Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa
File: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (raw, json)
Hash identifier: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=
Subject key identifier: E5:90:04:19:26:BE:27:A0:6A:BE:2C:CC:5C:68:F4:51:C4:B7:29:CF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019C1F88E2063B91D59E1D6FCDC40DE0B6AB
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa
Signing time: Mon 02 Feb 2026 18:06:30 +0000
ROA not before: Mon 02 Feb 2026 18:06:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202303
IP address blocks: 45.74.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:88:e2:06:3b:91:d5:9e:1d:6f:cd:c4:0d:e0:b6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 2 18:06:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e590041926be27a06abe2ccc5c68f451c4b729cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:3c:3b:ed:a5:78:a2:a2:cc:67:6b:b3:ac:
40:dc:a7:dc:c8:60:bb:39:1a:ea:14:ab:62:c9:5e:
5c:4f:ed:8b:d0:4c:34:ec:dc:d0:b9:23:16:a7:cb:
2d:cf:db:e9:15:68:41:2c:01:30:70:fa:05:41:6e:
f5:e3:20:f9:c3:f2:2e:45:d4:53:14:0d:e6:36:1b:
d8:15:58:1e:77:c3:59:38:f4:23:25:5e:41:e3:53:
92:28:68:d1:66:3e:b7:a4:59:8f:c5:a3:f8:03:ce:
67:b9:15:e6:08:e5:dc:af:03:52:ef:07:9d:f8:f9:
82:f7:55:32:c2:ca:88:14:98:be:1e:f5:00:cc:5d:
30:b2:9e:e9:25:48:fb:6a:c0:36:1c:be:96:4f:56:
de:ef:93:51:38:22:bd:d9:ac:c5:e7:ec:16:78:e8:
0e:b3:65:10:8b:c0:69:d8:1d:8d:5c:ed:88:e0:38:
95:c5:f7:16:14:4a:23:e5:cf:29:dd:9c:5f:a5:c9:
df:cd:de:c0:bc:9f:ca:20:21:a8:24:87:14:47:6f:
47:31:79:4a:f3:74:20:59:a5:41:9b:e6:ea:87:61:
8a:69:ef:67:b0:b3:ef:21:81:fd:75:81:29:1a:74:
fb:0c:95:79:0f:98:72:a4:93:19:ec:d0:27:a3:68:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:04:19:26:BE:27:A0:6A:BE:2C:CC:5C:68:F4:51:C4:B7:29:CF
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.240.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5d:58:a3:fa:af:85:ea:ff:5d:a4:36:2c:8a:5a:f5:48:40:
c8:eb:f4:ba:ee:20:23:a7:de:35:e7:8f:42:bf:09:7d:6f:40:
c8:c9:63:83:4f:d6:0a:4f:54:2d:5e:53:73:61:dd:d9:32:73:
ff:45:98:a8:58:fb:ca:3d:b7:1a:6d:be:19:56:ad:a2:78:f6:
53:4b:00:1a:49:60:61:63:fd:21:02:e4:f3:42:3a:6b:b2:19:
2e:8a:59:68:79:51:6c:26:6c:5e:24:7b:98:ac:ce:88:a0:09:
cd:67:ab:6f:60:1c:71:f6:b3:51:2f:de:98:89:a1:45:5f:01:
f9:e3:cc:6c:5f:49:b5:80:2a:c3:cd:03:00:1e:6d:11:0d:54:
3b:1a:4b:47:14:c3:41:ea:c5:58:47:b2:1f:37:b6:9e:3f:aa:
6d:34:cc:f6:86:75:9a:ba:d4:21:43:97:a0:30:57:aa:af:e0:
3e:9e:ad:83:cd:34:75:73:c0:c0:25:55:73:df:52:27:dd:74:
c2:b1:2e:c2:53:ba:ad:af:07:c3:e0:2c:5d:47:f6:a5:ba:ed:
7d:08:f4:f3:e3:db:57:b1:65:cf:8a:f9:69:a1:ba:3c:32:11:
0b:5a:c1:27:44:b8:4f:e6:3a:ac:77:b3:0b:95:db:57:ad:53:
c0:52:84:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwfiOIGO5HVnh1vzcQN4LarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwMjAyMTgwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTkwMDQxOTI2YmUyN2EwNmFiZTJjY2M1YzY4ZjQ1MWM0YjcyOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLQ8O+2leKKizGdrs6xA3KfcyGC7
ORrqFKtiyV5cT+2L0Ew07NzQuSMWp8stz9vpFWhBLAEwcPoFQW714yD5w/IuRdRT
FA3mNhvYFVged8NZOPQjJV5B41OSKGjRZj63pFmPxaP4A85nuRXmCOXcrwNS7wed
+PmC91UywsqIFJi+HvUAzF0wsp7pJUj7asA2HL6WT1be75NROCK92azF5+wWeOgO
s2UQi8Bp2B2NXO2I4DiVxfcWFEoj5c8p3Zxfpcnfzd7AvJ/KICGoJIcUR29HMXlK
83QgWaVBm+bqh2GKae9nsLPvIYH9dYEpGnT7DJV5D5hypJMZ7NAno2ijpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWQBBkmviegar4szFxo9FHEtynPMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvNVpBRUdTYS1KNkJxdml6TVhHajBVY1MzS2M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUrwMA0G
CSqGSIb3DQEBCwUAA4IBAQATXVij+q+F6v9dpDYsilr1SEDI6/S67iAjp941549C
vwl9b0DIyWODT9YKT1QtXlNzYd3ZMnP/RZioWPvKPbcabb4ZVq2iePZTSwAaSWBh
Y/0hAuTzQjprshkuilloeVFsJmxeJHuYrM6IoAnNZ6tvYBxx9rNRL96YiaFFXwH5
48xsX0m1gCrDzQMAHm0RDVQ7GktHFMNB6sVYR7IfN7aeP6ptNMz2hnWautQhQ5eg
MFeqr+A+nq2DzTR1c8DAJVVz31In3XTCsS7CU7qtrwfD4CxdR/aluu19CPTz49tX
sWXPivlpobo8MhELWsEnRLhP5jqsd7MLldtXrVPAUoT8
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:05 2026 by rpki-client