Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/v1_hk1NXy3smLFW9qK8TsRlTmu8.roa
File: v1_hk1NXy3smLFW9qK8TsRlTmu8.roa (raw, json)
Hash identifier: SgLTyTpksP6u6jo02bfyBjaqFhHl1zsqKh+a8ggtzmA=
Subject key identifier: BF:5F:E1:93:53:57:CB:7B:26:2C:55:BD:A8:AF:13:B1:19:53:9A:EF
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019C23770BEF9F5FE43B530887CD7DFBD45D
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/v1_hk1NXy3smLFW9qK8TsRlTmu8.roa
Signing time: Tue 03 Feb 2026 12:25:30 +0000
ROA not before: Tue 03 Feb 2026 12:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210852
IP address blocks: 45.10.129.0/24 maxlen: 24
46.253.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:77:0b:ef:9f:5f:e4:3b:53:08:87:cd:7d:fb:d4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Feb 3 12:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5fe1935357cb7b262c55bda8af13b119539aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:ce:78:b6:38:b9:3c:e9:13:56:e4:78:5d:
8b:9c:36:88:2d:cc:e3:f8:41:cb:75:5c:1a:17:91:
25:80:f1:68:dd:e3:b7:a2:1c:aa:2d:90:0f:d4:11:
8a:b6:03:2d:62:96:9d:e8:dd:64:2f:e6:5f:0e:8d:
0d:de:aa:88:e8:5a:87:e8:a6:15:f0:b0:7e:2b:26:
da:73:fa:97:cc:f6:06:2b:d2:6f:fe:54:16:f0:e3:
21:84:5a:4b:49:14:73:fa:33:af:84:e2:31:0f:b2:
3e:ed:41:a0:fd:25:74:38:25:4d:01:fa:b9:23:1a:
bd:51:13:a4:b6:66:51:4d:1e:37:c2:a7:0c:a4:7c:
59:8e:40:ba:82:82:9b:bf:bd:a4:e9:e0:a7:f6:23:
62:80:a9:d6:5d:bc:98:dd:b6:7b:1c:da:61:eb:5f:
b6:c8:ca:7c:19:a3:0e:be:bf:88:33:bc:20:63:e5:
37:f8:cb:ac:3a:a5:94:0d:ef:72:8b:e9:58:56:ef:
f4:59:46:7a:16:e1:52:e5:84:34:42:d7:70:df:ed:
15:b0:58:16:31:55:0e:76:8b:ed:42:b3:b5:f3:35:
5f:b9:85:7a:43:6a:5f:70:ae:43:50:1e:ea:12:de:
b0:2a:0d:65:b6:c0:03:bd:d9:2f:73:a3:92:6c:6f:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:E1:93:53:57:CB:7B:26:2C:55:BD:A8:AF:13:B1:19:53:9A:EF
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/v1_hk1NXy3smLFW9qK8TsRlTmu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.129.0/24
46.253.139.0/24
Signature Algorithm: sha256WithRSAEncryption
74:47:40:b9:99:c6:df:18:58:3c:ba:b6:3e:9d:36:e7:8e:fd:
37:0b:c6:1a:18:02:cc:57:5a:08:f3:49:d8:19:de:98:a6:51:
05:bd:f7:c2:2a:94:d0:d5:67:87:27:ac:8f:fa:9f:dd:99:e7:
6d:f0:24:8e:91:12:1d:70:f4:50:4c:38:35:6b:86:09:cf:49:
36:a7:0c:1a:15:92:be:67:1f:d6:68:2c:d2:b2:83:33:e8:6e:
7f:cb:aa:1f:d0:fc:06:d0:5a:93:4f:83:42:6f:cb:c8:e4:32:
5b:0c:da:84:63:e4:85:f2:61:8d:d8:d7:81:3e:f5:7a:f8:57:
2a:ed:d9:79:7c:7c:16:11:98:8d:ce:e0:ab:8d:04:bc:ea:bb:
59:7d:f8:00:e7:86:fc:a6:21:c1:89:14:e3:23:8c:12:66:78:
90:6e:3b:af:2a:09:6d:04:8e:cc:73:f2:0c:c1:d3:05:4e:4e:
ce:20:fd:b2:f5:d7:e0:35:92:5d:cc:58:f1:28:70:70:5f:11:
7d:38:d1:fd:37:4d:64:57:af:64:e1:06:be:a1:a0:ca:18:c6:
d8:6f:c1:6d:17:e6:4d:56:2f:2e:93:30:2a:ae:b4:61:1a:39:
d0:7d:09:ed:80:e0:82:32:0c:ad:b1:c5:56:3e:03:51:38:d5:
63:59:be:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwjdwvvn1/kO1MIh819+9RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNThjYmM0YWFlM2Y4MGM0OWIzNzI5MTFhOGQ0NDg2MWNk
ZmVlY2IwHhcNMjYwMjAzMTIyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjVmZTE5MzUzNTdjYjdiMjYyYzU1YmRhOGFmMTNiMTE5NTM5YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XnOeLY4uTzpE1bkeF2LnDaILczj
+EHLdVwaF5ElgPFo3eO3ohyqLZAP1BGKtgMtYpad6N1kL+ZfDo0N3qqI6FqH6KYV
8LB+Kybac/qXzPYGK9Jv/lQW8OMhhFpLSRRz+jOvhOIxD7I+7UGg/SV0OCVNAfq5
Ixq9UROktmZRTR43wqcMpHxZjkC6goKbv72k6eCn9iNigKnWXbyY3bZ7HNph61+2
yMp8GaMOvr+IM7wgY+U3+MusOqWUDe9yi+lYVu/0WUZ6FuFS5YQ0Qtdw3+0VsFgW
MVUOdovtQrO18zVfuYV6Q2pfcK5DUB7qEt6wKg1ltsADvdkvc6OSbG/xKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL9f4ZNTV8t7JixVvaivE7EZU5rvMB8GA1UdIwQY
MBaAFM9Yy8Sq4/gMSbNykRqNRIYc3+7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEt
NTBkN2Q5NGUyYjlmLzEvdjFfaGsxTlh5M3NtTEZXOXFLOFRzUmxUbXU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEtNTBkN2Q5NGUyYjlm
LzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQqBAwQA
Lv2LMA0GCSqGSIb3DQEBCwUAA4IBAQB0R0C5mcbfGFg8urY+nTbnjv03C8YaGALM
V1oI80nYGd6YplEFvffCKpTQ1WeHJ6yP+p/dmedt8CSOkRIdcPRQTDg1a4YJz0k2
pwwaFZK+Zx/WaCzSsoMz6G5/y6of0PwG0FqTT4NCb8vI5DJbDNqEY+SF8mGN2NeB
PvV6+Fcq7dl5fHwWEZiNzuCrjQS86rtZffgA54b8piHBiRTjI4wSZniQbjuvKglt
BI7Mc/IMwdMFTk7OIP2y9dfgNZJdzFjxKHBwXxF9ONH9N01kV69k4Qa+oaDKGMbY
b8FtF+ZNVi8ukzAqrrRhGjnQfQntgOCCMgytscVWPgNRONVjWb6d
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:00 2026 by rpki-client