Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa
File: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (raw, json)
Hash identifier: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=
Subject key identifier: E6:81:77:57:4A:E3:78:BD:69:27:99:47:88:54:B1:C5:79:51:8A:A9
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019C663BACEBD82718ADF1184C698FAFD63B
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa
Signing time: Mon 16 Feb 2026 11:35:12 +0000
ROA not before: Mon 16 Feb 2026 11:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201937
IP address blocks: 194.9.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:3b:ac:eb:d8:27:18:ad:f1:18:4c:69:8f:af:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Feb 16 11:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e68177574ae378bd692799478854b1c579518aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:f3:b3:0c:79:b0:9b:de:cd:fb:71:a6:76:
74:0d:cb:57:e4:5e:73:d9:c5:99:c9:99:cb:03:b0:
f9:7f:55:26:e9:b5:c6:7e:6c:cc:bf:a9:5a:00:4f:
0d:41:15:ca:15:07:18:67:48:e0:5c:31:7d:7f:5e:
fc:5e:fe:b8:16:56:71:3a:a3:5e:52:e9:b0:62:bf:
74:cb:7e:ce:60:71:54:02:f7:3c:71:e2:47:db:06:
38:9d:fc:b3:1b:59:b8:36:3f:47:c1:d8:0e:0b:75:
50:26:5a:4f:a9:b9:12:75:37:f0:52:c8:88:14:5b:
bd:71:2a:e8:ec:0f:07:e1:e6:94:e3:56:ea:08:e9:
b5:d1:3f:72:6b:31:a1:09:37:57:9a:34:68:20:c0:
4f:b6:45:98:6f:46:47:90:48:e1:82:bd:e3:2f:c5:
be:ef:d6:bb:e0:1e:1e:c8:93:a9:e2:3f:78:a4:1d:
54:be:86:5d:8f:0d:09:7a:d8:e2:6b:81:d0:e9:b0:
f0:95:40:b6:b5:02:7a:85:0e:c8:4d:5d:1a:85:45:
57:54:1c:14:43:9c:e6:55:62:38:23:8a:86:47:af:
52:88:e9:79:1f:18:af:8a:3c:f8:58:4c:1c:e5:7a:
52:b3:52:cf:fb:17:5e:b5:b6:e3:a6:5c:e8:56:9f:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:77:57:4A:E3:78:BD:69:27:99:47:88:54:B1:C5:79:51:8A:A9
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.9.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1e:b7:db:68:ec:23:99:78:15:ab:fd:0e:00:8d:ce:d9:79:
26:64:84:bb:be:32:7b:fb:71:88:47:93:60:37:b4:01:d4:f5:
ef:53:06:80:fe:98:da:a4:39:0a:0b:29:91:ef:0e:5e:d8:cb:
84:a5:d2:aa:0e:b7:0b:e4:a3:de:a1:e8:13:9a:4f:0f:7a:d2:
73:94:c8:f2:f8:54:6f:f4:1f:c6:a0:f8:e0:69:c2:54:9d:5e:
a2:e0:73:90:62:9e:3b:2f:5f:ad:49:55:15:70:db:d0:1e:55:
7c:4d:c6:3d:e9:4a:0a:19:a1:d7:b9:9f:2d:47:a7:46:c4:f5:
ff:59:65:d9:2f:bf:c0:2c:b6:4f:7f:43:ea:46:5b:01:4d:fc:
dc:42:7d:c7:62:9c:11:f5:c5:8c:a0:2a:36:59:a1:21:36:c8:
8b:e6:ab:9c:d4:a7:34:5d:49:dd:0b:ee:9e:b3:42:b3:c0:72:
e7:25:82:a5:d9:26:f6:3a:36:21:79:2a:84:7c:34:58:b5:89:
6b:5e:64:5c:6a:65:39:74:65:05:92:2f:14:8b:26:fa:e7:0f:
07:04:34:65:3d:b5:ae:2a:6a:dd:2b:71:a2:dc:1c:f3:29:53:
6b:c6:f2:63:81:65:a0:cc:f7:63:67:49:55:3c:c6:61:cb:6d:
71:cb:43:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxmO6zr2CcYrfEYTGmPr9Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx
ZTc2N2IwHhcNMjYwMjE2MTEzNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjgxNzc1NzRhZTM3OGJkNjkyNzk5NDc4ODU0YjFjNTc5NTE4YWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3jzswx5sJvezftxpnZ0DctX5F5z
2cWZyZnLA7D5f1Um6bXGfmzMv6laAE8NQRXKFQcYZ0jgXDF9f178Xv64FlZxOqNe
UumwYr90y37OYHFUAvc8ceJH2wY4nfyzG1m4Nj9HwdgOC3VQJlpPqbkSdTfwUsiI
FFu9cSro7A8H4eaU41bqCOm10T9yazGhCTdXmjRoIMBPtkWYb0ZHkEjhgr3jL8W+
79a74B4eyJOp4j94pB1UvoZdjw0Jetjia4HQ6bDwlUC2tQJ6hQ7ITV0ahUVXVBwU
Q5zmVWI4I4qGR69SiOl5Hxivijz4WEwc5XpSs1LP+xdetbbjplzoVp9WBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaBd1dK43i9aSeZR4hUscV5UYqpMB8GA1UdIwQY
MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt
NjBhMDM5ZGQxYmNhLzEvNW9GM1YwcmplTDFwSjVsSGlGU3h4WGxSaXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh
LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgkJMA0G
CSqGSIb3DQEBCwUAA4IBAQBVHrfbaOwjmXgVq/0OAI3O2XkmZIS7vjJ7+3GIR5Ng
N7QB1PXvUwaA/pjapDkKCymR7w5e2MuEpdKqDrcL5KPeoegTmk8PetJzlMjy+FRv
9B/GoPjgacJUnV6i4HOQYp47L1+tSVUVcNvQHlV8TcY96UoKGaHXuZ8tR6dGxPX/
WWXZL7/ALLZPf0PqRlsBTfzcQn3HYpwR9cWMoCo2WaEhNsiL5quc1Kc0XUndC+6e
s0KzwHLnJYKl2Sb2OjYheSqEfDRYtYlrXmRcamU5dGUFki8Uiyb65w8HBDRlPbWu
KmrdK3Gi3BzzKVNrxvJjgWWgzPdjZ0lVPMZhy21xy0PB
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:13 2026 by rpki-client