Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/5fU_xs0EEgSMGfBZP3SSuRqBI8Y.roa
File: 5fU_xs0EEgSMGfBZP3SSuRqBI8Y.roa (raw, json)
Hash identifier: 5waSnyUntbdrIupQ0AXFYbyfHR9BZyMzO6WszJloMOU=
Subject key identifier: E5:F5:3F:C6:CD:04:12:04:8C:19:F0:59:3F:74:92:B9:1A:81:23:C6
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 01A177C90526E8EE0BF3167FE567105C27A1
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/5fU_xs0EEgSMGfBZP3SSuRqBI8Y.roa
Signing time: Mon 26 Oct 2026 10:37:05 +0000
ROA not before: Mon 26 Oct 2026 10:37:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41493
IP address blocks: 195.24.250.0/24 maxlen: 24
195.93.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:c9:05:26:e8:ee:0b:f3:16:7f:e5:67:10:5c:27:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Oct 26 10:37:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5f53fc6cd0412048c19f0593f7492b91a8123c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:a6:1e:21:b7:f5:f8:47:29:3c:1f:21:e2:
08:d8:8b:55:0d:97:9c:8d:98:b6:1d:b0:be:27:fe:
a0:17:b1:85:ee:ee:11:66:ed:de:3f:e5:e7:74:57:
4d:20:01:27:ea:ec:54:0c:82:c4:45:6c:f7:ed:8a:
29:ae:97:78:5c:13:4c:f5:11:f5:e2:02:64:a1:f0:
99:2e:3c:ef:8c:ab:e3:2c:a8:c3:6f:61:1e:50:82:
24:65:66:60:1a:50:95:14:6c:fc:43:3f:e3:1a:9d:
b5:f8:39:f2:ee:6c:e0:37:90:bb:2c:3f:7d:53:b3:
1f:48:76:33:97:68:28:7d:78:c6:12:d9:a2:6d:89:
5d:d5:96:fd:8f:b0:f2:25:a3:d2:0d:86:dd:40:38:
a8:00:e9:6c:41:26:d0:14:5e:9a:c8:66:86:5c:9c:
3e:cf:01:76:8e:57:76:75:2d:e2:fd:2a:7c:23:de:
c3:d6:1d:ae:b9:e9:5c:8c:9e:78:45:87:e6:ab:9c:
e7:56:ff:c1:bd:f6:d0:27:15:ad:47:eb:87:26:19:
f4:66:8e:ec:19:8d:8d:a4:88:b5:c3:ec:88:a5:bf:
41:d2:5d:a8:49:39:15:99:0d:37:d1:a2:ae:bb:5c:
53:31:dc:53:17:1b:1c:48:2e:30:67:4b:e6:87:80:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F5:3F:C6:CD:04:12:04:8C:19:F0:59:3F:74:92:B9:1A:81:23:C6
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/5fU_xs0EEgSMGfBZP3SSuRqBI8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.250.0/24
195.93.196.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:80:a4:89:d1:e3:08:9b:e9:52:5b:02:ae:85:1e:b3:83:e6:
a5:5e:2c:15:ce:8a:05:15:0a:67:c8:8f:3e:3f:50:33:c5:2b:
ca:e1:a9:e5:ec:53:33:40:e9:22:d6:4e:00:2c:91:d4:04:89:
19:82:2b:da:79:a2:61:5e:e7:31:d1:08:56:cb:0c:d1:d3:26:
b3:fb:a2:64:2e:ea:5f:99:fb:b3:cc:67:bf:8d:94:dd:52:24:
63:5a:08:cb:46:e1:93:83:44:83:5f:ca:6c:23:dc:e2:62:c7:
cf:95:47:19:48:3a:41:ab:b5:e7:a3:26:f6:83:91:e4:78:41:
11:3d:b1:6f:d3:13:d8:d8:56:d5:0c:12:43:76:a6:07:01:c0:
7c:a4:79:27:b0:43:29:76:39:db:1a:77:33:29:90:e2:da:e8:
8b:20:eb:88:23:3b:59:a0:57:b8:12:dc:bf:d6:04:39:a3:50:
7d:37:4b:c4:f1:49:98:4a:78:6c:d1:d7:8e:e1:cb:b7:ff:ac:
ee:09:42:5b:af:e0:54:bf:12:e0:da:d9:08:63:d9:1d:e0:91:
b1:1d:19:3e:c9:da:66:6a:78:e2:97:02:9f:2d:e3:e3:78:19:
27:40:93:b7:e8:b3:74:87:c5:0b:24:38:75:23:55:2a:64:82:
51:57:65:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF3yQUm6O4L8xZ/5WcQXCehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk
MGRjYmMwHhcNMjYxMDI2MTAzNzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWY1M2ZjNmNkMDQxMjA0OGMxOWYwNTkzZjc0OTJiOTFhODEyM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EGmHiG39fhHKTwfIeII2ItVDZec
jZi2HbC+J/6gF7GF7u4RZu3eP+XndFdNIAEn6uxUDILERWz37Yoprpd4XBNM9RH1
4gJkofCZLjzvjKvjLKjDb2EeUIIkZWZgGlCVFGz8Qz/jGp21+Dny7mzgN5C7LD99
U7MfSHYzl2gofXjGEtmibYld1Zb9j7DyJaPSDYbdQDioAOlsQSbQFF6ayGaGXJw+
zwF2jld2dS3i/Sp8I97D1h2uuelcjJ54RYfmq5znVv/BvfbQJxWtR+uHJhn0Zo7s
GY2NpIi1w+yIpb9B0l2oSTkVmQ030aKuu1xTMdxTFxscSC4wZ0vmh4BgoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOX1P8bNBBIEjBnwWT90krkagSPGMB8GA1UdIwQY
MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt
YzUyZGY0YWE1MjFkLzEvNWZVX3hzMEVFZ1NNR2ZCWlAzU1N1UnFCSThZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk
LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwxj6AwQA
w13EMA0GCSqGSIb3DQEBCwUAA4IBAQDngKSJ0eMIm+lSWwKuhR6zg+alXiwVzooF
FQpnyI8+P1AzxSvK4anl7FMzQOki1k4ALJHUBIkZgivaeaJhXucx0QhWywzR0yaz
+6JkLupfmfuzzGe/jZTdUiRjWgjLRuGTg0SDX8psI9ziYsfPlUcZSDpBq7Xnoyb2
g5HkeEERPbFv0xPY2FbVDBJDdqYHAcB8pHknsEMpdjnbGnczKZDi2uiLIOuIIztZ
oFe4Ety/1gQ5o1B9N0vE8UmYSnhs0deO4cu3/6zuCUJbr+BUvxLg2tkIY9kd4JGx
HRk+ydpmanjilwKfLePjeBknQJO36LN0h8ULJDh1I1UqZIJRV2Wf
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:28 2026 by rpki-client