Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ArR0NKN5I1esLHH9EGKWOLUPI0o.roa
File: ArR0NKN5I1esLHH9EGKWOLUPI0o.roa (raw, json)
Hash identifier: bcNsirVH7W6OMF+HCZ6cCaC61KqvhbMKQzOg5DUhIDE=
Subject key identifier: 02:B4:74:34:A3:79:23:57:AC:2C:71:FD:10:62:96:38:B5:0F:23:4A
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A0EE3EAAF6A9110E85C54F254294E056EE
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ArR0NKN5I1esLHH9EGKWOLUPI0o.roa
Signing time: Tue 29 Sep 2026 17:37:59 +0000
ROA not before: Tue 29 Sep 2026 17:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.208.0/24 maxlen: 24
5.10.211.0/24 maxlen: 24
5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:3e:aa:f6:a9:11:0e:85:c5:4f:25:42:94:e0:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 29 17:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02b47434a3792357ac2c71fd10629638b50f234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:0e:2b:fb:8d:e2:73:fb:1e:bf:28:b3:53:
ed:1c:0c:f0:2d:a0:1a:a2:6d:cc:57:89:9e:b1:f7:
0c:13:cd:43:f0:6f:35:bb:af:34:0e:17:f3:fa:c0:
06:96:b4:6e:59:0a:6f:1b:09:7a:81:39:2d:14:02:
1c:e7:2a:3e:6d:80:ff:56:97:87:19:06:27:f2:42:
9a:14:70:5e:61:e8:67:27:d3:53:2e:13:cd:f4:66:
86:17:16:0e:8e:23:78:9d:36:fd:9e:ad:7f:eb:26:
d0:6e:0a:bb:f5:d4:a2:d3:af:82:47:78:77:60:3d:
96:2d:49:00:e0:55:18:39:a9:f9:bd:f8:ef:10:ae:
67:9b:1b:ec:ae:6f:2b:57:be:2f:16:df:98:03:6d:
71:bb:32:98:e1:47:32:8a:90:e7:cd:e8:75:58:35:
09:5b:a3:95:f5:0d:84:d9:28:5c:4f:4a:a2:98:38:
67:0c:8d:8e:9a:9f:02:59:e2:64:61:1d:0a:6c:48:
40:4c:2b:fa:86:51:04:d4:41:2c:80:12:07:31:a9:
12:d9:9c:a6:c6:ea:07:23:56:8f:4f:ae:67:06:36:
dc:f9:8d:4d:d1:1d:ee:ae:f3:57:43:42:66:e9:28:
ac:90:de:7b:ba:f6:30:6c:b6:c5:16:af:7c:d1:f1:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:74:34:A3:79:23:57:AC:2C:71:FD:10:62:96:38:B5:0F:23:4A
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/ArR0NKN5I1esLHH9EGKWOLUPI0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/24
5.10.211.0/24
5.10.216.0/24
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4f:a2:19:98:79:fe:52:b3:fc:d3:92:64:0f:ed:f5:8f:7c:
57:a7:0e:0b:65:51:15:33:da:4f:cc:80:7e:43:6a:73:41:20:
d9:c0:70:8c:51:e8:98:ee:d6:40:07:d5:10:80:df:fb:8b:f2:
85:ca:24:31:fa:b4:56:ff:10:a2:6d:98:cf:5a:86:da:66:2e:
64:b4:13:d5:b8:df:b8:b7:84:f6:67:0b:08:d0:2c:4b:13:59:
f0:0d:10:d4:92:b0:54:8d:10:6a:cb:b9:16:ff:0b:d6:04:e3:
dd:c7:94:1d:2c:cf:58:73:b7:2f:66:47:b6:3e:e2:48:b3:26:
14:a9:8f:71:09:e4:fa:67:85:d5:85:06:ae:9f:fd:6e:50:75:
bf:24:91:ab:36:64:54:0b:29:98:42:6f:4d:63:64:d2:be:29:
98:cd:3d:bd:13:08:28:d9:42:92:d3:3b:ea:31:74:37:83:20:
5d:b3:d8:39:3d:92:3d:39:3d:ab:99:5b:0d:80:f4:3d:30:cd:
1b:f9:15:0b:7d:79:f7:9b:90:5b:b5:aa:a7:fa:36:74:2c:e0:
d5:ec:f3:f1:84:fc:ef:5c:58:22:1e:73:6d:bf:86:c9:a7:83:
a1:54:7d:ad:28:01:34:06:35:96:9f:3e:a7:90:dc:28:50:5e:
53:17:5f:90
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaDuPqr2qREOhcVPJUKU4FbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjYwOTI5MTczNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI0NzQzNGEzNzkyMzU3YWMyYzcxZmQxMDYyOTYzOGI1MGYyMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQEOK/uN4nP7Hr8os1PtHAzwLaAa
om3MV4mesfcME81D8G81u680Dhfz+sAGlrRuWQpvGwl6gTktFAIc5yo+bYD/VpeH
GQYn8kKaFHBeYehnJ9NTLhPN9GaGFxYOjiN4nTb9nq1/6ybQbgq79dSi06+CR3h3
YD2WLUkA4FUYOan5vfjvEK5nmxvsrm8rV74vFt+YA21xuzKY4UcyipDnzeh1WDUJ
W6OV9Q2E2ShcT0qimDhnDI2Omp8CWeJkYR0KbEhATCv6hlEE1EEsgBIHMakS2Zym
xuoHI1aPT65nBjbc+Y1N0R3urvNXQ0Jm6SiskN57uvYwbLbFFq980fHT7wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAK0dDSjeSNXrCxx/RBilji1DyNKMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvQXJSME5LTjVJMWVzTEhIOUVHS1dPTFVQSTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABQrQAwQA
BQrTAwQABQrYAwQABQreMA0GCSqGSIb3DQEBCwUAA4IBAQApT6IZmHn+UrP805Jk
D+31j3xXpw4LZVEVM9pPzIB+Q2pzQSDZwHCMUeiY7tZAB9UQgN/7i/KFyiQx+rRW
/xCibZjPWobaZi5ktBPVuN+4t4T2ZwsI0CxLE1nwDRDUkrBUjRBqy7kW/wvWBOPd
x5QdLM9Yc7cvZke2PuJIsyYUqY9xCeT6Z4XVhQaun/1uUHW/JJGrNmRUCymYQm9N
Y2TSvimYzT29Ewgo2UKS0zvqMXQ3gyBds9g5PZI9OT2rmVsNgPQ9MM0b+RULfXn3
m5Bbtaqn+jZ0LODV7PPxhPzvXFgiHnNtv4bJp4OhVH2tKAE0BjWWnz6nkNwoUF5T
F1+Q
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:59:32 2026 by rpki-client