Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5lZSlukstep8t8iGtcspGGIXudc.roa
File: 5lZSlukstep8t8iGtcspGGIXudc.roa (raw, json)
Hash identifier: 2HisxFB+lIfH6x5qfJ2BbD71zUZkoyCOyQw011g7v5Y=
Subject key identifier: E6:56:52:96:E9:2C:B5:EA:7C:B7:C8:86:B5:CB:29:18:62:17:B9:D7
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A15DCDFEF6FC550E8FFB66AF1FC60AE100
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5lZSlukstep8t8iGtcspGGIXudc.roa
Signing time: Wed 21 Oct 2026 09:32:23 +0000
ROA not before: Wed 21 Oct 2026 09:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47823
IP address blocks: 185.94.196.0/22 maxlen: 24
193.219.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:cd:fe:f6:fc:55:0e:8f:fb:66:af:1f:c6:0a:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 21 09:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6565296e92cb5ea7cb7c886b5cb29186217b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:b5:bc:75:29:bd:2e:70:97:ce:5e:f1:b6:
ee:af:77:25:8a:de:4f:b1:d6:26:91:43:38:95:0f:
4a:14:b6:f9:86:36:34:88:f8:36:b0:e3:d8:24:a0:
7f:6b:07:25:a1:83:f0:d8:2c:1e:ca:6d:90:b8:e8:
6a:74:fb:4e:83:2a:64:dd:21:aa:92:ca:51:2d:30:
f0:41:b0:fe:ea:49:b0:9c:ee:53:0a:7c:87:7c:d2:
b9:10:b3:fa:22:47:71:9f:cb:49:ea:b7:61:26:8c:
b2:d5:e1:b3:4c:4a:8e:1f:02:35:6a:a2:b0:e2:8d:
2d:f4:f8:d1:6b:76:97:fe:b7:9c:d6:37:36:21:28:
7e:70:92:0d:64:f7:4c:01:45:c3:63:ab:85:fb:34:
76:16:15:11:56:1e:b9:76:68:9e:87:f5:52:6a:f8:
19:ec:03:33:39:ec:02:c4:4e:a6:85:2f:12:4b:a8:
3f:7f:e0:cd:bf:2b:5d:e5:d5:01:cb:fa:19:a3:9d:
34:c1:f9:a7:f8:23:94:45:d1:ee:74:f6:3d:27:c8:
64:aa:14:25:58:10:30:2b:d5:ad:82:4b:fc:74:bb:
4f:0a:69:24:a0:1d:98:a8:ae:d1:f4:4c:4e:c6:5b:
52:15:de:e8:e7:e3:c1:5c:16:18:e8:a7:21:40:36:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:52:96:E9:2C:B5:EA:7C:B7:C8:86:B5:CB:29:18:62:17:B9:D7
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5lZSlukstep8t8iGtcspGGIXudc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.196.0/22
193.219.121.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0c:3b:47:ec:e5:63:ea:3c:83:7a:10:61:8d:fa:6e:2c:e3:
09:25:0d:b8:5c:a3:55:e0:ab:29:7f:3a:f7:00:b3:3a:6c:79:
07:24:ba:f3:f6:1f:6d:69:7e:b9:40:fc:1f:b3:4d:cf:5d:37:
56:c7:68:b7:8c:76:c6:96:eb:34:7b:68:dd:f2:5c:ce:1b:47:
c6:3b:d8:18:03:18:d4:2c:27:48:1e:8c:14:4a:f7:7b:4e:ec:
c4:0c:aa:b7:9c:ed:f2:6f:e2:16:b2:f6:4d:aa:1e:de:71:25:
14:79:94:64:a4:36:45:5c:7b:35:c2:41:fe:04:1c:77:7c:c8:
97:d2:fc:31:76:c3:86:7e:8b:8c:b9:a6:9b:7e:9d:d6:95:e9:
94:08:0c:51:46:a2:b6:f2:9e:3b:48:4d:98:7a:37:05:ea:e5:
cc:3f:7b:d4:1a:e1:0d:7b:ee:1c:29:f0:8e:5f:bf:7a:a9:69:
08:6c:f0:a8:3d:5b:35:18:96:a7:5b:e7:39:ca:5f:bf:d4:6c:
c9:61:90:88:19:ef:35:a3:e3:1d:32:d1:06:2f:a1:2f:40:0f:
73:76:e3:ee:d4:3e:00:d7:e8:13:84:2c:b4:7b:95:be:94:17:
63:71:76:82:73:b3:73:bb:9e:e3:15:dd:1a:f1:ef:bf:5a:2c:
4d:5a:da:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFdzf72/FUOj/tmrx/GCuEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYxMDIxMDkzMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjU2NTI5NmU5MmNiNWVhN2NiN2M4ODZiNWNiMjkxODYyMTdiOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJy1vHUpvS5wl85e8bbur3clit5P
sdYmkUM4lQ9KFLb5hjY0iPg2sOPYJKB/awcloYPw2Cweym2QuOhqdPtOgypk3SGq
kspRLTDwQbD+6kmwnO5TCnyHfNK5ELP6Ikdxn8tJ6rdhJoyy1eGzTEqOHwI1aqKw
4o0t9PjRa3aX/rec1jc2ISh+cJINZPdMAUXDY6uF+zR2FhURVh65dmieh/VSavgZ
7AMzOewCxE6mhS8SS6g/f+DNvytd5dUBy/oZo500wfmn+COURdHudPY9J8hkqhQl
WBAwK9Wtgkv8dLtPCmkkoB2YqK7R9ExOxltSFd7o5+PBXBYY6KchQDbczQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOZWUpbpLLXqfLfIhrXLKRhiF7nXMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvNWxaU2x1a3N0ZXA4dDhpR3Rjc3BHR0lYdWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuV7EAwQA
wdt5MA0GCSqGSIb3DQEBCwUAA4IBAQB0DDtH7OVj6jyDehBhjfpuLOMJJQ24XKNV
4Kspfzr3ALM6bHkHJLrz9h9taX65QPwfs03PXTdWx2i3jHbGlus0e2jd8lzOG0fG
O9gYAxjULCdIHowUSvd7TuzEDKq3nO3yb+IWsvZNqh7ecSUUeZRkpDZFXHs1wkH+
BBx3fMiX0vwxdsOGfouMuaabfp3WlemUCAxRRqK28p47SE2YejcF6uXMP3vUGuEN
e+4cKfCOX796qWkIbPCoPVs1GJanW+c5yl+/1GzJYZCIGe81o+MdMtEGL6EvQA9z
duPu1D4A1+gThCy0e5W+lBdjcXaCc7Nzu57jFd0a8e+/WixNWtpK
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:25 2026 by rpki-client