Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Be0FnJTKm_YU3cZRU6Wefgmk8OU.roa
File: Be0FnJTKm_YU3cZRU6Wefgmk8OU.roa (raw, json)
Hash identifier: qlDps7PIxfIPNkMJigD1PDbaBekaYssWBK9V2tBbOx4=
Subject key identifier: 05:ED:05:9C:94:CA:9B:F6:14:DD:C6:51:53:A5:9E:7E:09:A4:F0:E5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FFACB81AEE540CDFC191D523554723BC6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Be0FnJTKm_YU3cZRU6Wefgmk8OU.roa
Signing time: Thu 13 Aug 2026 11:04:28 +0000
ROA not before: Thu 13 Aug 2026 11:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64160
IP address blocks: 5.175.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:cb:81:ae:e5:40:cd:fc:19:1d:52:35:54:72:3b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 13 11:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05ed059c94ca9bf614ddc65153a59e7e09a4f0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:7f:48:82:ce:f6:a1:1b:63:4f:7b:24:7f:
a5:ad:5f:7f:fb:4a:dc:41:49:c6:0e:87:24:64:4f:
21:79:80:e2:65:9c:dd:99:55:fb:ef:05:95:80:22:
a1:e6:62:26:e2:23:96:94:13:1e:1a:b5:65:26:23:
74:37:ef:e3:23:7f:be:cb:95:7e:cf:ab:45:b8:fe:
73:28:c7:8f:62:35:15:e5:81:68:1a:c8:13:16:18:
37:d3:92:4e:5d:e8:90:e0:86:75:f2:f5:ab:2d:44:
6d:50:55:c5:36:92:a5:ab:ef:b2:0b:04:74:15:7e:
29:91:39:bf:c2:ee:98:a2:47:2e:64:14:a1:bf:9c:
06:77:13:19:4c:7f:b2:32:f8:e7:ec:7d:64:fd:0b:
17:f7:d5:6c:70:c0:3f:80:78:77:c7:e0:98:71:bc:
dc:60:e8:1c:d4:e3:1f:80:b7:8d:08:10:67:87:4f:
8c:8f:e0:54:0c:e4:fe:f3:b8:aa:68:7c:ac:9b:ec:
84:66:25:27:ae:68:56:05:44:59:cf:8b:da:ed:14:
d9:8c:e6:0e:1b:fe:83:08:6c:2c:b9:20:da:48:a5:
2d:a1:2a:2d:49:9a:c0:24:16:e1:95:6e:73:e2:a4:
af:04:16:d3:4e:92:0c:69:89:bc:9d:9d:7f:31:a0:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:05:9C:94:CA:9B:F6:14:DD:C6:51:53:A5:9E:7E:09:A4:F0:E5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Be0FnJTKm_YU3cZRU6Wefgmk8OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:10:91:a8:16:15:0b:ae:77:5a:db:5a:ff:a7:3c:c3:58:67:
cc:6b:2d:ea:25:67:03:3c:69:c4:66:55:df:10:04:59:62:e3:
61:d8:8b:04:d1:64:dc:3a:82:23:45:c9:8e:24:a4:6f:b6:c6:
0b:e8:a3:86:48:3f:3f:2e:f2:85:41:8d:93:34:62:7a:59:6b:
b3:ad:6f:b1:35:01:20:43:18:8d:9c:02:e0:e3:43:12:af:e2:
9e:38:8a:66:d7:0c:57:04:dc:70:e6:1c:2d:fe:e6:d6:a8:a6:
2a:6f:3c:9c:b2:63:13:cb:e6:75:f7:f1:f0:54:99:4e:34:66:
74:8e:ff:97:20:7a:10:89:a2:27:bf:32:1f:81:bd:ce:09:a9:
43:99:94:98:b1:de:89:33:54:7c:5c:33:a3:3f:2a:fa:64:77:
38:12:2c:ef:ba:8d:22:0b:a9:b0:6a:54:4e:f7:62:31:eb:fc:
29:86:e8:3a:d4:da:bc:60:b0:94:c0:f5:0e:2f:c1:ea:3f:e9:
96:de:d7:68:ed:b3:ac:54:f6:5b:57:2b:ed:e3:00:0b:20:f4:
c5:20:4a:2b:1c:c8:5f:4d:ce:d3:a7:86:83:5e:b4:29:0f:09:
39:a9:7a:e0:68:53:d5:28:00:b3:5c:15:ae:03:4e:dd:5d:58:
4a:93:56:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/6y4Gu5UDN/BkdUjVUcjvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODEzMTEwNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWVkMDU5Yzk0Y2E5YmY2MTRkZGM2NTE1M2E1OWU3ZTA5YTRmMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9V/SILO9qEbY097JH+lrV9/+0rc
QUnGDockZE8heYDiZZzdmVX77wWVgCKh5mIm4iOWlBMeGrVlJiN0N+/jI3++y5V+
z6tFuP5zKMePYjUV5YFoGsgTFhg305JOXeiQ4IZ18vWrLURtUFXFNpKlq++yCwR0
FX4pkTm/wu6YokcuZBShv5wGdxMZTH+yMvjn7H1k/QsX99VscMA/gHh3x+CYcbzc
YOgc1OMfgLeNCBBnh0+Mj+BUDOT+87iqaHysm+yEZiUnrmhWBURZz4va7RTZjOYO
G/6DCGwsuSDaSKUtoSotSZrAJBbhlW5z4qSvBBbTTpIMaYm8nZ1/MaC89QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXtBZyUypv2FN3GUVOlnn4JpPDlMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQmUwRm5KVEttX1lVM2NaUlU2V2VmZ21rOE9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/uMA0G
CSqGSIb3DQEBCwUAA4IBAQDDEJGoFhULrnda21r/pzzDWGfMay3qJWcDPGnEZlXf
EARZYuNh2IsE0WTcOoIjRcmOJKRvtsYL6KOGSD8/LvKFQY2TNGJ6WWuzrW+xNQEg
QxiNnALg40MSr+KeOIpm1wxXBNxw5hwt/ubWqKYqbzycsmMTy+Z19/HwVJlONGZ0
jv+XIHoQiaInvzIfgb3OCalDmZSYsd6JM1R8XDOjPyr6ZHc4Eizvuo0iC6mwalRO
92Ix6/wphug61Nq8YLCUwPUOL8HqP+mW3tdo7bOsVPZbVyvt4wALIPTFIEorHMhf
Tc7Tp4aDXrQpDwk5qXrgaFPVKACzXBWuA07dXVhKk1ZD
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:23 2026 by rpki-client