Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5QNKUgTDtxWG97b1yzXgEnEyZ_s.roa
File: 5QNKUgTDtxWG97b1yzXgEnEyZ_s.roa (raw, json)
Hash identifier: xy9t6wuLBFG2DKZT5NTzv3NjvbTR6AOtGH9rdQeAGWU=
Subject key identifier: E5:03:4A:52:04:C3:B7:15:86:F7:B6:F5:CB:35:E0:12:71:32:67:FB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0A610188AF2B2043EBAB0F6CD6C541E8D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5QNKUgTDtxWG97b1yzXgEnEyZ_s.roa
Signing time: Tue 15 Sep 2026 17:14:27 +0000
ROA not before: Tue 15 Sep 2026 17:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 185.230.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:10:18:8a:f2:b2:04:3e:ba:b0:f6:cd:6c:54:1e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 15 17:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5034a5204c3b71586f7b6f5cb35e012713267fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:f4:ce:c4:00:0c:88:0d:61:3e:4f:d6:7d:
0f:02:7f:4a:6c:0b:b2:60:9e:bc:99:82:63:57:ab:
82:f7:4b:80:60:78:c1:56:7e:95:27:d9:7c:72:38:
eb:23:dc:be:d8:e5:3a:84:99:dc:25:36:0e:c6:8e:
54:72:12:a1:11:fa:9b:f7:67:53:b1:63:a5:13:da:
e4:8d:a1:8e:97:13:47:26:25:0b:ba:cf:88:3b:97:
45:b0:c9:5a:f8:56:69:f7:48:da:a9:e8:f0:5b:01:
f1:14:94:b8:b6:1f:51:a5:4b:4e:4b:d4:49:4d:ea:
ce:55:49:5c:f2:3f:96:57:19:bb:08:1c:3a:dc:fd:
63:99:1d:74:2a:8c:87:33:33:17:dc:2f:1a:f2:4d:
a8:a6:6d:c5:86:84:1d:9a:9d:64:cb:c2:9b:39:d7:
09:cd:a3:03:a7:02:4f:88:ad:ba:33:85:fa:e3:11:
18:c4:3e:2c:5d:fe:e6:66:f1:3c:66:f9:6b:c4:39:
3f:4f:bf:aa:8b:33:2b:28:0b:36:4e:a4:37:ee:e0:
51:92:30:79:aa:57:97:4a:b2:7f:bb:f9:59:be:27:
62:72:e2:ef:06:69:04:3e:3e:7c:cf:14:76:e0:c7:
8c:a3:de:bb:c9:37:39:9f:37:ee:37:00:70:2a:dc:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:03:4A:52:04:C3:B7:15:86:F7:B6:F5:CB:35:E0:12:71:32:67:FB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5QNKUgTDtxWG97b1yzXgEnEyZ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.54.0/23
Signature Algorithm: sha256WithRSAEncryption
13:89:15:ed:b5:98:34:ae:51:c7:90:53:9e:96:f1:59:7b:74:
ff:96:80:83:a1:eb:ac:a2:fd:9a:07:4a:f9:cb:cb:dd:f4:37:
74:69:16:3f:29:43:56:46:1b:03:b5:26:d2:05:1b:24:3f:70:
95:0c:96:4b:af:3e:20:c4:17:4e:90:eb:2f:45:c1:09:2a:3d:
b9:ef:e9:1e:e1:e1:4a:1b:b6:69:08:64:70:7e:50:05:a4:30:
fe:b3:44:b2:f8:44:23:7e:e5:4c:c1:a1:cb:b7:01:d5:21:31:
ae:c2:26:cd:17:fd:62:6c:a3:39:66:2b:f8:54:e6:f6:d5:da:
4b:c8:8a:26:ab:d9:84:9f:9f:fe:39:3e:32:1f:32:04:13:6d:
53:fc:b2:5a:35:21:75:76:65:62:24:84:d1:69:f8:24:b4:57:
05:5a:e8:24:4d:2a:b4:9b:79:a7:ba:7c:37:16:23:53:54:8d:
75:aa:89:d6:70:ac:46:32:f7:28:e5:ed:43:eb:ae:f8:8e:df:
9d:09:e7:1d:03:ab:d3:9d:38:27:4d:d8:c7:85:e7:c5:55:3d:
a4:68:00:86:86:1e:37:27:36:a4:c3:97:d9:94:10:ec:c5:e3:
86:6e:8e:86:5a:4f:90:06:64:3c:bb:96:97:13:dc:2b:e0:d2:
20:93:94:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCmEBiK8rIEPrqw9s1sVB6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwOTE1MTcxNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTAzNGE1MjA0YzNiNzE1ODZmN2I2ZjVjYjM1ZTAxMjcxMzI2N2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDn0zsQADIgNYT5P1n0PAn9KbAuy
YJ68mYJjV6uC90uAYHjBVn6VJ9l8cjjrI9y+2OU6hJncJTYOxo5UchKhEfqb92dT
sWOlE9rkjaGOlxNHJiULus+IO5dFsMla+FZp90jaqejwWwHxFJS4th9RpUtOS9RJ
TerOVUlc8j+WVxm7CBw63P1jmR10KoyHMzMX3C8a8k2opm3FhoQdmp1ky8KbOdcJ
zaMDpwJPiK26M4X64xEYxD4sXf7mZvE8ZvlrxDk/T7+qizMrKAs2TqQ37uBRkjB5
qleXSrJ/u/lZvidicuLvBmkEPj58zxR24MeMo967yTc5nzfuNwBwKtzyqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUDSlIEw7cVhve29cs14BJxMmf7MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNVFOS1VnVER0eFdHOTdiMXl6WGdFbkV5Wl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueY2MA0G
CSqGSIb3DQEBCwUAA4IBAQATiRXttZg0rlHHkFOelvFZe3T/loCDoeusov2aB0r5
y8vd9Dd0aRY/KUNWRhsDtSbSBRskP3CVDJZLrz4gxBdOkOsvRcEJKj257+ke4eFK
G7ZpCGRwflAFpDD+s0Sy+EQjfuVMwaHLtwHVITGuwibNF/1ibKM5Ziv4VOb21dpL
yIomq9mEn5/+OT4yHzIEE21T/LJaNSF1dmViJITRafgktFcFWugkTSq0m3mnunw3
FiNTVI11qonWcKxGMvco5e1D6674jt+dCecdA6vTnTgnTdjHhefFVT2kaACGhh43
Jzakw5fZlBDsxeOGbo6GWk+QBmQ8u5aXE9wr4NIgk5R+
-----END CERTIFICATE-----
Generated at Tue Sep 15 23:24:41 2026 by rpki-client