Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/xS5e_dUjgOZqhsZM-c7j9PqQ7bw.roa
File: xS5e_dUjgOZqhsZM-c7j9PqQ7bw.roa (raw, json)
Hash identifier: FzUQpHiHszk9Fyt0GXOKHxgCZPC9sUSzDoj7ArFX1/4=
Subject key identifier: C5:2E:5E:FD:D5:23:80:E6:6A:86:C6:4C:F9:CE:E3:F4:FA:90:ED:BC
Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial: 019C2D6D713F90C2C375CBAEB1E6D30A28BC
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/xS5e_dUjgOZqhsZM-c7j9PqQ7bw.roa
Signing time: Thu 05 Feb 2026 10:51:12 +0000
ROA not before: Thu 05 Feb 2026 10:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50673
IP address blocks: 185.254.172.0/22 maxlen: 24
2a0c:5140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:6d:71:3f:90:c2:c3:75:cb:ae:b1:e6:d3:0a:28:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Validity
Not Before: Feb 5 10:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c52e5efdd52380e66a86c64cf9cee3f4fa90edbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:c2:fb:1e:c3:1f:6a:cf:53:b9:2b:a4:de:
a8:0c:28:2d:aa:21:72:e2:d6:aa:dc:b2:5c:b1:8d:
67:6b:40:f7:e7:4c:13:8c:57:99:ba:b6:f5:c1:94:
b0:af:fa:c1:20:dd:18:6f:40:0b:fe:e2:b6:0d:6d:
86:06:94:4b:0b:67:f2:5e:9e:a8:09:96:91:6f:fb:
1f:50:7a:ed:f7:d3:1e:fd:3e:71:53:35:e2:81:27:
02:f8:f8:01:66:50:22:40:a2:b2:4b:8c:ca:e4:9d:
28:f5:ae:74:8f:39:98:bf:21:4d:ec:e1:f7:50:ba:
1c:e6:72:d9:42:06:b1:f5:64:20:dd:78:5a:02:9f:
8a:79:02:aa:b6:4a:7c:33:4a:54:f4:fa:d9:e6:27:
6b:13:a1:d8:1b:a9:ac:5e:2b:5d:7e:97:15:25:25:
18:b9:e4:54:00:fd:36:ce:e3:13:3a:41:7b:ff:75:
74:36:03:30:fe:f3:25:49:88:4a:51:83:45:0e:6f:
5c:ba:cf:d9:79:6a:d0:fa:df:97:92:89:cb:5a:8d:
ad:4a:30:e4:31:70:49:3c:3c:67:de:c1:51:9b:5f:
ec:f2:96:f9:58:f2:a0:93:ee:7e:f2:05:64:43:c2:
52:4b:9b:f6:48:2d:66:82:bc:36:75:41:d8:10:16:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2E:5E:FD:D5:23:80:E6:6A:86:C6:4C:F9:CE:E3:F4:FA:90:ED:BC
X509v3 Authority Key Identifier:
keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/xS5e_dUjgOZqhsZM-c7j9PqQ7bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.172.0/22
IPv6:
2a0c:5140::/32
Signature Algorithm: sha256WithRSAEncryption
6a:f0:3b:31:53:e4:9c:fc:d6:f7:f2:4a:4a:02:ed:2e:9a:ee:
03:32:71:d8:3c:c2:7d:8a:55:88:13:4a:fc:02:8d:25:48:33:
03:e9:ff:f7:48:17:6a:a8:a0:22:62:93:c3:4f:5f:df:d9:d1:
e8:b6:1f:4f:7a:b0:c8:1a:6d:3b:0b:e2:1d:c7:8f:39:90:a0:
69:f7:cb:1f:06:15:30:35:51:0e:b8:f4:ae:c0:0c:3d:a3:50:
ef:d4:6e:e4:7a:e6:c6:9e:4f:25:88:ee:af:e5:27:97:6d:ad:
9b:22:4e:d3:ce:6a:b3:f5:44:19:26:af:ee:3d:10:38:aa:14:
a3:0c:25:d0:fa:1a:d8:19:19:be:9d:9b:fa:57:3b:41:b9:6e:
6b:ae:73:81:4d:0f:5e:e0:cc:fc:08:f2:88:d8:9a:65:7a:90:
ec:21:a4:94:77:f1:28:9e:bc:5c:13:46:36:0b:fd:42:a6:0f:
f4:8c:d8:79:c3:b4:2d:97:ea:e4:17:2a:66:b6:6e:73:58:75:
64:a1:a0:d0:31:77:ce:8d:7f:c0:e0:89:3f:d6:b3:53:61:2b:
c4:9a:80:b5:d6:7c:a2:ab:2e:db:d8:cb:0f:74:d9:e3:09:b7:
40:64:28:f2:78:25:f7:67:77:59:04:cc:f5:65:28:2e:f1:c5:
d3:b0:82:a3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZwtbXE/kMLDdcuusebTCii8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWJjNDlkNWYwMWEyMzVhZjkyODljZjQ5MjZhZmZlZjdh
ZjkyYjAwHhcNMjYwMjA1MTA1MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTJlNWVmZGQ1MjM4MGU2NmE4NmM2NGNmOWNlZTNmNGZhOTBlZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldfC+x7DH2rPU7krpN6oDCgtqiFy
4taq3LJcsY1na0D350wTjFeZurb1wZSwr/rBIN0Yb0AL/uK2DW2GBpRLC2fyXp6o
CZaRb/sfUHrt99Me/T5xUzXigScC+PgBZlAiQKKyS4zK5J0o9a50jzmYvyFN7OH3
ULoc5nLZQgax9WQg3XhaAp+KeQKqtkp8M0pU9PrZ5idrE6HYG6msXitdfpcVJSUY
ueRUAP02zuMTOkF7/3V0NgMw/vMlSYhKUYNFDm9cus/ZeWrQ+t+XkonLWo2tSjDk
MXBJPDxn3sFRm1/s8pb5WPKgk+5+8gVkQ8JSS5v2SC1mgrw2dUHYEBaI9QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMUuXv3VI4DmaobGTPnO4/T6kO28MB8GA1UdIwQY
MBaAFK9bxJ1fAaI1r5KJz0kmr/73r5KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt
MTQ3ZTQ1NzI4NzNhLzEveFM1ZV9kVWpnT1pxaHNaTS1jN2o5UHFRN2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh
LzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf6sMA0E
AgACMAcDBQAqDFFAMA0GCSqGSIb3DQEBCwUAA4IBAQBq8DsxU+Sc/Nb38kpKAu0u
mu4DMnHYPMJ9ilWIE0r8Ao0lSDMD6f/3SBdqqKAiYpPDT1/f2dHoth9PerDIGm07
C+Idx485kKBp98sfBhUwNVEOuPSuwAw9o1Dv1G7keubGnk8liO6v5SeXba2bIk7T
zmqz9UQZJq/uPRA4qhSjDCXQ+hrYGRm+nZv6VztBuW5rrnOBTQ9e4Mz8CPKI2Jpl
epDsIaSUd/EonrxcE0Y2C/1Cpg/0jNh5w7Qtl+rkFypmtm5zWHVkoaDQMXfOjX/A
4Ik/1rNTYSvEmoC11nyiqy7b2MsPdNnjCbdAZCjyeCX3Z3dZBMz1ZSgu8cXTsIKj
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:54 2026 by rpki-client