Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/5aXW0pRKlud-aQzlI1uwxyRBm-w.roa
File: 5aXW0pRKlud-aQzlI1uwxyRBm-w.roa (raw, json)
Hash identifier: o7DUWNI5a2gkEo/NC5oveThPiU4wOiiJG6bKNzxtAao=
Subject key identifier: E5:A5:D6:D2:94:4A:96:E7:7E:69:0C:E5:23:5B:B0:C7:24:41:9B:EC
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 01A05D427847905614F2A025F33439AC974F
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/5aXW0pRKlud-aQzlI1uwxyRBm-w.roa
Signing time: Tue 01 Sep 2026 13:57:12 +0000
ROA not before: Tue 01 Sep 2026 13:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 217.194.138.0/24 maxlen: 24
2a0f:fa44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:42:78:47:90:56:14:f2:a0:25:f3:34:39:ac:97:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Sep 1 13:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5a5d6d2944a96e77e690ce5235bb0c724419bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:ed:51:2f:ef:44:86:56:d3:1a:6b:b0:84:
95:d4:72:ce:cd:3b:aa:6e:6d:a4:71:d3:dc:f8:44:
df:1c:74:d5:a6:81:09:5d:46:c9:68:8a:ad:8f:be:
91:2b:2f:d9:93:1c:a9:f0:ff:53:19:25:5a:37:3a:
ce:a5:07:b1:85:40:f4:11:f7:79:c3:11:af:e3:78:
fe:a1:86:f3:b6:77:24:6d:12:e6:bd:ba:39:9a:91:
cd:ef:11:96:b6:b3:0c:10:f8:df:72:6d:6f:47:0f:
b1:a9:4d:ca:52:12:90:97:33:f4:95:43:05:1e:c9:
26:b8:8c:ef:e9:ba:a4:a5:ee:99:c0:5b:ec:53:29:
c2:0e:ed:4f:b1:5c:eb:52:0e:62:f0:7b:db:5a:03:
a8:a9:89:0f:04:22:99:38:c1:27:e3:8f:f5:7c:be:
1f:46:a2:4f:fb:e9:2b:25:5d:34:18:6b:a4:a3:52:
1c:61:70:88:69:71:b6:20:65:b9:88:67:b7:6d:18:
13:6f:29:72:e2:8f:fe:d3:52:62:87:5e:c7:11:21:
28:d2:80:ce:9b:d9:9b:4f:1f:1c:29:f6:0e:10:50:
22:75:c0:ea:2a:9d:83:97:2a:80:cb:98:ce:84:92:
3f:05:60:d7:90:85:2f:33:68:26:29:45:61:8d:1c:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A5:D6:D2:94:4A:96:E7:7E:69:0C:E5:23:5B:B0:C7:24:41:9B:EC
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/5aXW0pRKlud-aQzlI1uwxyRBm-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.138.0/24
IPv6:
2a0f:fa44::/32
Signature Algorithm: sha256WithRSAEncryption
5f:09:9c:2b:0d:1d:e5:40:12:ea:3e:e9:6e:53:10:2c:47:24:
88:4d:44:4f:bc:db:65:ee:1a:99:f4:61:65:ba:d9:c7:57:b7:
4b:98:9b:13:7d:d1:7e:32:10:f2:c9:39:1e:9a:c2:39:a8:17:
33:76:a6:be:91:e4:9a:47:a1:85:32:b1:de:0e:af:d7:31:11:
fe:14:0c:7a:2a:2d:ac:fa:55:91:ad:53:3b:92:b9:c9:58:3d:
87:43:66:91:51:d1:d7:fb:5c:3a:09:46:94:81:31:42:8c:27:
93:e9:f4:a8:26:04:a6:d9:df:dc:75:ea:2b:7a:15:d6:2e:75:
d0:c9:7c:75:e4:f5:5a:9c:68:06:51:ee:d7:50:41:b3:af:aa:
64:f5:5e:c4:15:36:d3:61:19:e2:bb:b2:7c:a3:ad:7a:ce:c7:
5d:b9:ad:a1:6b:f4:00:83:64:d1:14:f6:0c:77:89:c0:54:33:
b9:b9:8d:ff:c8:8a:0d:2a:b5:ff:19:0a:60:11:fa:e0:0d:32:
49:4c:f6:7c:ad:5d:14:1c:bd:42:28:a8:b5:f2:70:12:66:1f:
ac:db:e2:d3:74:f2:07:bb:7f:a1:59:4c:c9:05:1f:9d:f5:95:
9f:50:0e:96:f4:12:53:d3:fe:50:11:51:f3:4b:cb:bc:dc:e3:
59:af:15:23
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaBdQnhHkFYU8qAl8zQ5rJdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjYwOTAxMTM1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWE1ZDZkMjk0NGE5NmU3N2U2OTBjZTUyMzViYjBjNzI0NDE5YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W7tUS/vRIZW0xprsISV1HLOzTuq
bm2kcdPc+ETfHHTVpoEJXUbJaIqtj76RKy/Zkxyp8P9TGSVaNzrOpQexhUD0Efd5
wxGv43j+oYbztnckbRLmvbo5mpHN7xGWtrMMEPjfcm1vRw+xqU3KUhKQlzP0lUMF
HskmuIzv6bqkpe6ZwFvsUynCDu1PsVzrUg5i8HvbWgOoqYkPBCKZOMEn44/1fL4f
RqJP++krJV00GGuko1IcYXCIaXG2IGW5iGe3bRgTbyly4o/+01Jih17HESEo0oDO
m9mbTx8cKfYOEFAidcDqKp2DlyqAy5jOhJI/BWDXkIUvM2gmKUVhjRy33QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOWl1tKUSpbnfmkM5SNbsMckQZvsMB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvNWFYVzBwUktsdWQtYVF6bEkxdXd4eVJCbS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2cKKMA0E
AgACMAcDBQAqD/pEMA0GCSqGSIb3DQEBCwUAA4IBAQBfCZwrDR3lQBLqPuluUxAs
RySITURPvNtl7hqZ9GFlutnHV7dLmJsTfdF+MhDyyTkemsI5qBczdqa+keSaR6GF
MrHeDq/XMRH+FAx6Ki2s+lWRrVM7krnJWD2HQ2aRUdHX+1w6CUaUgTFCjCeT6fSo
JgSm2d/cdeorehXWLnXQyXx15PVanGgGUe7XUEGzr6pk9V7EFTbTYRniu7J8o616
zsddua2ha/QAg2TRFPYMd4nAVDO5uY3/yIoNKrX/GQpgEfrgDTJJTPZ8rV0UHL1C
KKi18nASZh+s2+LTdPIHu3+hWUzJBR+d9ZWfUA6W9BJT0/5QEVHzS8u83ONZrxUj
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:50 2026 by rpki-client