Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/5IV12lakLjQprnJbcxcyiQamHtA.roa
File: 5IV12lakLjQprnJbcxcyiQamHtA.roa (raw, json)
Hash identifier: GZi6paQkvtZZMZ1EN5RWiQ6i/+Ni0PcRMjzr4OYZpu8=
Subject key identifier: E4:85:75:DA:56:A4:2E:34:29:AE:72:5B:73:17:32:89:06:A6:1E:D0
Certificate issuer: /CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Certificate serial: 019F23687690FD9B349ACF676D5F1BDDD747
Authority key identifier: 3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/5IV12lakLjQprnJbcxcyiQamHtA.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 91.233.61.0/24 maxlen: 24
185.179.176.0/24 maxlen: 24
213.5.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:90:fd:9b:34:9a:cf:67:6d:5f:1b:dd:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48575da56a42e3429ae725b7317328906a61ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:33:e1:0d:bf:27:9e:05:7b:62:56:1e:77:
5f:41:bf:d3:7b:d1:04:ed:07:ec:0e:db:20:26:ae:
4d:83:df:a1:d6:dd:5c:5d:d9:b3:62:e8:10:10:7a:
b4:a3:e8:38:21:88:9b:be:01:f6:68:55:93:18:b7:
01:da:c0:1b:f0:a7:84:2d:46:46:3d:d1:77:d3:48:
5a:59:5a:4c:b5:f0:bf:8f:18:49:28:b3:be:76:ef:
89:a1:d0:1e:99:94:17:dd:31:10:21:73:ce:57:81:
ca:d8:c7:7f:b1:94:f3:84:e8:72:d0:8f:8a:09:9d:
9a:e8:1b:98:f7:0c:db:ed:d1:3d:83:55:9f:32:97:
93:66:2a:d0:ef:ee:88:7e:bd:dc:0a:93:5a:69:67:
5e:67:80:9e:cd:72:7e:86:8d:d7:ce:e1:d5:61:7c:
e0:f8:a2:3d:b1:5c:6b:31:3f:19:3c:d0:9d:5d:91:
9f:f6:3e:29:06:b8:95:d7:3d:fe:82:d5:27:53:10:
9f:d7:a4:77:6d:0a:20:5a:21:be:d6:8c:38:ec:c4:
a3:5c:f0:8d:7f:f0:0d:55:f2:34:3b:d7:8a:8b:3d:
d9:7d:56:70:18:52:1d:0e:65:e6:de:55:07:1f:d0:
a0:fa:0e:e7:83:af:3c:13:5f:24:2e:0e:45:05:c0:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:75:DA:56:A4:2E:34:29:AE:72:5B:73:17:32:89:06:A6:1E:D0
X509v3 Authority Key Identifier:
keyid:3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/5IV12lakLjQprnJbcxcyiQamHtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.61.0/24
185.179.176.0/24
213.5.226.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2e:92:e6:22:b6:ea:ad:a8:af:77:77:51:f7:e4:89:1c:6a:
1b:dc:f7:f0:70:dc:fb:0e:6e:5f:da:b1:19:fb:3d:05:fc:f4:
70:43:bb:9f:e9:ad:66:40:20:a1:fe:a9:1b:37:c9:80:74:8b:
05:b7:6c:21:66:38:bb:56:be:70:06:f2:77:85:2f:6c:c9:6a:
16:6c:2f:84:97:1f:15:db:00:a1:ba:76:20:1b:39:87:97:62:
18:c8:86:38:bc:88:d9:27:20:80:80:31:54:0e:61:85:7c:85:
83:fb:e4:23:60:f4:fa:9f:e7:41:17:7c:c8:41:32:81:79:3a:
ae:58:56:9f:be:ad:dd:9f:b6:6b:e4:95:f9:f5:f1:55:70:85:
d2:30:55:bf:09:16:88:42:3d:ca:62:1d:e1:0b:90:40:b4:bf:
3d:1e:2d:ad:a8:4a:74:23:c8:fb:e6:fb:0a:37:ba:a3:92:c9:
d5:18:50:0a:b4:cd:91:c4:e6:d1:c8:28:7c:21:28:91:9f:32:
66:58:de:72:f2:11:8a:e4:94:cd:53:22:20:ea:c5:67:79:2b:
0a:09:5d:71:03:d8:77:2a:00:70:e6:bc:15:41:84:76:64:05:
ff:d0:35:f9:a8:b5:78:01:66:01:ec:94:9e:05:d4:32:a3:d7:
65:64:1f:2e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaHaQ/Zs0ms9nbV8b3ddHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTE2YzAzOGYxOGFlM2E2MzVmNzBiYjVmNTcyOTFkMTlj
MmZkNjgwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDg1NzVkYTU2YTQyZTM0MjlhZTcyNWI3MzE3MzI4OTA2YTYxZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpkz4Q2/J54Fe2JWHndfQb/Te9EE
7QfsDtsgJq5Ng9+h1t1cXdmzYugQEHq0o+g4IYibvgH2aFWTGLcB2sAb8KeELUZG
PdF300haWVpMtfC/jxhJKLO+du+JodAemZQX3TEQIXPOV4HK2Md/sZTzhOhy0I+K
CZ2a6BuY9wzb7dE9g1WfMpeTZirQ7+6Ifr3cCpNaaWdeZ4CezXJ+ho3XzuHVYXzg
+KI9sVxrMT8ZPNCdXZGf9j4pBriV1z3+gtUnUxCf16R3bQogWiG+1ow47MSjXPCN
f/ANVfI0O9eKiz3ZfVZwGFIdDmXm3lUHH9Cg+g7ng688E18kLg5FBcAj+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOSFddpWpC40Ka5yW3MXMokGph7QMB8GA1UdIwQY
MBaAFDzhbAOPGK46Y19wu19XKR0Zwv1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt
MjQ1MTVhMTRjNDU2LzEvNUlWMTJsYWtMalFwcm5KYmN4Y3lpUWFtSHRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2
LzEvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+k9AwQA
ubOwAwQA1QXiMA0GCSqGSIb3DQEBCwUAA4IBAQB3LpLmIrbqraivd3dR9+SJHGob
3PfwcNz7Dm5f2rEZ+z0F/PRwQ7uf6a1mQCCh/qkbN8mAdIsFt2whZji7Vr5wBvJ3
hS9syWoWbC+Elx8V2wChunYgGzmHl2IYyIY4vIjZJyCAgDFUDmGFfIWD++QjYPT6
n+dBF3zIQTKBeTquWFafvq3dn7Zr5JX59fFVcIXSMFW/CRaIQj3KYh3hC5BAtL89
Hi2tqEp0I8j75vsKN7qjksnVGFAKtM2RxObRyCh8ISiRnzJmWN5y8hGK5JTNUyIg
6sVneSsKCV1xA9h3KgBw5rwVQYR2ZAX/0DX5qLV4AWYB7JSeBdQyo9dlZB8u
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:45 2026 by rpki-client