Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5WMgeU66FGzAaHuzAP_nWsThRqc.roa
File: 5WMgeU66FGzAaHuzAP_nWsThRqc.roa (raw, json)
Hash identifier: lUxRT/eJDwLqc4eZcIXGzgK/fh+Pzph6tajKJbnIpCE=
Subject key identifier: E5:63:20:79:4E:BA:14:6C:C0:68:7B:B3:00:FF:E7:5A:C4:E1:46:A7
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019FEB17C565EE691DE25533265A33E324AF
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5WMgeU66FGzAaHuzAP_nWsThRqc.roa
Signing time: Mon 10 Aug 2026 09:53:51 +0000
ROA not before: Mon 10 Aug 2026 09:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 94.231.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:17:c5:65:ee:69:1d:e2:55:33:26:5a:33:e3:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Aug 10 09:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e56320794eba146cc0687bb300ffe75ac4e146a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:72:c0:5b:a9:72:80:9a:9e:3c:31:40:17:
1b:0e:7c:ed:a3:99:c8:42:ed:67:53:9c:9b:ad:24:
95:66:ca:dd:5c:11:54:78:6d:fa:7d:3c:c2:28:e1:
e8:ce:10:b5:03:90:2c:26:b5:27:7a:03:cb:72:15:
06:7c:43:2f:d1:c8:69:82:d7:d9:f4:be:74:33:45:
19:81:8a:23:09:51:e4:57:2e:d7:39:ca:dd:23:22:
78:35:6c:c3:1f:dd:23:2c:d5:63:a3:9c:b5:e0:82:
de:2c:5b:cf:0f:77:60:0a:2e:4d:b3:4f:9a:f1:42:
69:91:7c:49:81:e9:c4:86:06:18:ac:03:46:96:5c:
7c:6e:15:ac:0a:19:9f:88:72:1d:a0:9f:b4:64:fd:
44:1e:e0:a5:23:b6:55:e2:a0:47:01:0a:3f:30:38:
98:a0:a9:d2:65:de:eb:a7:72:01:91:4f:dc:84:00:
06:18:33:66:a4:a2:be:56:1a:2c:0c:15:6c:2b:b4:
26:71:81:bb:05:6c:26:00:65:98:51:dd:1c:cc:0c:
47:a5:92:bf:65:af:23:62:38:1b:ee:bb:8c:c0:d6:
67:9e:af:7e:ad:48:d9:44:ce:b4:b9:bb:90:04:a6:
74:84:f7:6f:40:ad:79:59:91:6b:2e:11:da:80:31:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:20:79:4E:BA:14:6C:C0:68:7B:B3:00:FF:E7:5A:C4:E1:46:A7
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5WMgeU66FGzAaHuzAP_nWsThRqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.228.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ac:f6:c1:c2:fc:35:61:f4:02:c9:c8:90:b9:97:31:8d:a2:
e7:60:38:41:1a:85:a0:61:e5:3a:43:b7:7c:f6:d0:03:7b:dd:
d9:42:8a:d2:0e:f1:5e:ae:94:e1:9f:ff:93:b4:e9:38:1c:3e:
fb:3a:0a:06:03:b0:21:77:35:0c:21:15:01:ca:69:b1:ea:75:
28:35:fd:6c:56:4b:6b:e5:25:94:94:69:a9:a7:0e:47:44:8a:
dd:f1:7f:ce:c7:16:d0:2f:e8:98:57:a1:68:3b:d1:c5:81:d9:
5d:da:03:27:d2:bd:6b:83:02:5e:23:a4:74:ed:c2:f3:0c:b6:
28:ad:60:53:22:95:b0:28:10:e1:37:74:2f:8f:aa:3a:e3:a6:
63:c2:99:14:67:f6:31:7e:1f:d1:23:d1:90:72:e9:68:15:c4:
a0:60:84:4e:1a:b9:9d:d6:93:6a:88:4b:d9:43:de:25:af:48:
82:39:54:ce:1b:de:43:9b:6c:dd:ad:5e:15:12:c1:a4:02:ee:
18:7a:ee:9e:ee:18:9c:ec:48:2b:0c:18:d9:b2:68:05:6a:fa:
0d:f6:bf:33:31:24:38:5b:2e:cf:98:f6:54:cc:c2:71:7c:80:
db:b1:61:c8:c1:8b:3f:67:af:2a:52:80:03:79:3e:38:09:8c:
99:13:93:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/rF8Vl7mkd4lUzJloz4ySvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjYwODEwMDk1MzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTYzMjA3OTRlYmExNDZjYzA2ODdiYjMwMGZmZTc1YWM0ZTE0NmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmNywFupcoCanjwxQBcbDnzto5nI
Qu1nU5ybrSSVZsrdXBFUeG36fTzCKOHozhC1A5AsJrUnegPLchUGfEMv0chpgtfZ
9L50M0UZgYojCVHkVy7XOcrdIyJ4NWzDH90jLNVjo5y14ILeLFvPD3dgCi5Ns0+a
8UJpkXxJgenEhgYYrANGllx8bhWsChmfiHIdoJ+0ZP1EHuClI7ZV4qBHAQo/MDiY
oKnSZd7rp3IBkU/chAAGGDNmpKK+VhosDBVsK7QmcYG7BWwmAGWYUd0czAxHpZK/
Za8jYjgb7ruMwNZnnq9+rUjZRM60ubuQBKZ0hPdvQK15WZFrLhHagDFK/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVjIHlOuhRswGh7swD/51rE4UanMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvNVdNZ2VVNjZGR3pBYUh1ekFQX25Xc1RoUnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufkMA0G
CSqGSIb3DQEBCwUAA4IBAQBirPbBwvw1YfQCyciQuZcxjaLnYDhBGoWgYeU6Q7d8
9tADe93ZQorSDvFerpThn/+TtOk4HD77OgoGA7AhdzUMIRUBymmx6nUoNf1sVktr
5SWUlGmppw5HRIrd8X/OxxbQL+iYV6FoO9HFgdld2gMn0r1rgwJeI6R07cLzDLYo
rWBTIpWwKBDhN3Qvj6o646ZjwpkUZ/Yxfh/RI9GQculoFcSgYIROGrmd1pNqiEvZ
Q94lr0iCOVTOG95Dm2zdrV4VEsGkAu4Yeu6e7hic7EgrDBjZsmgFavoN9r8zMSQ4
Wy7PmPZUzMJxfIDbsWHIwYs/Z68qUoADeT44CYyZE5NA
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:10:02 2026 by rpki-client