q-dU0aoyrNiH9wqgnsn5H_Va4.roa
File: H5Q-dU0aoyrNiH9wqgnsn5H_Va4.roa (raw, json)
Hash identifier: wEl84A2iQtW2QlhvVrH7VKbflyCbD807z5pUIHPlOVY=
Subject key identifier: 1F:94:3E:75:4D:1A:A3:2A:CD:88:7F:70:AA:09:EC:9F:91:FF:55:AE
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019FC90DD8737B340BC92A11140565A5BE28
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/H5Q-dU0aoyrNiH9wqgnsn5H_Va4.roa
Signing time: Mon 03 Aug 2026 19:15:55 +0000
ROA not before: Mon 03 Aug 2026 19:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46635
IP address blocks: 9.151.192.0/20 maxlen: 20
9.151.232.0/22 maxlen: 22
9.232.24.0/22 maxlen: 22
9.232.76.0/22 maxlen: 22
9.233.96.0/20 maxlen: 20
9.249.100.0/22 maxlen: 22
138.226.16.0/20 maxlen: 20
138.226.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:0d:d8:73:7b:34:0b:c9:2a:11:14:05:65:a5:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 3 19:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f943e754d1aa32acd887f70aa09ec9f91ff55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:88:68:ab:be:53:22:f3:2f:87:41:79:cf:
cb:c8:d7:f6:f8:f7:ed:de:62:5c:8b:d8:b9:37:63:
72:b7:c7:21:03:bb:97:4d:0c:10:f8:d2:3b:b8:10:
13:5e:2a:5e:76:de:e5:94:ce:17:ec:bc:4a:23:df:
07:6c:54:5a:c0:53:c8:52:a1:41:92:5c:85:c8:3d:
7e:e0:8d:fb:a8:ea:31:5b:28:a8:df:5e:53:56:a9:
10:d4:a9:e1:08:0c:8a:9b:26:38:04:2d:cf:97:ad:
f9:0d:22:ea:89:1e:8e:2f:3f:4b:60:0a:11:76:09:
d5:76:e2:84:a7:8e:31:81:05:e5:95:e5:7b:8e:48:
7f:4d:6a:56:44:89:4f:3a:f1:23:f6:fd:0d:80:fb:
56:f9:bb:2c:5f:fd:a0:73:e9:89:92:69:54:4b:8b:
30:ea:e9:33:4f:ac:f3:d1:7c:81:f4:23:d1:41:78:
fc:05:06:74:6a:c5:b0:71:e7:06:3b:5b:33:a1:bc:
13:69:d7:57:d8:0f:2e:89:4f:03:d3:1d:97:8a:65:
3c:7d:7d:2a:d5:c3:81:a3:f2:a2:39:60:19:35:3d:
7c:48:d5:c9:df:40:ac:29:b4:0e:f1:0d:6b:76:c2:
d7:b3:bc:aa:ca:50:a9:d4:f1:db:b2:f4:b9:2a:ff:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:3E:75:4D:1A:A3:2A:CD:88:7F:70:AA:09:EC:9F:91:FF:55:AE
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/H5Q-dU0aoyrNiH9wqgnsn5H_Va4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.192.0/20
9.151.232.0/22
9.232.24.0/22
9.232.76.0/22
9.233.96.0/20
9.249.100.0/22
138.226.16.0/20
138.226.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:07:ff:bb:68:77:8d:28:49:f8:f9:0e:3d:a5:12:15:a5:a6:
f1:36:4b:f5:30:9a:f8:b1:ff:d2:f5:50:ab:70:3a:f6:9f:b7:
10:e0:20:13:e5:93:29:b2:35:f5:80:7f:cd:83:5b:c3:35:4c:
83:2c:d5:42:05:99:c5:4c:f8:8b:5e:ca:f1:09:67:36:44:f2:
85:10:ab:1e:d0:86:6c:cd:8d:a9:0e:34:a8:11:46:0d:db:fb:
af:43:a8:25:3a:ab:f4:11:f4:91:31:17:76:52:4e:98:06:a6:
44:01:7a:6a:a4:b4:2f:ef:4b:40:c0:70:e8:bb:82:5a:53:93:
9e:b7:97:36:00:7e:fb:50:eb:99:c5:ea:1d:8a:60:df:1c:62:
17:bb:8e:3b:1c:5c:cb:cd:6b:bf:b0:86:a3:a0:a6:b8:65:50:
73:21:5d:ec:05:62:19:12:93:a4:d2:83:91:fc:da:31:55:7d:
ba:5e:19:e5:e3:c6:34:ea:1b:96:27:4a:1c:83:e6:db:69:4b:
65:17:fc:74:45:3d:ad:21:c8:47:8e:1b:cd:98:40:81:2a:cd:
22:ac:54:7a:a8:96:4a:e9:f8:dc:50:5c:38:eb:87:7e:c5:ac:
83:9d:10:d4:69:67:e0:67:b0:31:37:e9:9f:89:05:18:80:23:
a4:e1:18:a7
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ/JDdhzezQLySoRFAVlpb4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwODAzMTkxNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk0M2U3NTRkMWFhMzJhY2Q4ODdmNzBhYTA5ZWM5ZjkxZmY1NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi46IaKu+UyLzL4dBec/LyNf2+Pft
3mJci9i5N2Nyt8chA7uXTQwQ+NI7uBATXipedt7llM4X7LxKI98HbFRawFPIUqFB
klyFyD1+4I37qOoxWyio315TVqkQ1KnhCAyKmyY4BC3Pl635DSLqiR6OLz9LYAoR
dgnVduKEp44xgQXlleV7jkh/TWpWRIlPOvEj9v0NgPtW+bssX/2gc+mJkmlUS4sw
6ukzT6zz0XyB9CPRQXj8BQZ0asWwcecGO1szobwTaddX2A8uiU8D0x2XimU8fX0q
1cOBo/KiOWAZNT18SNXJ30CsKbQO8Q1rdsLXs7yqylCp1PHbsvS5Kv87xwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFB+UPnVNGqMqzYh/cKoJ7J+R/1WuMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvSDVRLWRVMGFveXJOaUg5d3FnbnNuNUhfVmE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQECZfAAwQC
CZfoAwQCCegYAwQCCehMAwQECelgAwQCCflkAwQEiuIQAwQEiuJgMA0GCSqGSIb3
DQEBCwUAA4IBAQANB/+7aHeNKEn4+Q49pRIVpabxNkv1MJr4sf/S9VCrcDr2n7cQ
4CAT5ZMpsjX1gH/Ng1vDNUyDLNVCBZnFTPiLXsrxCWc2RPKFEKse0IZszY2pDjSo
EUYN2/uvQ6glOqv0EfSRMRd2Uk6YBqZEAXpqpLQv70tAwHDou4JaU5Oet5c2AH77
UOuZxeodimDfHGIXu447HFzLzWu/sIajoKa4ZVBzIV3sBWIZEpOk0oOR/NoxVX26
Xhnl48Y06huWJ0ocg+bbaUtlF/x0RT2tIchHjhvNmECBKs0irFR6qJZK6fjcUFw4
64d+xayDnRDUaWfgZ7AxN+mfiQUYgCOk4Rin
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:42 2026 by rpki-client