Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5kD8ebFyAYRBjL9zZDM_BA0rydU.roa
File: 5kD8ebFyAYRBjL9zZDM_BA0rydU.roa (raw, json)
Hash identifier: gNWk6zOUThu7OX+sSIk81C3W9qGJqn3Q5HaYYpqkaQc=
Subject key identifier: E6:40:FC:79:B1:72:01:84:41:8C:BF:73:64:33:3F:04:0D:2B:C9:D5
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019CDB409ED24DEB9325A7EF6B278C309A6F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5kD8ebFyAYRBjL9zZDM_BA0rydU.roa
Signing time: Wed 11 Mar 2026 04:56:11 +0000
ROA not before: Wed 11 Mar 2026 04:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43581
IP address blocks: 185.228.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 11:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:40:9e:d2:4d:eb:93:25:a7:ef:6b:27:8c:30:9a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 11 04:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e640fc79b1720184418cbf7364333f040d2bc9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:ac:50:5d:42:70:07:22:bd:93:e2:9c:ca:
73:c7:d4:48:ad:fc:00:3e:82:57:4e:4f:0b:c2:90:
f0:42:63:15:38:69:8a:d6:f7:89:f5:c0:75:2b:e8:
66:26:53:9c:12:54:9b:95:d4:8e:89:d2:2b:58:3e:
81:d7:a9:98:82:0b:a9:d3:27:41:60:da:12:91:a1:
f2:82:17:6c:70:7f:57:6c:49:10:2e:28:9b:db:1d:
6d:24:03:be:af:70:99:f6:6a:c1:ca:66:d9:c1:c7:
a8:61:d3:24:a3:45:a7:fb:5c:aa:b2:1d:9f:37:0e:
10:bd:0a:95:34:66:b0:67:62:79:81:1c:99:7f:72:
86:e6:98:23:ad:87:7d:eb:d1:d8:55:8f:38:d9:32:
b5:da:c6:67:a2:87:67:f7:32:6b:ff:cd:bb:bf:32:
24:52:04:42:7d:17:af:b7:31:db:6e:97:21:e7:25:
bf:0b:7b:b6:4d:13:89:30:1e:63:7c:3a:63:7d:bf:
d9:bd:80:8b:b2:23:8e:8e:84:d0:08:1d:11:18:af:
74:17:00:2e:f7:ad:13:f0:ad:6e:cd:8b:18:a5:6c:
ba:1a:95:4d:d3:1a:89:2e:7a:c8:a2:65:c2:52:f9:
b2:38:03:31:3f:33:37:d1:16:a4:7f:44:07:e7:33:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:FC:79:B1:72:01:84:41:8C:BF:73:64:33:3F:04:0D:2B:C9:D5
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5kD8ebFyAYRBjL9zZDM_BA0rydU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.235.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0c:de:69:08:15:6e:44:ab:99:c8:72:95:34:ba:82:7e:aa:
03:23:42:94:62:b9:4b:63:1b:0a:85:34:1c:ee:f7:54:58:1e:
4c:da:22:69:89:e9:f9:4a:ee:70:2f:1b:6e:f9:6e:fc:6f:f1:
9f:d5:92:95:79:9e:ef:ba:dc:76:f5:95:bf:e1:b9:fe:5e:03:
a9:e0:69:a8:eb:ff:5d:ce:17:39:cc:9c:0a:81:65:3c:08:a8:
5a:e1:ae:ed:b3:72:ed:ea:40:71:4b:48:5a:47:c0:48:75:55:
6c:fe:2d:b3:81:d7:77:87:4f:92:b1:31:02:ab:12:dd:8b:2f:
29:61:20:1e:3b:49:df:d9:be:60:b1:6b:a5:03:c8:b9:4f:a2:
86:fb:f1:ed:4c:3e:06:0c:88:5e:b7:8f:2a:13:ea:ee:40:ab:
91:1a:a0:d3:3a:a1:f3:55:58:e4:d0:d4:c9:1d:55:2b:ae:28:
dd:bb:0b:de:99:62:27:40:b5:e0:77:b8:d4:bc:61:13:bf:6a:
60:eb:b4:45:7f:35:19:82:48:e5:0d:65:45:e6:8a:b9:fc:0a:
14:49:79:0e:8e:77:af:a1:da:de:f9:1c:af:ac:00:5a:74:8c:
21:97:3b:d5:f2:f8:e5:e2:d6:db:f8:16:46:05:6f:7d:db:45:
10:d8:f9:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzbQJ7STeuTJafvayeMMJpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjYwMzExMDQ1NjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjQwZmM3OWIxNzIwMTg0NDE4Y2JmNzM2NDMzM2YwNDBkMmJjOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyOsUF1CcAcivZPinMpzx9RIrfwA
PoJXTk8LwpDwQmMVOGmK1veJ9cB1K+hmJlOcElSbldSOidIrWD6B16mYggup0ydB
YNoSkaHyghdscH9XbEkQLiib2x1tJAO+r3CZ9mrBymbZwceoYdMko0Wn+1yqsh2f
Nw4QvQqVNGawZ2J5gRyZf3KG5pgjrYd969HYVY842TK12sZnoodn9zJr/827vzIk
UgRCfRevtzHbbpch5yW/C3u2TROJMB5jfDpjfb/ZvYCLsiOOjoTQCB0RGK90FwAu
960T8K1uzYsYpWy6GpVN0xqJLnrIomXCUvmyOAMxPzM30Rakf0QH5zMIWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZA/HmxcgGEQYy/c2QzPwQNK8nVMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvNWtEOGViRnlBWVJCakw5elpETV9CQTByeWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueTrMA0G
CSqGSIb3DQEBCwUAA4IBAQCADN5pCBVuRKuZyHKVNLqCfqoDI0KUYrlLYxsKhTQc
7vdUWB5M2iJpien5Su5wLxtu+W78b/Gf1ZKVeZ7vutx29ZW/4bn+XgOp4Gmo6/9d
zhc5zJwKgWU8CKha4a7ts3Lt6kBxS0haR8BIdVVs/i2zgdd3h0+SsTECqxLdiy8p
YSAeO0nf2b5gsWulA8i5T6KG+/HtTD4GDIhet48qE+ruQKuRGqDTOqHzVVjk0NTJ
HVUrrijduwvemWInQLXgd7jUvGETv2pg67RFfzUZgkjlDWVF5oq5/AoUSXkOjnev
odre+RyvrABadIwhlzvV8vjl4tbb+BZGBW9920UQ2Pke
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:45:45 2026 by rpki-client