Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UxtvhZPQRkGwLe1Mozu3lKunF-0.roa
File: UxtvhZPQRkGwLe1Mozu3lKunF-0.roa (raw, json)
Hash identifier: 1utUx5WU0RV5uCNV6HxcjgbdmxQ890pbNXXz/m+s/Cw=
Subject key identifier: 53:1B:6F:85:93:D0:46:41:B0:2D:ED:4C:A3:3B:B7:94:AB:A7:17:ED
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FB2F9635B4C40ADB893D387F4EF2C5A05
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UxtvhZPQRkGwLe1Mozu3lKunF-0.roa
Signing time: Thu 30 Jul 2026 12:21:56 +0000
ROA not before: Thu 30 Jul 2026 12:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62553
IP address blocks: 5.230.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:f9:63:5b:4c:40:ad:b8:93:d3:87:f4:ef:2c:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 30 12:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=531b6f8593d04641b02ded4ca33bb794aba717ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:cd:8c:01:7d:b3:27:f2:96:9a:a2:cc:63:
8f:20:90:32:a5:a8:37:3b:ac:f2:d2:97:82:21:8f:
a2:19:68:d0:47:b9:c7:70:1a:45:99:65:5e:95:5d:
4f:24:51:23:70:fd:6c:39:cd:eb:9e:bc:02:51:48:
8f:49:bc:17:8b:52:71:f8:34:c3:b3:9a:11:30:71:
ed:43:bf:cd:ec:2e:8d:e0:cb:e2:eb:1e:39:fc:56:
68:99:26:38:0c:46:24:8e:ce:93:50:12:ed:67:ef:
ef:c4:5f:ff:09:59:62:39:1c:2b:8b:61:1b:41:0c:
03:61:88:ed:16:44:df:01:28:f5:30:f2:21:a6:52:
ad:81:0f:dc:24:32:a7:a9:d4:d4:b8:c4:ad:0a:a6:
01:48:33:e9:f5:33:6f:21:4e:2f:fe:ad:dc:dc:82:
52:36:f7:a5:6b:56:33:bf:97:d6:33:54:9e:1f:cc:
4c:0b:91:a1:6f:eb:a2:75:9f:a2:ca:b9:5a:02:2b:
26:e8:d4:b2:72:c1:d2:4a:ea:7a:51:6e:22:a4:99:
5b:d9:c2:54:cc:00:9e:8b:fc:63:79:5c:0c:81:94:
2c:0f:af:6e:29:d7:bf:c4:4e:f9:dd:a3:d3:7e:97:
25:18:38:d7:44:ac:d4:08:00:76:75:ba:a5:d8:13:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:6F:85:93:D0:46:41:B0:2D:ED:4C:A3:3B:B7:94:AB:A7:17:ED
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UxtvhZPQRkGwLe1Mozu3lKunF-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.195.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:80:15:8e:38:e1:ce:31:56:88:6a:a4:4d:e0:a4:97:99:2f:
2a:8e:80:d8:e8:88:31:2b:c2:e2:72:bf:c7:e8:51:aa:cd:33:
87:64:aa:47:ad:c2:df:8a:f0:d8:e3:65:51:8a:ee:1f:ba:a9:
dc:e6:45:86:7b:70:7e:b5:b9:3e:2d:00:08:a3:07:e1:37:97:
70:93:77:7e:0f:19:f0:13:69:ea:13:69:82:b6:48:a3:bf:fb:
9a:8a:d1:36:a8:55:59:d4:01:d0:b1:93:44:4a:ac:a7:ee:3b:
49:78:33:b7:46:31:52:4f:b0:e4:ce:2f:da:19:53:82:2c:39:
b1:27:cd:43:b2:10:7b:57:91:60:f6:b6:74:b8:5c:e2:df:82:
af:d9:51:07:d2:25:e7:07:b3:36:38:aa:88:e1:7f:8a:68:26:
5e:40:ae:0f:92:38:a7:85:92:f4:12:3c:7b:0a:33:d6:dd:2c:
42:58:7b:cd:81:3a:cd:3b:ca:c4:e1:2e:68:9e:33:cd:4f:cb:
03:45:7b:ce:37:d3:12:74:48:e3:d2:99:5d:69:75:5c:93:c0:
50:c1:f1:e7:fb:bc:53:2e:b0:53:9b:e2:f5:68:1a:ea:9e:d1:
52:fb:c0:99:6c:96:46:7e:87:fb:ec:94:33:e6:ee:4c:8e:27:
77:10:83:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+y+WNbTECtuJPTh/TvLFoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzMwMTIyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzFiNmY4NTkzZDA0NjQxYjAyZGVkNGNhMzNiYjc5NGFiYTcxN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KPNjAF9syfylpqizGOPIJAypag3
O6zy0peCIY+iGWjQR7nHcBpFmWVelV1PJFEjcP1sOc3rnrwCUUiPSbwXi1Jx+DTD
s5oRMHHtQ7/N7C6N4Mvi6x45/FZomSY4DEYkjs6TUBLtZ+/vxF//CVliORwri2Eb
QQwDYYjtFkTfASj1MPIhplKtgQ/cJDKnqdTUuMStCqYBSDPp9TNvIU4v/q3c3IJS
Nvela1Yzv5fWM1SeH8xMC5Ghb+uidZ+iyrlaAism6NSycsHSSup6UW4ipJlb2cJU
zACei/xjeVwMgZQsD69uKde/xE753aPTfpclGDjXRKzUCAB2dbql2BOyVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMbb4WT0EZBsC3tTKM7t5SrpxftMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVXh0dmhaUFFSa0d3TGUxTW96dTNsS3VuRi0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABebDMA0G
CSqGSIb3DQEBCwUAA4IBAQDhgBWOOOHOMVaIaqRN4KSXmS8qjoDY6IgxK8Licr/H
6FGqzTOHZKpHrcLfivDY42VRiu4fuqnc5kWGe3B+tbk+LQAIowfhN5dwk3d+Dxnw
E2nqE2mCtkijv/uaitE2qFVZ1AHQsZNESqyn7jtJeDO3RjFST7Dkzi/aGVOCLDmx
J81DshB7V5Fg9rZ0uFzi34Kv2VEH0iXnB7M2OKqI4X+KaCZeQK4PkjinhZL0Ejx7
CjPW3SxCWHvNgTrNO8rE4S5onjPNT8sDRXvON9MSdEjj0pldaXVck8BQwfHn+7xT
LrBTm+L1aBrqntFS+8CZbJZGfof77JQz5u5Mjid3EIPy
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:26 2026 by rpki-client