Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ho5jGwx-wa8uq3vYWlaB3xJS9KI.roa
File: ho5jGwx-wa8uq3vYWlaB3xJS9KI.roa (raw, json)
Hash identifier: OC0LXKKkgDEkfZFY+rJwhh4et3YXGnx2mQKtJ+qR4bA=
Subject key identifier: 86:8E:63:1B:0C:7E:C1:AF:2E:AB:7B:D8:5A:56:81:DF:12:52:F4:A2
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A10B8DAC828EB53D56AC5A7BA0B3CC4E87
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ho5jGwx-wa8uq3vYWlaB3xJS9KI.roa
Signing time: Mon 05 Oct 2026 10:13:16 +0000
ROA not before: Mon 05 Oct 2026 10:13:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.13.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:8d:ac:82:8e:b5:3d:56:ac:5a:7b:a0:b3:cc:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Oct 5 10:13:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=868e631b0c7ec1af2eab7bd85a5681df1252f4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:a7:bc:42:b4:de:b1:ea:95:9d:eb:55:8a:
fa:57:e6:a3:63:d3:a7:7e:16:89:6d:76:d7:91:cc:
3a:e6:25:7d:94:c4:bd:3d:01:03:ca:74:79:63:67:
6f:5a:2c:28:ec:9b:38:ce:c6:32:2e:bf:f1:99:d5:
a7:e3:8c:d9:b8:7f:ba:16:e3:09:1a:92:53:65:a4:
b5:00:e5:82:af:27:79:b8:b8:84:72:7c:46:81:98:
95:98:65:5b:d9:04:d1:1d:4b:0c:2b:d9:31:27:87:
4c:9c:c5:8a:4b:9b:3f:cd:a6:a8:d9:ed:43:4e:30:
00:4e:00:45:5a:f6:61:42:0d:58:75:64:44:ce:3c:
f5:77:ad:f5:62:d3:70:ab:95:94:f0:2f:7a:a9:f7:
03:84:b6:3c:4b:fa:9a:31:c7:c3:0d:77:db:a9:5c:
5f:cb:58:1d:8e:e0:f6:fd:38:52:a9:86:c6:6f:91:
49:bf:0a:99:58:c7:85:e2:45:33:bf:b8:51:1e:bc:
bf:7e:6b:3d:4f:bd:4f:db:50:aa:8c:45:ce:81:e7:
e1:ed:4a:d1:3c:95:33:91:bf:79:27:ec:7c:44:3c:
16:09:17:80:88:93:1d:c6:90:61:d8:58:e2:99:30:
29:15:90:68:13:32:56:49:a5:a0:c1:af:23:29:f2:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:63:1B:0C:7E:C1:AF:2E:AB:7B:D8:5A:56:81:DF:12:52:F4:A2
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ho5jGwx-wa8uq3vYWlaB3xJS9KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0/24
89.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:40:dd:a0:00:d2:57:58:5d:fb:39:e0:41:2b:4c:db:a9:43:
84:0e:f9:fd:79:34:f6:1d:8e:95:ec:cc:c1:0e:b5:94:19:11:
41:19:95:80:30:ee:96:d7:d9:6f:ba:e4:13:4f:35:5a:51:4f:
38:0b:f5:98:4b:fa:63:2e:e4:e1:46:1a:f2:70:67:43:32:5a:
0a:b6:fa:e0:b7:63:34:9f:af:5b:29:fc:77:ef:1b:3a:4d:83:
2d:03:3f:1c:6a:b1:4a:c4:20:49:79:64:66:20:23:44:81:ec:
eb:76:aa:18:12:b6:c6:84:39:93:b2:56:bf:d3:e9:45:ab:57:
c2:b9:7f:3a:8e:70:8d:53:50:cc:bc:96:98:a5:9b:51:68:43:
12:2c:9d:ec:aa:4f:c2:16:c9:ec:79:28:4a:aa:05:ca:1e:8c:
b0:fd:7a:d2:0f:06:6f:2c:0c:c8:aa:53:fa:e9:88:2c:ab:c4:
39:29:cb:3c:d1:12:c9:25:b5:4f:f6:15:8d:cf:a6:c2:7a:d4:
05:bd:05:27:e2:56:54:ab:87:41:f0:05:4b:84:6f:65:75:fc:
f1:2f:9e:9f:96:37:d7:55:9a:0a:5f:9a:32:6a:69:74:6e:fe:
b9:24:a3:07:1b:55:f8:bc:bc:c9:d2:09:19:6a:31:a6:d4:82:
f0:0c:c8:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaELjayCjrU9Vqxae6CzzE6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYxMDA1MTAxMzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjhlNjMxYjBjN2VjMWFmMmVhYjdiZDg1YTU2ODFkZjEyNTJmNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2SnvEK03rHqlZ3rVYr6V+ajY9On
fhaJbXbXkcw65iV9lMS9PQEDynR5Y2dvWiwo7Js4zsYyLr/xmdWn44zZuH+6FuMJ
GpJTZaS1AOWCryd5uLiEcnxGgZiVmGVb2QTRHUsMK9kxJ4dMnMWKS5s/zaao2e1D
TjAATgBFWvZhQg1YdWREzjz1d631YtNwq5WU8C96qfcDhLY8S/qaMcfDDXfbqVxf
y1gdjuD2/ThSqYbGb5FJvwqZWMeF4kUzv7hRHry/fms9T71P21CqjEXOgefh7UrR
PJUzkb95J+x8RDwWCReAiJMdxpBh2FjimTApFZBoEzJWSaWgwa8jKfLoswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIaOYxsMfsGvLqt72FpWgd8SUvSiMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvaG81akd3eC13YTh1cTN2WVdsYUIzeEpTOUtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsNAwQA
WbsQMA0GCSqGSIb3DQEBCwUAA4IBAQA7QN2gANJXWF37OeBBK0zbqUOEDvn9eTT2
HY6V7MzBDrWUGRFBGZWAMO6W19lvuuQTTzVaUU84C/WYS/pjLuThRhrycGdDMloK
tvrgt2M0n69bKfx37xs6TYMtAz8carFKxCBJeWRmICNEgezrdqoYErbGhDmTsla/
0+lFq1fCuX86jnCNU1DMvJaYpZtRaEMSLJ3sqk/CFsnseShKqgXKHoyw/XrSDwZv
LAzIqlP66Ygsq8Q5Kcs80RLJJbVP9hWNz6bCetQFvQUn4lZUq4dB8AVLhG9ldfzx
L56fljfXVZoKX5oyaml0bv65JKMHG1X4vLzJ0gkZajGm1ILwDMim
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:42 2026 by rpki-client