Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ayb_U4VlXsNKiYg0cDPR22nMM7E.roa
File: Ayb_U4VlXsNKiYg0cDPR22nMM7E.roa (raw, json)
Hash identifier: qESSzwlPr0d90p3zms6b4HMZKccgQ4Bg0gBpEg+1STE=
Subject key identifier: 03:26:FF:53:85:65:5E:C3:4A:89:88:34:70:33:D1:DB:69:CC:33:B1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1008C35A7A5A372BB91DBA83F3C6C5113
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ayb_U4VlXsNKiYg0cDPR22nMM7E.roa
Signing time: Sat 03 Oct 2026 06:55:51 +0000
ROA not before: Sat 03 Oct 2026 06:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213512
IP address blocks: 5.175.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:8c:35:a7:a5:a3:72:bb:91:db:a8:3f:3c:6c:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 3 06:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0326ff5385655ec34a8988347033d1db69cc33b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:06:62:d6:b0:f5:5b:1d:5c:c9:3a:4f:71:
eb:ce:b7:27:9d:9c:f7:22:8b:23:62:09:89:57:cc:
ce:3f:b3:6f:44:74:bc:3b:90:5d:7a:9a:7a:20:2e:
6c:3a:0d:fd:d1:52:23:e4:28:02:fe:91:03:56:d5:
10:e5:31:e4:08:37:fe:05:3f:2f:59:b4:ec:94:e3:
a2:66:cc:e9:5e:8f:2c:71:53:f2:5f:33:10:c6:ed:
80:85:1a:35:61:02:df:26:53:70:8a:aa:05:16:60:
ad:43:7b:52:2b:b5:f6:1c:66:96:26:c5:fe:fe:0c:
80:d0:5a:3b:98:9c:94:16:ab:b4:bb:5d:d2:68:36:
04:db:2c:86:5a:71:62:ec:f4:55:a2:e1:0a:f0:03:
a0:3e:14:0a:3c:cc:9f:99:91:8a:c2:39:06:01:92:
6d:d9:84:53:e5:a2:72:d7:9c:d2:ce:63:3b:ef:ea:
bc:9a:44:44:df:aa:6d:e2:73:04:23:74:12:9d:1c:
d5:43:63:eb:22:91:58:bd:10:cd:4b:58:18:6a:7a:
a7:cc:19:78:c4:1c:3a:16:66:89:7b:90:ba:b6:1a:
9d:93:d8:58:64:23:54:ad:2c:39:03:25:6a:26:a7:
0f:de:6f:9b:ee:99:e6:21:ef:8c:79:3b:c9:90:40:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:FF:53:85:65:5E:C3:4A:89:88:34:70:33:D1:DB:69:CC:33:B1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ayb_U4VlXsNKiYg0cDPR22nMM7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:96:3f:0a:6c:64:b2:3b:ba:3b:d6:98:12:ff:8e:43:ff:de:
be:20:94:ae:22:60:dd:8c:f8:7f:13:10:66:d0:4f:0f:d7:09:
3b:7e:5c:19:b6:7f:7f:55:a4:a9:92:5f:46:5f:4a:c8:52:49:
fd:29:a7:ac:fc:dd:f4:ab:0d:36:6b:92:4a:b6:5b:8d:0b:2b:
c3:d9:07:5b:45:87:70:a0:a2:03:78:a2:6e:eb:88:7d:a7:25:
81:c0:ea:55:e7:4c:02:9a:e0:71:47:82:ad:08:b3:37:cb:50:
5d:ab:df:79:b8:81:10:db:fb:be:2f:9a:79:3b:4d:0a:ae:b4:
a7:cd:de:a1:0e:f1:21:a4:32:36:a8:9a:d8:fd:5e:be:ea:df:
d8:c1:bb:48:33:81:1e:1b:df:c2:49:18:e5:01:ba:54:50:2c:
3b:32:a3:73:bf:c8:70:53:49:ab:de:54:fd:b7:e1:4a:51:33:
37:eb:c7:08:88:ae:e7:9e:c2:7c:50:fe:4e:30:80:f0:17:f2:
b2:74:02:59:17:2a:c8:e9:2b:f3:1b:d0:11:06:3b:d8:6c:f8:
8f:83:8f:c7:73:ce:af:0e:57:1c:18:d5:bb:d8:be:86:99:e5:
8e:25:ef:68:58:b0:cc:a8:eb:a9:9a:0d:8d:61:aa:30:0a:c9:
94:1f:60:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEAjDWnpaNyu5HbqD88bFETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDAzMDY1NTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzI2ZmY1Mzg1NjU1ZWMzNGE4OTg4MzQ3MDMzZDFkYjY5Y2MzM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEsGYtaw9VsdXMk6T3HrzrcnnZz3
IosjYgmJV8zOP7NvRHS8O5Bdepp6IC5sOg390VIj5CgC/pEDVtUQ5THkCDf+BT8v
WbTslOOiZszpXo8scVPyXzMQxu2AhRo1YQLfJlNwiqoFFmCtQ3tSK7X2HGaWJsX+
/gyA0Fo7mJyUFqu0u13SaDYE2yyGWnFi7PRVouEK8AOgPhQKPMyfmZGKwjkGAZJt
2YRT5aJy15zSzmM77+q8mkRE36pt4nMEI3QSnRzVQ2PrIpFYvRDNS1gYanqnzBl4
xBw6FmaJe5C6thqdk9hYZCNUrSw5AyVqJqcP3m+b7pnmIe+MeTvJkEClLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMm/1OFZV7DSomINHAz0dtpzDOxMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQXliX1U0VmxYc05LaVlnMGNEUFIyMm5NTTdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+OMA0G
CSqGSIb3DQEBCwUAA4IBAQAelj8KbGSyO7o71pgS/45D/96+IJSuImDdjPh/ExBm
0E8P1wk7flwZtn9/VaSpkl9GX0rIUkn9Kaes/N30qw02a5JKtluNCyvD2QdbRYdw
oKIDeKJu64h9pyWBwOpV50wCmuBxR4KtCLM3y1Bdq995uIEQ2/u+L5p5O00KrrSn
zd6hDvEhpDI2qJrY/V6+6t/YwbtIM4EeG9/CSRjlAbpUUCw7MqNzv8hwU0mr3lT9
t+FKUTM368cIiK7nnsJ8UP5OMIDwF/KydAJZFyrI6SvzG9ARBjvYbPiPg4/Hc86v
DlccGNW72L6GmeWOJe9oWLDMqOupmg2NYaowCsmUH2BK
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:40:24 2026 by rpki-client