Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/A_5oAx6RTX4seU-tsf_hsJM1QfM.roa
File: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (raw, json)
Hash identifier: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=
Subject key identifier: 03:FE:68:03:1E:91:4D:7E:2C:79:4F:AD:B1:FF:E1:B0:93:35:41:F3
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019C48A843E8C5A2198001403F87459DA19A
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/A_5oAx6RTX4seU-tsf_hsJM1QfM.roa
Signing time: Tue 10 Feb 2026 17:45:12 +0000
ROA not before: Tue 10 Feb 2026 17:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201733
IP address blocks: 217.113.197.0/24 maxlen: 24
217.113.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:a8:43:e8:c5:a2:19:80:01:40:3f:87:45:9d:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Feb 10 17:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03fe68031e914d7e2c794fadb1ffe1b0933541f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:4c:9a:2e:4d:80:39:a0:19:99:74:22:40:
6c:c5:ce:df:8b:af:43:3a:3d:c4:76:11:77:90:81:
b2:0b:35:ac:07:2e:1d:8a:4a:99:81:19:fa:ee:f7:
f3:1a:34:5e:3f:04:5f:42:3a:2e:0a:65:19:38:c1:
0d:5f:bf:22:8a:78:2c:bb:d7:95:6b:3d:f5:82:1a:
84:88:f9:14:de:d6:ef:cd:43:29:f2:72:71:c7:77:
f2:32:d1:29:c2:83:29:e7:bc:19:dd:86:90:43:cd:
e1:b2:c5:fc:53:00:4d:d4:be:0c:b3:62:46:a2:f7:
5d:55:99:10:df:b9:3b:dc:34:13:5b:a0:fc:52:35:
7f:d0:c9:1b:96:92:bb:d6:25:61:d6:d3:a7:67:9b:
9d:a9:37:c9:52:d3:9c:dc:d2:66:9c:77:3f:fb:e7:
2a:b9:25:13:48:fb:90:7c:87:d7:e2:60:8c:a9:e6:
90:48:9f:f5:ec:68:2c:e4:24:cd:3c:3d:74:57:24:
e4:99:a5:6b:4a:e1:30:4b:62:5d:82:fc:18:5d:28:
c5:2f:43:6d:f4:35:85:29:75:38:f0:65:2f:d3:c8:
4e:9f:e1:d6:bd:70:a9:7b:a3:0e:99:19:6b:63:2f:
31:2b:1c:cc:43:fd:e7:6b:dd:cb:2a:7b:16:b0:54:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:68:03:1E:91:4D:7E:2C:79:4F:AD:B1:FF:E1:B0:93:35:41:F3
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/A_5oAx6RTX4seU-tsf_hsJM1QfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.197.0-217.113.198.255
Signature Algorithm: sha256WithRSAEncryption
76:24:d1:42:4d:ee:cc:df:14:44:6f:f7:8b:1f:f5:12:aa:82:
3a:b4:0e:27:3f:de:4f:d0:0e:9f:21:5d:0d:8f:5f:30:28:8a:
8b:0d:e1:0c:a3:52:b9:78:cc:2c:8d:ad:1d:33:cc:51:2e:16:
09:a1:36:39:3f:a9:d3:d7:05:7c:9e:e4:1c:73:2f:12:e0:0c:
07:e5:17:70:a8:54:c8:5e:6d:f4:81:da:25:88:cb:9e:62:59:
3d:a3:c6:f9:c6:e3:c2:47:1b:35:63:e7:45:87:57:95:ce:47:
11:18:ab:97:7c:eb:3d:98:00:fe:41:82:66:1f:29:49:3e:4f:
44:86:a6:a2:5f:3e:56:81:d0:89:2f:40:a8:92:d6:49:81:16:
0d:b3:ab:70:d4:a1:05:d7:a6:d1:e9:67:47:78:14:05:77:d6:
4e:1a:fe:25:22:f9:9b:4c:c1:00:16:4d:9b:04:2c:f1:31:c9:
25:c4:a3:ad:f9:da:85:28:a3:8c:7e:13:9e:68:e5:36:a6:89:
49:33:cc:62:2f:b0:15:51:17:40:1a:4b:2b:13:f6:a3:a5:1a:
2d:fc:f3:bd:aa:ff:5c:1e:be:d6:f5:13:1c:4c:b6:5b:f0:25:
99:b6:73:ca:3d:e1:b1:22:7f:5b:c1:03:46:05:f5:33:cb:84:
93:ba:1b:4e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZxIqEPoxaIZgAFAP4dFnaGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz
OTQ1NTEwHhcNMjYwMjEwMTc0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2ZlNjgwMzFlOTE0ZDdlMmM3OTRmYWRiMWZmZTFiMDkzMzU0MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwItMmi5NgDmgGZl0IkBsxc7fi69D
Oj3EdhF3kIGyCzWsBy4dikqZgRn67vfzGjRePwRfQjouCmUZOMENX78iingsu9eV
az31ghqEiPkU3tbvzUMp8nJxx3fyMtEpwoMp57wZ3YaQQ83hssX8UwBN1L4Ms2JG
ovddVZkQ37k73DQTW6D8UjV/0MkblpK71iVh1tOnZ5udqTfJUtOc3NJmnHc/++cq
uSUTSPuQfIfX4mCMqeaQSJ/17Ggs5CTNPD10VyTkmaVrSuEwS2JdgvwYXSjFL0Nt
9DWFKXU48GUv08hOn+HWvXCpe6MOmRlrYy8xKxzMQ/3na93LKnsWsFQ5VwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAP+aAMekU1+LHlPrbH/4bCTNUHzMB8GA1UdIwQY
MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt
ODQxOGE5NmY2Nzk1LzEvQV81b0F4NlJUWDRzZVUtdHNmX2hzSk0xUWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1
LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZccUD
BADZccYwDQYJKoZIhvcNAQELBQADggEBAHYk0UJN7szfFERv94sf9RKqgjq0Dic/
3k/QDp8hXQ2PXzAoiosN4QyjUrl4zCyNrR0zzFEuFgmhNjk/qdPXBXye5BxzLxLg
DAflF3CoVMhebfSB2iWIy55iWT2jxvnG48JHGzVj50WHV5XORxEYq5d86z2YAP5B
gmYfKUk+T0SGpqJfPlaB0IkvQKiS1kmBFg2zq3DUoQXXptHpZ0d4FAV31k4a/iUi
+ZtMwQAWTZsELPExySXEo6352oUoo4x+E55o5TamiUkzzGIvsBVRF0AaSysT9qOl
Gi38872q/1wevtb1ExxMtlvwJZm2c8o94bEif1vBA0YF9TPLhJO6G04=
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:38:21 2026 by rpki-client