Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/G5vOXOrwN65Z2knRIyhIi4ajxcg.roa
File: G5vOXOrwN65Z2knRIyhIi4ajxcg.roa (raw, json)
Hash identifier: f8yA2/LEOIBl9ojrViXKWuA2P7J9LHfkPPc+NV8fLDY=
Subject key identifier: 1B:9B:CE:5C:EA:F0:37:AE:59:DA:49:D1:23:28:48:8B:86:A3:C5:C8
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 01A019C3F4DA2BA6845D7E2EB0742DE04EA0
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/G5vOXOrwN65Z2knRIyhIi4ajxcg.roa
Signing time: Wed 19 Aug 2026 11:24:27 +0000
ROA not before: Wed 19 Aug 2026 11:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 95.111.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:c3:f4:da:2b:a6:84:5d:7e:2e:b0:74:2d:e0:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Aug 19 11:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b9bce5ceaf037ae59da49d12328488b86a3c5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:b0:6d:c3:1a:fa:ff:d6:88:ba:43:ba:ab:
0f:83:d1:2b:71:8f:49:e6:ac:ad:e0:d1:4a:c8:cc:
23:2f:2f:3b:6b:52:ab:43:95:3f:7a:5a:e9:66:ba:
b3:d8:79:f9:c2:72:04:59:7e:84:52:34:3b:1a:b6:
bc:f3:9f:16:0d:3b:a3:39:be:6a:6f:09:99:61:4e:
74:ad:79:db:80:3e:af:5e:1f:d9:72:1b:b3:4c:4a:
e3:ea:be:23:48:67:8f:73:1f:49:b3:c7:f4:d3:04:
1f:f8:37:b9:dc:24:5b:0a:a5:4a:22:c4:c4:98:a1:
18:74:d4:71:76:dd:e6:f7:95:b7:9f:6f:18:2f:6e:
7f:62:50:68:92:03:6c:ed:6b:77:8f:b6:7b:34:86:
60:61:77:2c:76:9c:10:6a:cb:71:bd:b7:19:e3:f2:
ad:64:69:bd:52:24:bb:39:e4:14:36:63:81:5f:f6:
f8:4c:a2:73:45:1a:5b:86:63:45:dc:17:3e:34:62:
f6:5e:d2:8a:6f:28:36:c2:d4:dd:24:cd:a1:c5:a8:
67:75:d9:36:a0:40:e1:50:9d:a6:b5:f5:68:06:f6:
47:3f:e7:9d:f0:ce:13:31:7e:c0:24:98:ff:27:c4:
cc:f4:2c:dc:5f:ae:74:de:dd:21:c7:55:3e:e7:d4:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:CE:5C:EA:F0:37:AE:59:DA:49:D1:23:28:48:8B:86:A3:C5:C8
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/G5vOXOrwN65Z2knRIyhIi4ajxcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:df:af:8a:29:c9:2c:eb:c4:08:40:2a:6b:1a:31:85:fa:
b5:2b:77:58:3f:15:73:f5:a3:b5:57:b1:d5:65:e3:7e:d7:f6:
67:74:b8:d8:f5:83:44:4c:5d:32:7a:e6:74:a3:5f:3f:2a:f6:
5e:1b:cd:02:ea:17:0c:d9:18:44:f5:19:8f:e5:08:7a:39:c1:
4a:f0:7b:75:0c:80:88:40:37:5e:3d:39:a1:08:39:0b:f6:9e:
2d:15:6f:43:ed:98:a5:25:f3:6b:88:21:66:75:14:a2:26:1e:
f5:f7:9e:3a:8b:36:7d:3d:14:71:07:5a:1d:57:33:9d:fc:c6:
72:99:3d:0b:34:17:f7:a9:c2:20:14:37:e6:ba:04:df:cf:66:
91:25:01:23:43:d1:2a:63:16:33:b0:15:e2:40:31:49:30:1e:
86:c1:0c:10:d1:e5:e4:1a:6f:b3:23:95:95:68:c2:9f:3e:30:
aa:ae:d3:f8:60:b7:bf:f5:f3:38:50:1f:85:7b:82:40:3e:5e:
20:3c:0e:22:db:17:df:29:62:bd:b7:96:40:be:cb:8a:aa:02:
66:ab:ea:ef:39:cf:94:cf:e3:48:08:0c:d0:e0:b1:84:c2:e4:
88:e7:53:2b:1c:c3:7e:5a:43:0f:39:52:02:23:35:5c:c9:ce:
c5:49:9b:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAZw/TaK6aEXX4usHQt4E6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjYwODE5MTEyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjliY2U1Y2VhZjAzN2FlNTlkYTQ5ZDEyMzI4NDg4Yjg2YTNjNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzmwbcMa+v/WiLpDuqsPg9ErcY9J
5qyt4NFKyMwjLy87a1KrQ5U/elrpZrqz2Hn5wnIEWX6EUjQ7Gra8858WDTujOb5q
bwmZYU50rXnbgD6vXh/ZchuzTErj6r4jSGePcx9Js8f00wQf+De53CRbCqVKIsTE
mKEYdNRxdt3m95W3n28YL25/YlBokgNs7Wt3j7Z7NIZgYXcsdpwQastxvbcZ4/Kt
ZGm9UiS7OeQUNmOBX/b4TKJzRRpbhmNF3Bc+NGL2XtKKbyg2wtTdJM2hxahnddk2
oEDhUJ2mtfVoBvZHP+ed8M4TMX7AJJj/J8TM9CzcX6503t0hx1U+59Q3jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBubzlzq8DeuWdpJ0SMoSIuGo8XIMB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvRzV2T1hPcndONjVaMmtuUkl5aElpNGFqeGNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX2+FMA0G
CSqGSIb3DQEBCwUAA4IBAQAgmt+viinJLOvECEAqaxoxhfq1K3dYPxVz9aO1V7HV
ZeN+1/ZndLjY9YNETF0yeuZ0o18/KvZeG80C6hcM2RhE9RmP5Qh6OcFK8Ht1DICI
QDdePTmhCDkL9p4tFW9D7ZilJfNriCFmdRSiJh719546izZ9PRRxB1odVzOd/MZy
mT0LNBf3qcIgFDfmugTfz2aRJQEjQ9EqYxYzsBXiQDFJMB6GwQwQ0eXkGm+zI5WV
aMKfPjCqrtP4YLe/9fM4UB+Fe4JAPl4gPA4i2xffKWK9t5ZAvsuKqgJmq+rvOc+U
z+NICAzQ4LGEwuSI51MrHMN+WkMPOVICIzVcyc7FSZtd
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:31:27 2026 by rpki-client