Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GSrQZdziIvfLUz2USp-qbFo0_yU.roa
File: GSrQZdziIvfLUz2USp-qbFo0_yU.roa (raw, json)
Hash identifier: SCvphqEHT8+vfInU6T9pTiq/xKj+B/ffxN1GXv5k6wc=
Subject key identifier: 19:2A:D0:65:DC:E2:22:F7:CB:53:3D:94:4A:9F:AA:6C:5A:34:FF:25
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DA8921D7809BFAD4B7CA59EFE01554B4A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GSrQZdziIvfLUz2USp-qbFo0_yU.roa
Signing time: Mon 20 Apr 2026 01:47:21 +0000
ROA not before: Mon 20 Apr 2026 01:47:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214915
IP address blocks: 5.175.180.0/24 maxlen: 24
5.175.225.0/24 maxlen: 24
77.90.16.0/24 maxlen: 24
77.90.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:92:1d:78:09:bf:ad:4b:7c:a5:9e:fe:01:55:4b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 20 01:47:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=192ad065dce222f7cb533d944a9faa6c5a34ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:9a:60:8c:ea:d6:3b:73:7c:46:91:09:41:
43:3b:33:76:9f:85:46:67:a2:ca:13:9b:3f:9a:d9:
66:b5:f9:3d:a2:75:63:83:4f:31:54:2c:14:da:de:
55:37:ab:b8:8c:9e:bb:68:96:49:af:f5:17:a7:41:
01:2e:af:f5:40:7b:d6:79:2e:22:d0:d9:cd:36:7f:
e0:82:39:2e:55:83:0b:9e:4d:d9:40:f1:ed:9f:1d:
a0:2c:50:09:1b:86:27:df:80:bf:8d:a9:3c:6e:e2:
bd:c8:5e:79:7d:01:5a:87:7f:eb:5c:61:ed:6a:d8:
d1:e4:4d:19:7e:62:55:dc:a4:4f:5d:98:d6:f5:67:
22:7a:75:07:7b:f9:29:67:18:c1:14:c6:1d:d8:76:
73:67:5c:4c:18:82:87:ae:f5:e1:f7:30:31:f9:dc:
4d:24:3b:a3:90:a8:47:2f:b3:ac:42:b3:0e:b8:f1:
ef:0b:29:03:25:7a:cb:fd:a7:3f:52:2e:a3:52:19:
c6:f8:8b:0d:93:93:e9:df:3e:b2:45:8c:89:ab:12:
fc:b1:a1:e8:f9:2a:e9:0a:d6:12:3a:19:cd:06:ab:
2e:53:e0:96:28:aa:45:bf:bc:47:b8:73:d6:52:9e:
4e:aa:7d:db:3f:66:07:10:18:62:35:b3:77:ad:8b:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:D0:65:DC:E2:22:F7:CB:53:3D:94:4A:9F:AA:6C:5A:34:FF:25
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GSrQZdziIvfLUz2USp-qbFo0_yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.180.0/24
5.175.225.0/24
77.90.16.0/24
77.90.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:58:be:44:13:77:e7:ec:33:b4:74:9a:3a:26:53:a9:f5:75:
3d:2d:be:3d:a9:19:47:c6:64:7f:92:39:42:24:3a:af:4a:9b:
f1:70:4c:ae:bd:77:0b:e1:f3:7f:1a:08:77:aa:dc:7c:8a:20:
26:96:d8:8d:4f:3b:dd:03:d5:17:91:e1:32:9c:f8:e4:a2:d0:
08:b8:ef:25:61:22:bc:d9:92:bd:7b:78:d0:20:57:1b:2e:41:
58:56:da:28:07:2c:fe:a1:54:a8:d8:34:d3:b1:7b:af:9a:43:
31:cd:e9:dd:a0:24:23:33:24:e4:c6:2f:a4:05:dc:9a:42:0b:
9c:b9:6b:d7:83:a8:07:20:4b:bb:36:f0:84:da:1d:ab:da:71:
31:78:ba:d5:9d:a9:8c:38:72:cd:aa:0c:6f:5c:46:f9:0b:1d:
5f:9a:5e:81:65:30:86:3a:20:8a:47:b0:65:cf:99:5b:d0:89:
cc:59:8b:c8:19:d2:c0:e8:c1:f1:5f:9e:c5:3c:72:8a:f2:0d:
cf:0f:6e:8d:27:95:85:03:c0:bb:f0:35:f4:07:de:bd:e9:fa:
1c:26:83:4f:d8:76:8d:d0:c4:41:80:9d:40:c3:fc:6b:95:15:
37:04:db:1d:79:4c:11:b3:27:d4:b8:85:da:35:d9:b1:f2:eb:
07:2e:8b:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ2okh14Cb+tS3ylnv4BVUtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDIwMDE0NzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTJhZDA2NWRjZTIyMmY3Y2I1MzNkOTQ0YTlmYWE2YzVhMzRmZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qWaYIzq1jtzfEaRCUFDOzN2n4VG
Z6LKE5s/mtlmtfk9onVjg08xVCwU2t5VN6u4jJ67aJZJr/UXp0EBLq/1QHvWeS4i
0NnNNn/ggjkuVYMLnk3ZQPHtnx2gLFAJG4Yn34C/jak8buK9yF55fQFah3/rXGHt
atjR5E0ZfmJV3KRPXZjW9WcienUHe/kpZxjBFMYd2HZzZ1xMGIKHrvXh9zAx+dxN
JDujkKhHL7OsQrMOuPHvCykDJXrL/ac/Ui6jUhnG+IsNk5Pp3z6yRYyJqxL8saHo
+SrpCtYSOhnNBqsuU+CWKKpFv7xHuHPWUp5Oqn3bP2YHEBhiNbN3rYshMwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBkq0GXc4iL3y1M9lEqfqmxaNP8lMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvR1NyUVpkemlJdmZMVXoyVVNwLXFiRm8wX3lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABa+0AwQA
Ba/hAwQATVoQAwQATVobMA0GCSqGSIb3DQEBCwUAA4IBAQCxWL5EE3fn7DO0dJo6
JlOp9XU9Lb49qRlHxmR/kjlCJDqvSpvxcEyuvXcL4fN/Ggh3qtx8iiAmltiNTzvd
A9UXkeEynPjkotAIuO8lYSK82ZK9e3jQIFcbLkFYVtooByz+oVSo2DTTsXuvmkMx
zendoCQjMyTkxi+kBdyaQgucuWvXg6gHIEu7NvCE2h2r2nExeLrVnamMOHLNqgxv
XEb5Cx1fml6BZTCGOiCKR7Blz5lb0InMWYvIGdLA6MHxX57FPHKK8g3PD26NJ5WF
A8C78DX0B9696focJoNP2HaN0MRBgJ1Aw/xrlRU3BNsdeUwRsyfUuIXaNdmx8usH
Losf
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:34 2026 by rpki-client