Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/5s94JKAXDJrQpueM4W0HRuRUXqQ.roa
File: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (raw, json)
Hash identifier: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=
Subject key identifier: E6:CF:78:24:A0:17:0C:9A:D0:A6:E7:8C:E1:6D:07:46:E4:54:5E:A4
Certificate issuer: /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial: 019B79ED57576F871AF34F0EC7AA6E9DEE24
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/5s94JKAXDJrQpueM4W0HRuRUXqQ.roa
Signing time: Thu 01 Jan 2026 14:19:16 +0000
ROA not before: Thu 01 Jan 2026 14:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58031
IP address blocks: 91.238.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:57:57:6f:87:1a:f3:4f:0e:c7:aa:6e:9d:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Validity
Not Before: Jan 1 14:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6cf7824a0170c9ad0a6e78ce16d0746e4545ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:aa:a6:15:23:bd:0f:91:fd:81:37:86:3d:
c6:bd:eb:ed:1e:2c:bf:5b:18:08:ee:17:57:f7:61:
4d:22:13:8b:1f:46:d6:2a:98:bf:f6:f7:9a:c7:01:
38:47:88:5b:31:64:ac:4a:ba:17:8f:80:b4:b3:60:
b8:7b:06:23:a7:b6:68:d6:d1:1d:26:94:11:49:39:
bb:d4:e8:b7:6a:76:5c:cd:0a:ef:7f:b5:f9:d7:69:
57:45:19:61:93:b5:68:26:25:6a:57:c6:70:70:d0:
dc:ad:19:0b:7d:c6:6e:c2:b8:3e:9a:35:40:7a:7d:
a2:93:9d:92:ef:96:13:78:61:e6:c5:5d:b1:a9:1c:
70:fd:5d:56:e2:6d:6b:d8:1b:37:a0:7d:eb:e1:53:
48:03:a5:6e:a7:24:c2:66:34:13:7e:c9:b5:89:5d:
d4:a7:ee:c0:be:61:c1:ed:b2:c1:87:ef:3f:39:0d:
dd:04:70:ce:0d:c8:46:d7:13:50:06:3b:43:72:af:
14:28:44:8e:cc:41:71:f9:53:7d:e7:f1:19:06:d8:
85:4a:56:61:96:24:72:a3:f2:b6:68:4d:cf:20:df:
52:6a:5e:bf:86:3a:c6:64:06:cd:f0:f3:86:ed:83:
15:4a:8f:e4:5b:8d:8a:0e:1b:07:d5:05:29:71:c9:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:78:24:A0:17:0C:9A:D0:A6:E7:8C:E1:6D:07:46:E4:54:5E:A4
X509v3 Authority Key Identifier:
keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/5s94JKAXDJrQpueM4W0HRuRUXqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.2.0/23
Signature Algorithm: sha256WithRSAEncryption
52:88:74:12:57:2b:97:29:7e:98:ee:ed:63:a5:ef:23:0c:0b:
5c:7c:ce:4b:d7:e7:2c:df:72:62:78:16:8e:cd:48:63:01:f8:
c5:a9:b1:0a:d9:62:01:30:a5:4b:98:54:8a:0a:22:28:c7:cc:
62:86:1b:0c:63:5c:2b:df:c6:08:b9:2d:1f:83:63:ee:f7:13:
59:3e:c0:59:0a:94:e4:c3:f8:09:ee:26:50:00:6d:05:b0:a9:
23:1b:fd:a8:1e:eb:15:f1:ff:21:a2:cb:64:2e:d4:df:28:c7:
f6:8d:5b:2c:7c:97:3e:d1:0c:ca:f2:2c:2e:a9:91:87:05:6e:
73:4d:64:1e:a0:48:83:5b:cc:57:77:47:a0:da:df:d4:5f:05:
67:48:ae:33:f9:91:a8:07:28:eb:cc:ae:f6:26:8f:d5:93:be:
d3:77:8b:2b:cb:a4:6c:27:f7:be:38:1d:a2:e9:ac:33:8a:22:
1b:ab:34:b5:b2:c1:42:f5:fc:8b:2c:11:8b:0c:94:1d:5b:84:
9c:7b:6d:9f:fb:36:fb:87:51:37:74:96:f8:4f:7c:29:e8:b1:
c2:eb:40:10:6c:6e:47:db:fc:7e:c9:3a:78:3b:f2:ee:1f:fa:
b8:1d:2d:f2:6b:b9:09:63:cb:3a:d4:c3:8a:8d:ed:9d:50:ba:
a8:d7:24:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57VdXb4ca808Ox6pune4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JkNGMyMzA2MmQ2OTUzN2ZiMmU4YThhY2NiZmIwMjdm
MmI1MjUwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmNmNzgyNGEwMTcwYzlhZDBhNmU3OGNlMTZkMDc0NmU0NTQ1ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1liqphUjvQ+R/YE3hj3GvevtHiy/
WxgI7hdX92FNIhOLH0bWKpi/9veaxwE4R4hbMWSsSroXj4C0s2C4ewYjp7Zo1tEd
JpQRSTm71Oi3anZczQrvf7X512lXRRlhk7VoJiVqV8ZwcNDcrRkLfcZuwrg+mjVA
en2ik52S75YTeGHmxV2xqRxw/V1W4m1r2Bs3oH3r4VNIA6VupyTCZjQTfsm1iV3U
p+7AvmHB7bLBh+8/OQ3dBHDODchG1xNQBjtDcq8UKESOzEFx+VN95/EZBtiFSlZh
liRyo/K2aE3PIN9Sal6/hjrGZAbN8POG7YMVSo/kW42KDhsH1QUpccnR+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObPeCSgFwya0KbnjOFtB0bkVF6kMB8GA1UdIwQY
MBaAFOjL1MIwYtaVN/suiorMv7An8rUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYt
NzgyM2JjY2E1OTcwLzEvNXM5NEpLQVhESnJRcHVlTTRXMEhSdVJVWHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYtNzgyM2JjY2E1OTcw
LzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+4CMA0G
CSqGSIb3DQEBCwUAA4IBAQBSiHQSVyuXKX6Y7u1jpe8jDAtcfM5L1+cs33JieBaO
zUhjAfjFqbEK2WIBMKVLmFSKCiIox8xihhsMY1wr38YIuS0fg2Pu9xNZPsBZCpTk
w/gJ7iZQAG0FsKkjG/2oHusV8f8hostkLtTfKMf2jVssfJc+0QzK8iwuqZGHBW5z
TWQeoEiDW8xXd0eg2t/UXwVnSK4z+ZGoByjrzK72Jo/Vk77Td4sry6RsJ/e+OB2i
6awziiIbqzS1ssFC9fyLLBGLDJQdW4Sce22f+zb7h1E3dJb4T3wp6LHC60AQbG5H
2/x+yTp4O/LuH/q4HS3ya7kJY8s61MOKje2dULqo1yRS
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:42 2026 by rpki-client