Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R0ELiO-DWCF4bhuuiS79So3Ub28.roa
File: R0ELiO-DWCF4bhuuiS79So3Ub28.roa (raw, json)
Hash identifier: dQlaNIU7jp9KNTBtie1KAqB4ZBEffdr8Kcwv6/OxtNE=
Subject key identifier: 47:41:0B:88:EF:83:58:21:78:6E:1B:AE:89:2E:FD:4A:8D:D4:6F:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F76FF5E4E43F58B40B03B7035A142D75D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R0ELiO-DWCF4bhuuiS79So3Ub28.roa
Signing time: Sat 18 Jul 2026 20:51:15 +0000
ROA not before: Sat 18 Jul 2026 20:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198596
IP address blocks: 5.231.23.0/24 maxlen: 24
77.90.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:ff:5e:4e:43:f5:8b:40:b0:3b:70:35:a1:42:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 18 20:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47410b88ef835821786e1bae892efd4a8dd46f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:0a:94:19:dd:c1:bd:a9:ab:9b:23:ff:36:
c2:b5:e5:58:cf:98:97:84:63:d0:e7:32:d2:58:45:
71:3b:63:4c:ed:14:a6:ce:be:e9:36:4f:96:e9:8c:
67:7d:72:45:c6:4f:be:c8:a4:6b:4d:85:2b:2e:bc:
46:28:72:30:62:65:0f:5c:b1:58:d6:26:e9:15:a2:
ee:8e:df:6b:3e:18:b8:e4:94:d8:5f:96:06:61:82:
17:6e:35:a0:68:8b:9f:3b:49:ac:6d:67:3c:41:f6:
e8:b6:a4:f2:fd:a0:94:19:eb:bf:f5:55:c5:d3:00:
ca:ac:83:06:c9:20:e9:c7:a5:c5:39:13:f1:8d:e4:
b3:17:91:1c:55:4d:77:1f:f0:4e:e5:c9:1b:51:af:
e4:2c:7a:e0:16:25:a2:2d:6b:2f:d3:12:a7:b9:7c:
2f:ce:24:6b:1b:14:3a:b5:6d:c6:eb:15:e8:7d:7b:
75:a7:14:00:fd:5a:4a:93:60:e7:e1:35:05:69:8f:
6f:eb:64:16:35:0f:a4:c3:7b:68:2b:34:9e:2b:48:
a5:30:c8:07:e7:f6:de:dd:f0:44:a8:a1:19:ea:dc:
db:c3:18:2f:fc:a3:82:6a:f1:fe:e9:15:af:0e:7b:
23:98:d4:fc:10:dd:7c:31:49:ab:20:9c:b7:6c:f1:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:0B:88:EF:83:58:21:78:6E:1B:AE:89:2E:FD:4A:8D:D4:6F:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R0ELiO-DWCF4bhuuiS79So3Ub28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.23.0/24
77.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ea:98:99:1a:59:2e:38:a1:84:c3:ef:1d:a7:10:d5:5e:96:
04:a6:06:27:2e:32:8a:5c:0e:6b:6c:4d:3f:91:4c:59:0f:b5:
65:76:38:8e:c2:62:e1:ba:70:ea:28:97:1e:e7:50:01:b4:e6:
33:b0:4c:da:62:7e:24:df:f1:03:83:f9:46:e0:f3:a9:22:98:
46:03:6d:0d:ee:c2:a6:04:32:77:56:0d:14:48:3e:63:11:92:
56:43:b7:05:bb:02:f5:1f:0c:30:79:39:1d:3f:98:6d:90:e4:
a5:35:e6:4c:c6:b5:d2:be:38:6a:da:d0:d5:ee:14:83:4f:01:
f3:8e:97:ce:15:1a:58:61:11:53:60:9e:51:b0:e8:18:fa:0d:
0c:f7:db:ba:28:32:0e:14:6c:6a:ae:aa:67:aa:e4:c9:dc:35:
66:15:6e:1a:94:e9:04:a8:12:f4:9b:2a:e4:64:be:d8:6d:d5:
39:8d:ea:47:94:43:8b:75:18:5b:86:98:bc:14:ec:d1:56:d1:
00:ce:ec:1c:47:74:64:11:70:6b:d1:3f:e1:5f:03:4a:8f:2e:
01:a0:32:a5:4e:5e:5d:c0:28:c3:82:8b:fc:bf:09:5c:c8:7c:
c2:a4:37:9a:f8:ff:38:79:aa:5d:10:ed:1d:9e:33:27:ab:86:
64:0f:ac:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ92/15OQ/WLQLA7cDWhQtddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzE4MjA1MTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzQxMGI4OGVmODM1ODIxNzg2ZTFiYWU4OTJlZmQ0YThkZDQ2ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7oKlBndwb2pq5sj/zbCteVYz5iX
hGPQ5zLSWEVxO2NM7RSmzr7pNk+W6YxnfXJFxk++yKRrTYUrLrxGKHIwYmUPXLFY
1ibpFaLujt9rPhi45JTYX5YGYYIXbjWgaIufO0msbWc8QfbotqTy/aCUGeu/9VXF
0wDKrIMGySDpx6XFORPxjeSzF5EcVU13H/BO5ckbUa/kLHrgFiWiLWsv0xKnuXwv
ziRrGxQ6tW3G6xXofXt1pxQA/VpKk2Dn4TUFaY9v62QWNQ+kw3toKzSeK0ilMMgH
5/be3fBEqKEZ6tzbwxgv/KOCavH+6RWvDnsjmNT8EN18MUmrIJy3bPGdqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEdBC4jvg1gheG4broku/UqN1G9vMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUjBFTGlPLURXQ0Y0Ymh1dWlTNzlTbzNVYjI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecXAwQA
TVo7MA0GCSqGSIb3DQEBCwUAA4IBAQC46piZGlkuOKGEw+8dpxDVXpYEpgYnLjKK
XA5rbE0/kUxZD7VldjiOwmLhunDqKJce51ABtOYzsEzaYn4k3/EDg/lG4POpIphG
A20N7sKmBDJ3Vg0USD5jEZJWQ7cFuwL1HwwweTkdP5htkOSlNeZMxrXSvjhq2tDV
7hSDTwHzjpfOFRpYYRFTYJ5RsOgY+g0M99u6KDIOFGxqrqpnquTJ3DVmFW4alOkE
qBL0myrkZL7YbdU5jepHlEOLdRhbhpi8FOzRVtEAzuwcR3RkEXBr0T/hXwNKjy4B
oDKlTl5dwCjDgov8vwlcyHzCpDea+P84eapdEO0dnjMnq4ZkD6zi
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client