Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/5Vmgwb9F8vQSn62TUA3DtbFUacY.roa
File: 5Vmgwb9F8vQSn62TUA3DtbFUacY.roa (raw, json)
Hash identifier: 4EZeJdyzRgVjWWf5FyUvU3cY8Jjs1Q2gQ6LYk3w4pZ0=
Subject key identifier: E5:59:A0:C1:BF:45:F2:F4:12:9F:AD:93:50:0D:C3:B5:B1:54:69:C6
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 01A0AF81B0BE809A00163097100DCF35C694
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/5Vmgwb9F8vQSn62TUA3DtbFUacY.roa
Signing time: Thu 17 Sep 2026 13:15:07 +0000
ROA not before: Thu 17 Sep 2026 13:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211443
IP address blocks: 2a10:ca80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:81:b0:be:80:9a:00:16:30:97:10:0d:cf:35:c6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Sep 17 13:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e559a0c1bf45f2f4129fad93500dc3b5b15469c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:b0:21:cb:26:4e:79:a6:a9:fb:d5:80:ae:
2a:87:d1:ee:f4:16:ce:8f:ec:ad:96:a4:0a:a7:23:
62:0f:76:87:e8:80:10:b2:aa:cc:14:5d:d7:ca:a3:
f5:58:70:c5:3b:f4:d0:af:21:ca:4f:4d:83:12:09:
4d:56:35:c8:e5:5d:17:11:81:dd:8d:8a:a8:fa:a1:
96:2e:87:a5:e7:d6:70:10:1c:3b:76:f6:28:e1:e2:
20:ec:a8:a0:1b:ff:b4:7a:8e:73:93:4b:8d:07:5f:
58:14:92:de:a7:d0:4b:cd:68:78:8e:46:58:e6:8a:
90:64:a6:64:17:4e:06:e3:8d:60:f1:17:be:84:99:
d7:0c:00:78:5b:b5:f2:56:81:84:96:ac:6f:51:48:
71:46:02:28:51:9f:ce:e9:19:3f:74:b1:6b:54:05:
cd:21:5a:0a:35:5e:cc:07:04:aa:cd:38:ce:4f:05:
82:c1:89:98:88:e1:89:b1:71:23:00:d6:13:56:ab:
e7:3f:b0:63:77:72:12:11:83:60:d6:a7:60:0d:d8:
71:2d:f7:19:6b:0a:79:fc:21:59:96:f1:e1:f7:51:
3e:0b:4f:15:d2:30:f6:1a:37:e0:6d:c3:df:82:23:
e1:15:88:55:c6:45:f4:e5:c5:d5:4f:06:0e:b2:4b:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:A0:C1:BF:45:F2:F4:12:9F:AD:93:50:0D:C3:B5:B1:54:69:C6
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/5Vmgwb9F8vQSn62TUA3DtbFUacY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ca80:1::/48
Signature Algorithm: sha256WithRSAEncryption
aa:31:41:f7:5b:a2:c7:1d:e3:19:3d:2f:91:90:dd:67:80:4d:
f6:23:32:91:50:19:63:08:33:95:36:9b:ed:26:80:6c:d6:05:
60:da:d9:03:89:12:e3:2f:d9:0c:cf:ce:39:e4:46:94:12:0c:
d0:27:82:cd:26:c5:12:dd:eb:eb:b4:81:5a:13:12:c0:5b:bd:
21:ac:b6:63:8a:91:1a:b4:15:1f:24:49:a1:37:38:5a:a3:c6:
fa:a9:42:93:64:80:aa:45:aa:b8:a8:f0:5a:a8:83:16:e6:e6:
71:73:16:c8:b7:54:0f:25:f0:19:22:cd:bf:7b:61:13:4c:33:
2e:5d:59:b3:de:32:2a:4e:9c:87:91:15:eb:13:f6:0d:41:7e:
cd:b2:22:f1:f8:3d:a2:c6:e3:46:ec:7d:41:ff:49:32:3d:9d:
dd:da:64:92:45:1f:de:40:e2:25:2c:0c:82:4a:d4:6f:35:77:
7a:91:0c:66:2e:63:8f:d7:bf:b6:54:08:18:c7:0a:05:d8:f1:
3d:92:4e:4b:a7:d8:b5:4d:5b:20:14:b0:e4:15:44:30:9a:c4:
5e:c3:fe:80:6f:de:3f:f3:af:b4:d6:dd:3b:14:19:27:87:d8:
6d:77:44:80:52:70:2c:c6:34:55:55:45:4e:5b:13:f6:35:67:
56:8e:63:2c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCvgbC+gJoAFjCXEA3PNcaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5
ZTc1MzAwHhcNMjYwOTE3MTMxNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTU5YTBjMWJmNDVmMmY0MTI5ZmFkOTM1MDBkYzNiNWIxNTQ2OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8awIcsmTnmmqfvVgK4qh9Hu9BbO
j+ytlqQKpyNiD3aH6IAQsqrMFF3XyqP1WHDFO/TQryHKT02DEglNVjXI5V0XEYHd
jYqo+qGWLoel59ZwEBw7dvYo4eIg7KigG/+0eo5zk0uNB19YFJLep9BLzWh4jkZY
5oqQZKZkF04G441g8Re+hJnXDAB4W7XyVoGElqxvUUhxRgIoUZ/O6Rk/dLFrVAXN
IVoKNV7MBwSqzTjOTwWCwYmYiOGJsXEjANYTVqvnP7Bjd3ISEYNg1qdgDdhxLfcZ
awp5/CFZlvHh91E+C08V0jD2GjfgbcPfgiPhFYhVxkX05cXVTwYOskuBoQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOVZoMG/RfL0Ep+tk1ANw7WxVGnGMB8GA1UdIwQY
MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt
NDg1MmM4ZmY4YWYyLzEvNVZtZ3diOUY4dlFTbjYyVFVBM0R0YkZVYWNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy
LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDKgAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCqMUH3W6LHHeMZPS+RkN1ngE32IzKRUBljCDOV
NpvtJoBs1gVg2tkDiRLjL9kMz8455EaUEgzQJ4LNJsUS3evrtIFaExLAW70hrLZj
ipEatBUfJEmhNzhao8b6qUKTZICqRaq4qPBaqIMW5uZxcxbIt1QPJfAZIs2/e2ET
TDMuXVmz3jIqTpyHkRXrE/YNQX7NsiLx+D2ixuNG7H1B/0kyPZ3d2mSSRR/eQOIl
LAyCStRvNXd6kQxmLmOP17+2VAgYxwoF2PE9kk5Lp9i1TVsgFLDkFUQwmsRew/6A
b94/86+01t07FBknh9htd0SAUnAsxjRVVUVOWxP2NWdWjmMs
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:09 2026 by rpki-client