Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/1-5PJEN9Zlj95GybZ6SDZCDM9Ux4.roa
File: 1-5PJEN9Zlj95GybZ6SDZCDM9Ux4.roa (raw, json)
Hash identifier: Iy5yXXvGVPR+2adaggKxnJKpE+OnqOlK+rwcp8Q3SZ8=
Subject key identifier: FB:93:C9:10:DF:59:96:3F:79:1B:26:D9:E9:20:D9:08:33:3D:53:1E
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019C28760AFEDA39C33E296E721DABA18F8A
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/1-5PJEN9Zlj95GybZ6SDZCDM9Ux4.roa
Signing time: Wed 04 Feb 2026 11:42:30 +0000
ROA not before: Wed 04 Feb 2026 11:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 2a01:ecc0:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:76:0a:fe:da:39:c3:3e:29:6e:72:1d:ab:a1:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Feb 4 11:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb93c910df59963f791b26d9e920d908333d531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:f5:a1:a9:5b:fe:a8:19:ff:44:67:95:5c:
27:11:ae:28:a8:81:52:57:1b:fc:4a:06:0b:27:5a:
f3:c1:00:f4:23:e8:a6:c0:65:96:bc:a0:09:59:3e:
f1:32:d1:b7:77:41:91:36:cf:70:94:4b:78:dd:20:
7a:24:08:e9:32:7c:72:c9:51:1d:10:78:c6:b2:22:
60:47:ea:fd:d9:f4:c6:df:f1:e8:30:b5:87:b1:fa:
46:29:89:37:83:cd:b6:ed:ee:95:70:a5:8e:0b:ca:
8e:47:a8:5d:35:7a:9f:cf:1a:86:5c:d4:b3:fa:f2:
e4:cb:92:6a:cf:08:43:69:63:4c:e6:bf:71:cb:83:
84:2f:83:f5:d2:f5:44:06:2d:36:ff:ad:a0:76:17:
37:9a:1f:35:d0:d4:50:1e:b6:ca:31:93:e9:4c:9e:
f9:0b:4e:1f:10:a6:26:6b:61:6c:29:c9:24:f3:2e:
12:2a:c4:11:0b:81:83:34:69:71:66:77:ff:c2:6c:
f3:0e:83:22:81:f9:28:2a:c4:22:0e:42:a9:b0:90:
d1:5a:4c:87:2e:de:74:36:d8:ac:20:34:e4:b4:5c:
eb:af:4c:90:9d:fe:6c:77:8f:88:8c:b7:d3:55:fa:
47:00:da:2c:93:e7:8c:21:4b:c0:00:20:38:9a:4a:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:C9:10:DF:59:96:3F:79:1B:26:D9:E9:20:D9:08:33:3D:53:1E
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/1-5PJEN9Zlj95GybZ6SDZCDM9Ux4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
13:56:97:a6:ae:0b:25:24:6e:ff:48:6b:4e:13:d9:ae:3c:d9:
f2:1a:0e:91:e4:b0:6e:62:5c:85:d9:4e:8b:04:8f:a6:e1:03:
41:d2:10:2b:87:dc:7d:a2:5e:5e:9b:04:5b:c9:7f:08:c6:70:
80:bb:98:e5:16:6d:e5:48:45:17:04:04:a1:8e:22:8f:ef:da:
ca:d6:63:10:e9:2d:7e:e7:b8:ee:f2:0e:fc:2c:49:82:c2:ca:
73:a1:b8:64:d4:fb:3a:0b:f0:32:14:30:11:49:b1:d2:08:3c:
08:89:2f:f6:1d:fb:d0:d1:f3:b2:7f:6a:f3:a0:75:63:44:c8:
f9:d4:00:b9:ba:6d:7b:a7:7f:9b:b2:6e:ea:f1:d1:15:c0:92:
11:37:63:c8:ac:71:65:e9:09:fe:33:20:18:74:27:50:dc:6f:
39:81:d7:7f:01:36:7d:74:f3:b1:29:8d:12:42:c5:20:c3:ca:
60:e0:fb:06:31:15:86:a3:b5:21:83:da:8d:ba:79:ea:43:54:
27:c9:fd:8c:8d:ef:1c:e6:c3:d6:fd:f1:c0:2d:87:07:e2:06:
5c:b9:61:40:54:9a:6d:c7:a2:ec:39:cf:ec:f7:b1:62:6a:00:
26:da:55:af:0e:03:82:1d:fd:c7:2d:e9:c4:4d:62:1d:e4:54:
2c:e8:cc:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZwodgr+2jnDPiluch2roY+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0
ZWU1YmUwHhcNMjYwMjA0MTE0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjkzYzkxMGRmNTk5NjNmNzkxYjI2ZDllOTIwZDkwODMzM2Q1MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx/1oalb/qgZ/0RnlVwnEa4oqIFS
Vxv8SgYLJ1rzwQD0I+imwGWWvKAJWT7xMtG3d0GRNs9wlEt43SB6JAjpMnxyyVEd
EHjGsiJgR+r92fTG3/HoMLWHsfpGKYk3g8227e6VcKWOC8qOR6hdNXqfzxqGXNSz
+vLky5JqzwhDaWNM5r9xy4OEL4P10vVEBi02/62gdhc3mh810NRQHrbKMZPpTJ75
C04fEKYma2FsKckk8y4SKsQRC4GDNGlxZnf/wmzzDoMigfkoKsQiDkKpsJDRWkyH
Lt50NtisIDTktFzrr0yQnf5sd4+IjLfTVfpHANosk+eMIUvAACA4mkoJxwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPuTyRDfWZY/eRsm2ekg2QgzPVMeMB8GA1UdIwQY
MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt
NjM0NTE1NDg5NzlkLzEvMS01UEpFTjlabGo5NUd5Ylo2U0RaQ0RNOVV4NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODUvYzkzZDg3LTMyZTAtNDZmMS05ZmI5LTYzNDUxNTQ4OTc5
ZC8xL0hVT2lTRVZwMGc0X1U4Rjc1N243S2NOTzViNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoB7MBg
MA0GCSqGSIb3DQEBCwUAA4IBAQATVpemrgslJG7/SGtOE9muPNnyGg6R5LBuYlyF
2U6LBI+m4QNB0hArh9x9ol5emwRbyX8IxnCAu5jlFm3lSEUXBAShjiKP79rK1mMQ
6S1+57ju8g78LEmCwspzobhk1Ps6C/AyFDARSbHSCDwIiS/2HfvQ0fOyf2rzoHVj
RMj51AC5um17p3+bsm7q8dEVwJIRN2PIrHFl6Qn+MyAYdCdQ3G85gdd/ATZ9dPOx
KY0SQsUgw8pg4PsGMRWGo7Uhg9qNunnqQ1Qnyf2Mje8c5sPW/fHALYcH4gZcuWFA
VJptx6LsOc/s97FiagAm2lWvDgOCHf3HLenETWId5FQs6Mz4
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:18 2026 by rpki-client