Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9arV0-QfgD7QZctEW8GopIHzt1w.roa
File: 9arV0-QfgD7QZctEW8GopIHzt1w.roa (raw, json)
Hash identifier: wFT36Henhi+Os/GxU/x0UJl/z6f2JGWJ9yka+S2qaWo=
Subject key identifier: F5:AA:D5:D3:E4:1F:80:3E:D0:65:CB:44:5B:C1:A8:A4:81:F3:B7:5C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C3C5BC5B6C79D8D553E2A9EFEFFB9B5D0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9arV0-QfgD7QZctEW8GopIHzt1w.roa
Signing time: Sun 08 Feb 2026 08:26:13 +0000
ROA not before: Sun 08 Feb 2026 08:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 5.57.38.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
178.239.145.0/24 maxlen: 24
185.215.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3c:5b:c5:b6:c7:9d:8d:55:3e:2a:9e:fe:ff:b9:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 8 08:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5aad5d3e41f803ed065cb445bc1a8a481f3b75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:05:5a:dd:dc:ad:e8:8e:14:88:2c:15:53:
f0:ac:d1:49:84:e3:28:af:c1:c4:1d:12:77:bb:25:
db:ae:0d:70:5d:45:a9:f0:04:04:f2:06:47:b2:a4:
fe:eb:33:62:73:a0:ca:9a:98:96:51:27:08:9d:f4:
dd:f5:f9:a1:8d:84:01:ad:f4:fd:12:8d:2a:7b:2d:
1f:13:eb:ae:5e:19:0e:a5:29:7f:63:7d:12:ed:21:
63:5c:3e:31:45:ac:47:1f:a6:86:d3:f2:7e:ae:a3:
62:15:70:98:5c:99:3c:3c:98:c4:cb:bc:18:0b:c9:
fe:dd:18:42:69:f0:c8:c2:44:7c:9a:bf:88:16:84:
a7:24:bb:bd:bb:9a:47:db:df:15:67:0f:ae:26:72:
be:29:9a:ee:e6:3a:1b:98:f3:35:97:6e:b3:61:c0:
23:c3:f3:e2:c3:69:7b:36:85:ec:58:8f:1b:9c:86:
05:ef:6b:98:06:2b:e3:4d:91:e4:c7:27:27:48:d0:
7e:c7:4c:c4:e3:69:80:dd:47:d9:f4:7e:8b:c2:74:
70:e7:52:72:e1:b0:05:62:e5:c7:6a:fd:92:32:42:
4e:31:ab:45:61:10:f2:5a:b8:03:b9:7d:f6:9e:01:
54:f9:fc:94:20:b1:c6:cf:66:7f:e3:34:d1:d5:da:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:D5:D3:E4:1F:80:3E:D0:65:CB:44:5B:C1:A8:A4:81:F3:B7:5C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9arV0-QfgD7QZctEW8GopIHzt1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.38.0/24
37.32.47.0/24
178.239.145.0/24
185.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:de:8f:f5:f2:67:d5:19:e2:1a:db:7a:da:c6:2b:c2:fc:b1:
d4:f9:b4:fd:89:ee:fa:d2:e4:7e:fd:df:ea:e2:5b:9d:cf:e8:
d7:9f:4e:bc:eb:d9:05:36:f2:11:9d:71:f2:66:b7:23:4d:c0:
47:94:61:20:22:3a:3e:f2:74:76:17:d3:04:ff:cb:1f:0b:76:
f2:6e:f2:0e:97:10:31:a0:04:2d:2c:1c:28:9e:ab:71:a2:f8:
c9:8b:f2:44:86:16:1b:f2:8b:2b:98:bd:89:d5:85:00:7b:d2:
2f:65:c9:4b:f1:79:41:d3:2f:a7:66:cb:62:6e:d0:00:ff:60:
dc:c9:2f:7e:24:32:4c:47:8a:c2:5d:ac:4f:91:b2:bf:c3:93:
88:f8:cf:a8:7d:f1:a4:60:88:1d:d4:1e:b1:1b:f3:72:35:1f:
13:91:b1:58:8c:07:0e:36:1c:9f:5f:b7:b2:d6:c0:c8:07:92:
a1:14:09:0f:c4:fd:b1:fa:0a:51:5a:b4:68:7a:2a:3b:61:46:
21:2b:14:bf:26:1f:74:65:5c:96:7a:cd:f1:52:f6:8b:a9:49:
1e:58:b4:f5:1a:2b:1a:6f:9a:4f:eb:ac:26:67:84:cd:84:db:
b1:98:6e:5b:1b:e6:b4:f1:41:52:2d:42:0d:a9:f2:d3:b4:c8:
bd:7c:b1:8e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZw8W8W2x52NVT4qnv7/ubXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwMjA4MDgyNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWFhZDVkM2U0MWY4MDNlZDA2NWNiNDQ1YmMxYThhNDgxZjNiNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywAFWt3creiOFIgsFVPwrNFJhOMo
r8HEHRJ3uyXbrg1wXUWp8AQE8gZHsqT+6zNic6DKmpiWUScInfTd9fmhjYQBrfT9
Eo0qey0fE+uuXhkOpSl/Y30S7SFjXD4xRaxHH6aG0/J+rqNiFXCYXJk8PJjEy7wY
C8n+3RhCafDIwkR8mr+IFoSnJLu9u5pH298VZw+uJnK+KZru5jobmPM1l26zYcAj
w/Piw2l7NoXsWI8bnIYF72uYBivjTZHkxycnSNB+x0zE42mA3UfZ9H6LwnRw51Jy
4bAFYuXHav2SMkJOMatFYRDyWrgDuX32ngFU+fyUILHGz2Z/4zTR1dpNPwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPWq1dPkH4A+0GXLRFvBqKSB87dcMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvOWFyVjAtUWZnRDdRWmN0RVc4R29wSUh6dDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABTkmAwQA
JSAvAwQAsu+RAwQAudfnMA0GCSqGSIb3DQEBCwUAA4IBAQCi3o/18mfVGeIa23ra
xivC/LHU+bT9ie760uR+/d/q4ludz+jXn06869kFNvIRnXHyZrcjTcBHlGEgIjo+
8nR2F9ME/8sfC3bybvIOlxAxoAQtLBwonqtxovjJi/JEhhYb8osrmL2J1YUAe9Iv
ZclL8XlB0y+nZstibtAA/2DcyS9+JDJMR4rCXaxPkbK/w5OI+M+offGkYIgd1B6x
G/NyNR8TkbFYjAcONhyfX7ey1sDIB5KhFAkPxP2x+gpRWrRoeio7YUYhKxS/Jh90
ZVyWes3xUvaLqUkeWLT1Gisab5pP66wmZ4TNhNuxmG5bG+a08UFSLUINqfLTtMi9
fLGO
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:40 2026 by rpki-client