Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa
File: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (raw, json)
Hash identifier: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=
Subject key identifier: E6:8D:22:DE:23:18:84:A8:83:4A:C8:C9:C3:62:0E:FC:22:42:C9:12
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368CAB5095579BC27E5825B20131266
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62081
IP address blocks: 185.165.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:b5:09:55:79:bc:27:e5:82:5b:20:13:12:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e68d22de231884a8834ac8c9c3620efc2242c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:45:69:e1:53:f0:3c:ab:1a:71:28:3b:95:
b0:7a:7e:cb:81:6b:52:49:4e:18:d4:40:1d:a4:cf:
cd:b7:c5:5e:e8:fa:55:c3:ae:59:91:3a:06:f9:be:
83:e9:52:69:08:65:46:90:47:bb:5d:c9:44:0d:1a:
6b:a0:e2:78:20:b4:29:57:57:46:e5:54:cd:48:6e:
0e:49:ef:d4:1c:f1:29:cf:ab:a7:92:10:2e:df:5d:
13:eb:f6:52:b3:5f:55:ae:a7:6d:62:ee:e1:35:04:
63:a1:16:41:56:7f:67:f6:fc:69:84:79:da:57:92:
c3:25:91:82:66:9c:05:7d:31:b2:ef:4e:0d:02:37:
7a:f4:93:1d:7a:73:54:c5:27:07:30:cc:fb:e6:2c:
e9:23:dd:91:d9:9c:1a:ac:63:8b:db:43:4f:1f:44:
a9:14:d4:6a:79:a9:af:5e:e7:d2:b2:b0:08:43:32:
44:84:97:10:61:92:51:8e:ce:a3:da:d5:21:f5:1c:
05:b5:c2:ab:8f:ac:14:46:16:b2:36:70:c9:d7:63:
ce:cc:dd:49:68:27:de:8f:79:18:e4:f8:62:e0:2b:
db:52:fa:3c:e5:51:98:13:ef:29:64:c5:c7:0c:1b:
6c:1f:ea:28:53:d9:5f:3f:75:ae:19:78:94:24:9d:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:22:DE:23:18:84:A8:83:4A:C8:C9:C3:62:0E:FC:22:42:C9:12
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.149.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2f:f4:41:8d:ac:ef:f4:e1:54:5c:89:c2:1c:f9:00:e4:5c:
08:aa:c8:b6:7b:5b:45:a7:d0:a6:c5:25:d6:3d:00:2f:22:f0:
40:09:9e:78:6e:64:b6:79:e1:1f:6a:59:99:64:0e:06:b9:ee:
c7:43:d7:b7:16:3c:58:bf:b6:1f:2d:43:34:4c:a0:91:4b:cc:
98:1b:79:2d:61:f3:37:0c:09:ae:79:21:98:91:5a:2f:0f:73:
40:19:b0:74:f9:68:db:d1:f8:d4:63:b5:d0:29:87:5a:3c:ae:
fe:7c:8f:7d:f2:d1:fe:97:fc:75:f3:ba:e8:cb:3c:5f:6f:e4:
1c:d4:a7:17:60:29:90:d0:e6:33:e9:a3:bb:52:db:e4:2c:27:
77:de:e5:bb:ae:c7:80:f6:9c:b3:2d:1e:09:55:52:c1:e9:bc:
77:19:37:1e:97:79:f0:8c:7c:4b:4f:74:42:d8:2b:3d:d9:a1:
2a:53:3b:82:64:9d:34:d2:c4:f1:be:cb:5b:c6:ce:e2:de:b9:
9b:d7:f4:54:b3:3e:a4:61:8a:fe:9e:3f:19:aa:7f:03:4d:52:
b9:48:4e:66:d9:50:23:88:da:b3:a5:ab:31:f0:b0:57:39:79:
d4:a2:c9:cc:ec:7d:ea:2a:12:da:70:1d:11:a3:29:ce:0c:75:
ba:b5:7f:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMq1CVV5vCflglsgExJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm
NmExOTAwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjhkMjJkZTIzMTg4NGE4ODM0YWM4YzljMzYyMGVmYzIyNDJjOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktJFaeFT8DyrGnEoO5Wwen7LgWtS
SU4Y1EAdpM/Nt8Ve6PpVw65ZkToG+b6D6VJpCGVGkEe7XclEDRproOJ4ILQpV1dG
5VTNSG4OSe/UHPEpz6unkhAu310T6/ZSs19VrqdtYu7hNQRjoRZBVn9n9vxphHna
V5LDJZGCZpwFfTGy704NAjd69JMdenNUxScHMMz75izpI92R2ZwarGOL20NPH0Sp
FNRqeamvXufSsrAIQzJEhJcQYZJRjs6j2tUh9RwFtcKrj6wURhayNnDJ12POzN1J
aCfej3kY5Phi4CvbUvo85VGYE+8pZMXHDBtsH+ooU9lfP3WuGXiUJJ2njwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaNIt4jGISog0rIycNiDvwiQskSMB8GA1UdIwQY
MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvNW8waTNpTVloS2lEU3NqSncySU9fQ0pDeVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaWVMA0G
CSqGSIb3DQEBCwUAA4IBAQAhL/RBjazv9OFUXInCHPkA5FwIqsi2e1tFp9CmxSXW
PQAvIvBACZ54bmS2eeEfalmZZA4Gue7HQ9e3FjxYv7YfLUM0TKCRS8yYG3ktYfM3
DAmueSGYkVovD3NAGbB0+Wjb0fjUY7XQKYdaPK7+fI998tH+l/x187royzxfb+Qc
1KcXYCmQ0OYz6aO7UtvkLCd33uW7rseA9pyzLR4JVVLB6bx3GTcel3nwjHxLT3RC
2Cs92aEqUzuCZJ000sTxvstbxs7i3rmb1/RUsz6kYYr+nj8Zqn8DTVK5SE5m2VAj
iNqzpasx8LBXOXnUosnM7H3qKhLacB0RoynODHW6tX9U
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:03 2026 by rpki-client