Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/M5WkYuReaq09MNJMaF9RecqaP3E.roa
File: M5WkYuReaq09MNJMaF9RecqaP3E.roa (raw, json)
Hash identifier: YWrcOU6fOxVzuzg11LAknyXhop8BLtiv/1aRQ3Wh99s=
Subject key identifier: 33:95:A4:62:E4:5E:6A:AD:3D:30:D2:4C:68:5F:51:79:CA:9A:3F:71
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 01A0A8F3D5401B8C8DBD80436EFA8221D560
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/M5WkYuReaq09MNJMaF9RecqaP3E.roa
Signing time: Wed 16 Sep 2026 06:42:27 +0000
ROA not before: Wed 16 Sep 2026 06:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 193.138.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:f3:d5:40:1b:8c:8d:bd:80:43:6e:fa:82:21:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Sep 16 06:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3395a462e45e6aad3d30d24c685f5179ca9a3f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:ba:82:f9:c9:c9:27:0b:53:5e:de:ef:d1:
78:78:9d:43:cc:93:63:eb:91:25:cd:8d:15:b8:53:
79:22:d1:a3:1f:f3:db:49:be:79:39:ee:d3:e7:76:
25:0c:23:22:24:2e:1a:fb:e9:92:b9:b5:ef:c1:93:
6e:02:03:63:65:61:d1:2d:6a:93:3a:b8:c2:3f:2b:
83:36:e3:bd:a8:9d:fa:67:0c:c2:f8:33:29:1e:8e:
a9:e2:00:37:d4:8d:63:9c:21:2f:6c:20:c1:90:a2:
a8:1a:ae:3e:5e:6d:ef:7e:f1:9f:49:74:d2:2f:06:
9a:49:df:5e:13:fd:eb:20:85:a2:cf:8d:71:86:b0:
71:39:6f:17:2f:3f:d0:32:4a:fb:4d:93:7d:dc:3a:
35:ed:9a:8b:6b:68:be:5f:c8:2a:8c:90:2a:31:95:
7c:c4:7c:38:9f:48:bb:d0:a5:2e:29:d1:53:b0:9e:
44:71:ab:96:ef:62:23:cd:59:c3:a9:05:6c:da:33:
35:49:9c:48:e5:8f:c7:86:df:6f:08:5d:44:3c:d3:
4f:a3:c0:7a:a9:14:1e:70:ab:a7:50:a8:81:5d:c3:
03:af:46:70:e3:f0:0f:1b:bc:ac:21:2b:bc:ad:b1:
bf:ff:4f:80:2c:75:5e:eb:70:67:25:31:9d:5f:60:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:A4:62:E4:5E:6A:AD:3D:30:D2:4C:68:5F:51:79:CA:9A:3F:71
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/M5WkYuReaq09MNJMaF9RecqaP3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1a:ac:9e:57:a1:fa:51:24:97:cc:ba:df:99:78:79:6a:65:
4f:46:9b:3b:29:f9:00:e4:ec:ef:4e:9b:32:b8:25:2c:74:ed:
5e:8c:f2:0a:91:c5:ee:26:3f:ec:31:14:55:40:2b:1f:b2:74:
e1:17:dc:1f:a1:ca:9c:d3:10:b4:0c:e3:8c:ed:a2:79:9c:5e:
d4:f3:29:d2:6b:2b:da:db:01:4b:3c:b0:88:07:12:29:4a:f2:
0f:34:ba:b8:7b:86:f4:96:e0:75:6f:d2:81:56:12:fd:b5:1c:
28:bf:a9:80:c8:46:99:dd:fa:2b:d0:52:92:d6:ab:0f:d9:3e:
4b:4d:19:9f:e4:6f:1b:05:60:8c:65:b8:3c:39:b5:2e:70:8f:
f6:60:1f:bd:20:b3:ba:6b:93:50:13:76:36:1e:87:67:cd:9e:
f2:da:9b:db:b6:38:f7:11:82:e3:56:8a:2b:0a:05:08:5a:6a:
5d:6e:3f:39:f0:3b:3e:6f:bd:6c:85:0c:67:d9:1f:20:52:4b:
96:44:56:6a:9c:c8:d8:e4:49:8a:ba:84:17:58:48:07:4e:8a:
13:c5:fb:b9:10:01:27:f4:ba:04:15:17:e4:9d:5d:71:ac:12:
b5:ac:98:74:70:ef:33:4f:3e:a9:ad:d0:4b:a0:05:bc:60:ef:
55:ed:9a:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCo89VAG4yNvYBDbvqCIdVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDBmYmM0ZGU4MWVlMjcyN2FiYTNlOTEwYWZjZDJhNTNh
NjY0MGMwHhcNMjYwOTE2MDY0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzk1YTQ2MmU0NWU2YWFkM2QzMGQyNGM2ODVmNTE3OWNhOWEzZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvS6gvnJyScLU17e79F4eJ1DzJNj
65ElzY0VuFN5ItGjH/PbSb55Oe7T53YlDCMiJC4a++mSubXvwZNuAgNjZWHRLWqT
OrjCPyuDNuO9qJ36ZwzC+DMpHo6p4gA31I1jnCEvbCDBkKKoGq4+Xm3vfvGfSXTS
LwaaSd9eE/3rIIWiz41xhrBxOW8XLz/QMkr7TZN93Do17ZqLa2i+X8gqjJAqMZV8
xHw4n0i70KUuKdFTsJ5EcauW72IjzVnDqQVs2jM1SZxI5Y/Hht9vCF1EPNNPo8B6
qRQecKunUKiBXcMDr0Zw4/APG7ysISu8rbG//0+ALHVe63BnJTGdX2BowQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOVpGLkXmqtPTDSTGhfUXnKmj9xMB8GA1UdIwQY
MBaAFN/Q+8Tege4nJ6uj6RCvzSpTpmQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAt
ZWRiMDQxOGNhYzRkLzEvTTVXa1l1UmVhcTA5TU5KTWFGOVJlY3FhUDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAtZWRiMDQxOGNhYzRk
LzEvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpNMA0G
CSqGSIb3DQEBCwUAA4IBAQA+GqyeV6H6USSXzLrfmXh5amVPRps7KfkA5OzvTpsy
uCUsdO1ejPIKkcXuJj/sMRRVQCsfsnThF9wfocqc0xC0DOOM7aJ5nF7U8ynSayva
2wFLPLCIBxIpSvIPNLq4e4b0luB1b9KBVhL9tRwov6mAyEaZ3for0FKS1qsP2T5L
TRmf5G8bBWCMZbg8ObUucI/2YB+9ILO6a5NQE3Y2HodnzZ7y2pvbtjj3EYLjVoor
CgUIWmpdbj858Ds+b71shQxn2R8gUkuWRFZqnMjY5EmKuoQXWEgHTooTxfu5EAEn
9LoEFRfknV1xrBK1rJh0cO8zTz6prdBLoAW8YO9V7Zoy
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:48:16 2026 by rpki-client