Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4FoIETAiLuzLyOU1Q-rHhdYJRuY.roa
File: 4FoIETAiLuzLyOU1Q-rHhdYJRuY.roa (raw, json)
Hash identifier: HXoUIAXtNh/Hja36lY36q0+m1hCCvUea18S1AfSBw2o=
Subject key identifier: E0:5A:08:11:30:22:2E:EC:CB:C8:E5:35:43:EA:C7:85:D6:09:46:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A026D1A502FD41963E8A571646DD82B008
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4FoIETAiLuzLyOU1Q-rHhdYJRuY.roa
Signing time: Sat 22 Aug 2026 00:14:28 +0000
ROA not before: Sat 22 Aug 2026 00:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200051
IP address blocks: 5.175.182.0/24 maxlen: 24
5.230.201.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:d1:a5:02:fd:41:96:3e:8a:57:16:46:dd:82:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 22 00:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e05a081130222eeccbc8e53543eac785d60946e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:2d:46:c1:51:f0:e3:06:73:2f:0e:76:7c:
22:c7:a0:41:8d:5a:c2:64:1a:49:8d:7c:01:17:38:
53:32:36:97:46:f9:77:eb:e5:27:f5:41:f4:6f:85:
55:d8:0b:b1:d5:85:c8:fb:28:83:e7:a3:97:28:15:
19:fd:b9:89:cc:03:55:50:68:f6:8c:8d:09:06:6b:
81:8c:d4:2d:fe:a8:18:6d:77:e6:6f:73:2c:70:0c:
97:0c:9a:4a:14:d0:af:ce:0e:c0:2a:12:c2:3e:00:
61:be:18:2c:80:05:db:16:68:c3:89:e2:e3:9d:49:
1a:1a:4f:07:34:51:96:27:37:52:01:c1:c3:f6:57:
2b:ba:1a:32:68:90:d2:80:97:8c:25:b9:47:5d:69:
ed:0f:22:69:da:dd:cc:8e:19:69:8a:df:38:e1:8c:
1a:b4:eb:5f:1a:d0:23:36:7f:1b:f5:04:59:7f:c3:
b9:a7:63:61:f6:b8:fe:3c:e6:fa:48:68:68:e4:b6:
40:64:58:33:c7:fe:63:58:fe:5b:31:a5:f7:ea:18:
ce:f9:61:2d:f7:7f:d0:d3:60:b8:7a:19:c6:1b:26:
74:13:90:c8:1c:54:b2:15:d7:e4:66:22:f7:f8:44:
dd:72:4e:21:3f:ea:5c:50:37:49:e1:e0:f4:15:74:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:08:11:30:22:2E:EC:CB:C8:E5:35:43:EA:C7:85:D6:09:46:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4FoIETAiLuzLyOU1Q-rHhdYJRuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.182.0/24
5.230.201.0/24
89.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e3:e7:33:ae:ed:10:3e:7d:18:27:0d:67:13:90:3d:88:c6:
dc:57:3a:b6:3f:82:9c:17:6a:33:48:4f:ee:98:44:7f:f4:88:
31:37:d9:90:b1:40:49:cd:4b:5b:d2:1e:21:b3:a6:7b:f2:24:
60:84:65:f6:40:1f:4f:12:4c:2a:d0:32:a2:e1:35:2d:73:c5:
ee:95:20:39:7b:8f:8a:c9:4f:c8:2a:10:9c:01:9c:85:74:e2:
39:ab:b2:d0:f9:45:2c:01:ff:9e:11:ac:97:86:e6:30:f5:cf:
e2:ed:72:78:bb:93:16:14:2c:c3:29:89:83:41:8c:cd:0a:ff:
d0:ad:6b:21:4a:e5:05:21:0d:85:1b:b4:31:8f:0e:c1:ec:8a:
19:32:4a:2c:f4:46:e7:c3:bc:c2:35:d2:e1:7a:e6:dd:d7:ce:
d4:7e:27:a7:93:f9:90:5d:37:1f:c4:10:e9:2c:28:b9:32:77:
1f:c9:0a:f7:9d:c8:a0:f1:fc:01:14:c8:58:e0:91:af:68:a5:
df:a1:f6:76:be:02:68:db:15:f6:7d:36:ea:c2:f4:1b:fa:33:
c0:f9:f3:47:28:00:67:d2:a9:b1:9a:38:ff:dc:40:b5:53:f3:
d9:d1:03:b7:ba:45:b8:86:89:6a:9b:15:ae:c9:eb:c2:9e:9e:
0a:01:94:dd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAm0aUC/UGWPopXFkbdgrAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODIyMDAxNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDVhMDgxMTMwMjIyZWVjY2JjOGU1MzU0M2VhYzc4NWQ2MDk0NmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCotRsFR8OMGcy8Odnwix6BBjVrC
ZBpJjXwBFzhTMjaXRvl36+Un9UH0b4VV2Aux1YXI+yiD56OXKBUZ/bmJzANVUGj2
jI0JBmuBjNQt/qgYbXfmb3MscAyXDJpKFNCvzg7AKhLCPgBhvhgsgAXbFmjDieLj
nUkaGk8HNFGWJzdSAcHD9lcruhoyaJDSgJeMJblHXWntDyJp2t3Mjhlpit844Ywa
tOtfGtAjNn8b9QRZf8O5p2Nh9rj+POb6SGho5LZAZFgzx/5jWP5bMaX36hjO+WEt
93/Q02C4ehnGGyZ0E5DIHFSyFdfkZiL3+ETdck4hP+pcUDdJ4eD0FXQnGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOBaCBEwIi7sy8jlNUPqx4XWCUbmMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNEZvSUVUQWlMdXpMeU9VMVEtckhoZFlKUnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa+2AwQA
BebJAwQAWWpTMA0GCSqGSIb3DQEBCwUAA4IBAQBT4+czru0QPn0YJw1nE5A9iMbc
Vzq2P4KcF2ozSE/umER/9IgxN9mQsUBJzUtb0h4hs6Z78iRghGX2QB9PEkwq0DKi
4TUtc8XulSA5e4+KyU/IKhCcAZyFdOI5q7LQ+UUsAf+eEayXhuYw9c/i7XJ4u5MW
FCzDKYmDQYzNCv/QrWshSuUFIQ2FG7Qxjw7B7IoZMkos9Ebnw7zCNdLheubd187U
fienk/mQXTcfxBDpLCi5MncfyQr3ncig8fwBFMhY4JGvaKXfofZ2vgJo2xX2fTbq
wvQb+jPA+fNHKABn0qmxmjj/3EC1U/PZ0QO3ukW4holqmxWuyevCnp4KAZTd
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:39 2026 by rpki-client