Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa
File: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (raw, json)
Hash identifier: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=
Subject key identifier: E5:5B:AE:D1:E3:3A:5B:21:C3:F0:66:F2:99:5F:17:0F:65:F5:1B:22
Certificate issuer: /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial: 019D0AE40A19AE8E534F3634B73CDF12ACC2
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa
Signing time: Fri 20 Mar 2026 10:56:50 +0000
ROA not before: Fri 20 Mar 2026 10:56:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12732
IP address blocks: 2001:67c:278c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 10:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e4:0a:19:ae:8e:53:4f:36:34:b7:3c:df:12:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
Validity
Not Before: Mar 20 10:56:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e55baed1e33a5b21c3f066f2995f170f65f51b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:b6:f9:15:2f:1c:9f:82:95:c6:ef:57:6f:
3f:5d:5d:b5:57:bd:3a:34:ba:d5:e8:23:13:d6:cd:
88:cf:ea:79:f5:da:72:41:8d:d2:83:d8:42:0d:df:
ac:6e:26:8c:f2:68:28:9c:ce:92:4a:30:2c:bd:48:
e4:ee:51:72:08:1e:0f:65:72:02:fe:e5:28:43:c0:
f4:a1:c7:2f:e2:f5:f6:a0:c5:3b:38:22:c1:bd:cc:
79:54:ef:0b:ba:fa:22:08:38:6b:35:6f:cc:96:d4:
57:dc:59:ca:93:04:59:e4:0b:53:e3:d1:49:b5:7a:
a3:d8:8a:c8:86:e8:b1:3a:8c:73:8f:31:d7:2d:38:
f5:17:6f:f7:71:f8:1b:fb:1f:20:9d:94:f8:91:9d:
73:67:13:1f:25:31:87:11:ba:9d:9c:2b:db:92:99:
ec:b1:f6:33:86:66:e4:09:16:79:b4:57:6a:3d:2f:
6f:1e:6d:1a:e0:36:73:f2:cd:f8:ab:ad:34:79:d2:
5e:c7:41:38:52:41:35:a4:fc:7d:85:fd:8c:75:e5:
69:fd:ae:2c:9d:59:20:15:ee:cb:7d:1e:88:6e:f1:
91:fb:1e:ef:d7:c5:a0:e6:c4:85:dd:65:a6:79:39:
28:2f:c3:5b:c6:87:cd:e4:67:53:5d:c3:5a:04:64:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:AE:D1:E3:3A:5B:21:C3:F0:66:F2:99:5F:17:0F:65:F5:1B:22
X509v3 Authority Key Identifier:
keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:278c::/48
Signature Algorithm: sha256WithRSAEncryption
32:a7:90:34:f8:26:de:d6:9b:b5:b1:31:ff:2b:15:ae:37:42:
94:85:ff:75:2b:90:f7:36:9d:61:af:ff:2c:13:97:c4:62:e3:
a7:b1:2f:f4:37:7d:96:3b:30:18:c9:39:18:85:af:fd:d4:fc:
d8:d0:63:92:d2:b3:fc:25:cc:79:06:a6:e8:5e:fa:f4:62:f3:
ba:93:6b:47:92:83:36:d0:59:b6:d4:ec:8d:95:52:f8:31:a7:
5a:f7:bb:be:1e:2d:ca:10:71:38:f2:b0:fc:a4:6b:d8:92:65:
e5:92:1f:ca:81:25:45:2e:6a:a1:9f:55:df:41:18:dd:48:67:
69:6c:c1:96:51:74:54:45:c2:57:e3:2e:ea:52:0f:4a:09:75:
09:95:20:a7:c7:b3:e2:c2:73:b3:8d:3b:bb:37:bb:6e:fc:cb:
ea:33:66:19:0a:01:04:e2:1a:a9:19:df:02:83:af:b2:2c:43:
5f:e0:f2:19:0f:22:4d:cb:c1:71:d2:ed:bf:20:5e:19:e0:ca:
a8:22:f2:64:9c:7f:5c:4b:49:dc:bd:09:21:3d:13:30:e3:33:
70:05:63:6a:dd:d9:41:8b:cd:fe:ea:28:3a:2e:ac:b8:b6:d5:
18:4f:72:cc:a8:34:16:39:78:c2:01:1e:da:17:8e:76:9f:88:
2f:a9:a5:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0K5AoZro5TTzY0tzzfEqzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWIzZTU2ZWY5MzE5MGU1MDZkNzI4MTliY2NhNjc4OWFk
OTIxNDAwHhcNMjYwMzIwMTA1NjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTViYWVkMWUzM2E1YjIxYzNmMDY2ZjI5OTVmMTcwZjY1ZjUxYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1G2+RUvHJ+ClcbvV28/XV21V706
NLrV6CMT1s2Iz+p59dpyQY3Sg9hCDd+sbiaM8mgonM6SSjAsvUjk7lFyCB4PZXIC
/uUoQ8D0occv4vX2oMU7OCLBvcx5VO8LuvoiCDhrNW/MltRX3FnKkwRZ5AtT49FJ
tXqj2IrIhuixOoxzjzHXLTj1F2/3cfgb+x8gnZT4kZ1zZxMfJTGHEbqdnCvbkpns
sfYzhmbkCRZ5tFdqPS9vHm0a4DZz8s34q600edJex0E4UkE1pPx9hf2MdeVp/a4s
nVkgFe7LfR6IbvGR+x7v18Wg5sSF3WWmeTkoL8NbxofN5GdTXcNaBGThbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOVbrtHjOlshw/Bm8plfFw9l9RsiMB8GA1UdIwQY
MBaAFIdbPlbvkxkOUG1ygZvMpnia2SFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFzLVZ1LVRHUTVRYlhLQm04eW1lSnJaSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xOWNmYzItZjE5MC00MTEwLTljOWEt
ZWQzYzU2ZTFkNzg4LzEvNVZ1dTBlTTZXeUhEOEdieW1WOFhEMlgxR3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xOWNmYzItZjE5MC00MTEwLTljOWEtZWQzYzU2ZTFkNzg4
LzEvaDFzLVZ1LVRHUTVRYlhLQm04eW1lSnJaSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCeM
MA0GCSqGSIb3DQEBCwUAA4IBAQAyp5A0+Cbe1pu1sTH/KxWuN0KUhf91K5D3Np1h
r/8sE5fEYuOnsS/0N32WOzAYyTkYha/91PzY0GOS0rP8Jcx5BqboXvr0YvO6k2tH
koM20Fm21OyNlVL4Mada97u+Hi3KEHE48rD8pGvYkmXlkh/KgSVFLmqhn1XfQRjd
SGdpbMGWUXRURcJX4y7qUg9KCXUJlSCnx7PiwnOzjTu7N7tu/MvqM2YZCgEE4hqp
Gd8Cg6+yLENf4PIZDyJNy8Fx0u2/IF4Z4MqoIvJknH9cS0ncvQkhPRMw4zNwBWNq
3dlBi83+6ig6Lqy4ttUYT3LMqDQWOXjCAR7aF452n4gvqaVO
-----END CERTIFICATE-----
Generated at Fri Mar 20 17:04:04 2026 by rpki-client