Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/asJsgpQy_F8zvUFdNI1tG5LohA0.roa
File: asJsgpQy_F8zvUFdNI1tG5LohA0.roa (raw, json)
Hash identifier: v+QYKTqGMGmfFFdN9xjCrEKD4WUAPcGPIlEmpOBaYco=
Subject key identifier: 6A:C2:6C:82:94:32:FC:5F:33:BD:41:5D:34:8D:6D:1B:92:E8:84:0D
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690E57D18723A9A695959F7A40A9D6
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/asJsgpQy_F8zvUFdNI1tG5LohA0.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 89.187.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:57:d1:87:23:a9:a6:95:95:9f:7a:40:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac26c829432fc5f33bd415d348d6d1b92e8840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:3f:eb:ed:a8:c2:12:02:49:74:72:95:14:
f1:68:ac:18:3d:85:0c:a0:5e:d3:b1:55:f1:1b:d1:
7a:e5:4b:f6:01:a2:8c:2f:75:55:a9:0a:ca:53:c3:
25:ed:f0:9e:e6:bb:35:5f:cd:9a:15:c0:d1:d7:e4:
dc:82:c8:97:7d:a7:33:70:68:d8:26:d2:0b:65:bc:
a2:3d:2d:9c:64:12:e0:03:a7:10:7b:dd:91:00:7a:
ab:85:ca:d6:f6:16:96:0d:28:8e:4a:50:b6:35:92:
fe:31:b3:6f:5a:01:67:16:9e:2d:d9:a2:e7:51:29:
5c:13:fb:ae:25:08:4c:97:fc:b0:88:39:c5:0e:d0:
13:a4:56:9a:f6:75:ec:63:24:fb:e2:40:32:46:b0:
bb:31:c9:d3:8f:07:d7:b7:e5:62:1b:84:77:d8:e6:
0d:22:89:ef:a2:58:38:53:8e:ff:6c:91:ad:61:8a:
79:a8:c9:a0:ee:e2:01:97:f3:df:df:a0:a8:1d:99:
28:16:8d:63:06:62:3b:16:8b:41:f2:3f:f2:6a:09:
03:0e:6f:31:99:66:35:05:3b:62:8f:b6:01:df:73:
17:ef:3b:cc:25:de:1c:f8:8c:1a:c8:dd:41:b9:38:
b8:85:39:4a:d7:63:eb:b7:af:b3:f9:b6:5d:75:0a:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:6C:82:94:32:FC:5F:33:BD:41:5D:34:8D:6D:1B:92:E8:84:0D
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/asJsgpQy_F8zvUFdNI1tG5LohA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.29.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d5:56:75:d7:6d:ca:f2:cc:46:c4:07:d3:61:cf:d8:12:ff:
bf:b2:70:bf:0d:24:10:38:02:6f:7e:46:92:8e:32:92:e9:d4:
96:7e:52:aa:38:b6:dc:83:4b:56:1a:77:16:8c:1c:ef:4e:68:
c2:ed:35:fe:a3:e8:2d:79:8d:c2:13:68:81:d2:ee:4b:8d:f4:
55:02:78:31:fa:95:e4:27:91:41:b1:d6:f3:01:af:68:4b:8c:
f3:37:0f:05:c8:36:bd:3f:53:98:e9:bd:8e:8c:33:e7:90:43:
d7:ce:63:dd:78:53:0d:12:73:46:f1:d8:a2:2f:05:19:a9:54:
3f:12:f9:b6:74:af:2d:b6:3b:76:41:0d:be:17:e5:dd:52:1d:
a7:2f:29:81:d0:cc:a9:5b:52:d4:ee:c3:63:f1:01:16:7f:d1:
46:3c:03:82:76:90:4c:f9:4c:47:ca:c9:ea:8c:b7:2a:b5:b9:
08:f7:7f:2a:3e:ff:4b:ac:40:b3:95:5f:b2:94:5f:17:69:f1:
f6:12:36:5b:36:f3:7e:d8:f5:18:39:92:ad:11:f4:bd:10:3e:
63:47:9b:e0:07:22:4c:dc:f9:d4:f8:54:31:0c:b0:31:59:0d:
63:95:36:2e:1e:48:c0:98:6a:8e:74:27:a7:02:73:46:52:b5:
bc:9c:4d:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQ5X0YcjqaaVlZ96QKnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYwNzAyMTUxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWMyNmM4Mjk0MzJmYzVmMzNiZDQxNWQzNDhkNmQxYjkyZTg4NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw40/6+2owhICSXRylRTxaKwYPYUM
oF7TsVXxG9F65Uv2AaKML3VVqQrKU8Ml7fCe5rs1X82aFcDR1+TcgsiXfaczcGjY
JtILZbyiPS2cZBLgA6cQe92RAHqrhcrW9haWDSiOSlC2NZL+MbNvWgFnFp4t2aLn
USlcE/uuJQhMl/ywiDnFDtATpFaa9nXsYyT74kAyRrC7McnTjwfXt+ViG4R32OYN
Ionvolg4U47/bJGtYYp5qMmg7uIBl/Pf36CoHZkoFo1jBmI7FotB8j/yagkDDm8x
mWY1BTtij7YB33MX7zvMJd4c+IwayN1BuTi4hTlK12Prt6+z+bZddQpEIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrCbIKUMvxfM71BXTSNbRuS6IQNMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvYXNKc2dwUXlfRjh6dlVGZE5JMXRHNUxvaEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsdMA0G
CSqGSIb3DQEBCwUAA4IBAQBI1VZ1123K8sxGxAfTYc/YEv+/snC/DSQQOAJvfkaS
jjKS6dSWflKqOLbcg0tWGncWjBzvTmjC7TX+o+gteY3CE2iB0u5LjfRVAngx+pXk
J5FBsdbzAa9oS4zzNw8FyDa9P1OY6b2OjDPnkEPXzmPdeFMNEnNG8diiLwUZqVQ/
Evm2dK8ttjt2QQ2+F+XdUh2nLymB0MypW1LU7sNj8QEWf9FGPAOCdpBM+UxHysnq
jLcqtbkI938qPv9LrECzlV+ylF8XafH2EjZbNvN+2PUYOZKtEfS9ED5jR5vgByJM
3PnU+FQxDLAxWQ1jlTYuHkjAmGqOdCenAnNGUrW8nE0+
-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:40 2026 by rpki-client