Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa
File: 5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa (raw, json)
Hash identifier: 8+JveaHaKY6ky/eCt3iJNlrey5awmCheN1pKka0rBh8=
Subject key identifier: E5:22:CB:D5:FC:58:BD:37:E9:B8:87:70:B1:14:35:1D:9A:D4:87:8E
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019D4E95AF7485DE031F66F686E7EFFE498D
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa
Signing time: Thu 02 Apr 2026 14:25:25 +0000
ROA not before: Thu 02 Apr 2026 14:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206998
IP address blocks: 185.221.85.0/24 maxlen: 24
185.221.86.0/24 maxlen: 24
212.32.0.0/20 maxlen: 24
212.32.4.0/24 maxlen: 24
212.32.5.0/24 maxlen: 24
2a0d:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:95:af:74:85:de:03:1f:66:f6:86:e7:ef:fe:49:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Apr 2 14:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e522cbd5fc58bd37e9b88770b114351d9ad4878e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:ad:1b:cd:f0:ff:86:20:e3:a1:9a:9c:40:
f6:4d:3a:78:71:e7:16:48:58:20:58:9c:6a:4b:64:
93:4c:7d:b2:15:5d:2d:76:c4:1b:da:2d:17:59:85:
16:a7:24:7a:48:b2:3b:f5:13:70:06:62:10:50:b1:
34:54:5c:82:82:ee:c1:3d:75:32:fb:94:94:2a:51:
bc:73:7b:1f:45:94:2a:df:b8:1e:cc:f1:a8:4f:ad:
c2:86:43:9a:ea:bc:8b:88:55:9c:6b:cf:83:86:fa:
6e:87:af:84:9f:76:34:c6:a7:59:42:70:c3:3b:4f:
73:9c:85:41:a5:5d:ea:3c:7c:ec:a3:7e:8e:ed:04:
c7:3f:7f:68:69:20:2a:22:fb:d3:99:d8:be:65:82:
cf:d9:74:23:b9:03:be:1a:78:7f:f4:f6:f4:94:56:
43:38:fd:96:4b:89:eb:b7:85:42:8f:70:79:a2:8f:
47:6d:fa:64:b6:6b:f0:8b:e2:b2:85:62:bc:c7:b7:
95:8c:42:7e:99:8c:8a:96:da:ef:13:5d:7a:95:3d:
87:d7:42:77:ba:17:ac:71:7a:83:56:30:f7:a1:7b:
ee:2c:60:31:80:1a:ce:b2:45:ac:38:78:a4:f9:84:
c4:28:2a:c7:6f:7a:00:5c:2c:9c:06:c9:f2:9c:04:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:CB:D5:FC:58:BD:37:E9:B8:87:70:B1:14:35:1D:9A:D4:87:8E
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/5SLL1fxYvTfpuIdwsRQ1HZrUh44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.85.0-185.221.86.255
212.32.0.0/20
IPv6:
2a0d:8000::/48
Signature Algorithm: sha256WithRSAEncryption
68:16:91:17:13:26:ef:5e:cb:d7:79:ad:a9:cd:72:0f:2b:49:
85:94:fb:34:b6:f1:8b:af:6f:69:92:44:cf:0e:54:a5:88:46:
ff:41:e6:9b:af:1f:6b:96:c9:af:71:ef:9d:9d:1b:5f:59:c3:
8c:17:b4:6e:0f:c9:19:b8:5d:ab:ed:1a:32:f4:71:22:78:56:
65:d5:3a:4b:8a:a5:f2:b7:7f:cd:22:f5:a9:48:b8:69:6e:75:
10:b7:d5:f3:d6:58:df:66:85:16:cf:e4:6b:28:89:32:44:36:
49:31:e8:d1:02:71:6b:44:4e:b9:2a:09:f7:a9:85:22:50:38:
90:c3:8b:63:96:79:f5:85:c4:14:0a:ab:95:44:a8:e3:d3:44:
d4:8d:1a:6e:78:7e:9a:33:1c:c1:ae:fb:04:16:ab:ff:da:93:
64:69:4b:a7:94:50:b3:0a:77:dc:61:bb:49:7b:00:ff:3e:46:
a6:9b:6c:f2:18:7c:c9:65:c1:35:e4:66:23:85:3a:0b:0c:49:
60:c9:e8:1d:76:f5:cf:32:e7:50:9c:17:ff:e6:77:57:27:2f:
0d:e5:24:bc:77:ff:be:8e:4f:04:4a:57:23:ce:fb:eb:b3:47:
e8:5f:cf:af:8d:b2:6d:66:c0:a9:cf:1f:cb:bf:87:cc:8a:b9:
c5:b0:17:aa
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZ1Ola90hd4DH2b2hufv/kmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjYwNDAyMTQyNTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTIyY2JkNWZjNThiZDM3ZTliODg3NzBiMTE0MzUxZDlhZDQ4NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspStG83w/4Yg46GanED2TTp4cecW
SFggWJxqS2STTH2yFV0tdsQb2i0XWYUWpyR6SLI79RNwBmIQULE0VFyCgu7BPXUy
+5SUKlG8c3sfRZQq37gezPGoT63ChkOa6ryLiFWca8+Dhvpuh6+En3Y0xqdZQnDD
O09znIVBpV3qPHzso36O7QTHP39oaSAqIvvTmdi+ZYLP2XQjuQO+Gnh/9Pb0lFZD
OP2WS4nrt4VCj3B5oo9Hbfpktmvwi+KyhWK8x7eVjEJ+mYyKltrvE116lT2H10J3
uhescXqDVjD3oXvuLGAxgBrOskWsOHik+YTEKCrHb3oAXCycBsnynATL7wIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFOUiy9X8WL036biHcLEUNR2a1IeOMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvNVNMTDFmeFl2VGZwdUlkd3NSUTFIWnJVaDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAC53VUD
BAC53VYDBATUIAAwDwQCAAIwCQMHACoNgAAAADANBgkqhkiG9w0BAQsFAAOCAQEA
aBaRFxMm717L13mtqc1yDytJhZT7NLbxi69vaZJEzw5UpYhG/0Hmm68fa5bJr3Hv
nZ0bX1nDjBe0bg/JGbhdq+0aMvRxInhWZdU6S4ql8rd/zSL1qUi4aW51ELfV89ZY
32aFFs/kayiJMkQ2STHo0QJxa0ROuSoJ96mFIlA4kMOLY5Z59YXEFAqrlUSo49NE
1I0abnh+mjMcwa77BBar/9qTZGlLp5RQswp33GG7SXsA/z5Gppts8hh8yWXBNeRm
I4U6CwxJYMnoHXb1zzLnUJwX/+Z3VycvDeUkvHf/vo5PBEpXI87767NH6F/Pr42y
bWbAqc8fy7+HzIq5xbAXqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:24 2026 by rpki-client