Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eA2_tZyJStCTWyqYlpML7n68USQ.roa
File: eA2_tZyJStCTWyqYlpML7n68USQ.roa (raw, json)
Hash identifier: W+jhrH+3gIwVD0lbyFAGJn0jNE/9Zf09pmdUtEUs/G0=
Subject key identifier: 78:0D:BF:B5:9C:89:4A:D0:93:5B:2A:98:96:93:0B:EE:7E:BC:51:24
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F59FD12DBE51A532ECCD3D027D3D2127D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eA2_tZyJStCTWyqYlpML7n68USQ.roa
Signing time: Mon 13 Jul 2026 05:39:45 +0000
ROA not before: Mon 13 Jul 2026 05:39:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.175.161.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
2a02:2fc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:fd:12:db:e5:1a:53:2e:cc:d3:d0:27:d3:d2:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 13 05:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=780dbfb59c894ad0935b2a9896930bee7ebc5124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:fd:9e:6d:a9:14:ed:63:de:11:03:1a:59:
e7:c5:5c:22:9b:aa:15:f7:dd:a1:ec:13:eb:d1:eb:
fe:d3:e6:d7:b7:9e:22:02:fc:ec:bd:d5:1e:2d:49:
1e:7d:3f:d3:ad:55:11:9b:af:be:00:04:04:40:ae:
12:53:37:b5:3a:9e:15:cc:0f:4b:ef:a8:a3:e7:33:
e3:32:53:9e:44:f3:d9:3b:89:f4:de:c2:10:e8:78:
f8:7b:4f:3a:5f:0e:57:48:89:e3:66:6c:ae:24:7f:
bf:aa:7b:de:a7:3f:0b:b5:ba:9e:c8:30:cb:3d:68:
a4:09:b9:58:71:34:79:5f:25:76:15:e7:0f:b3:79:
cb:75:64:d3:a9:8a:66:1e:b2:1f:56:33:dc:a0:f6:
99:66:31:76:1a:34:c5:c0:44:bb:66:12:3e:73:10:
7a:a0:db:d7:c7:6a:5a:43:e0:18:bd:23:c9:98:d6:
aa:2e:25:00:9b:62:15:27:2c:d7:21:52:8e:6d:2c:
fa:62:a7:39:e9:37:7b:99:8a:5d:06:8d:64:99:6c:
c0:e0:38:77:a7:fe:72:67:bc:ee:ee:b7:52:5f:38:
75:f7:18:4f:44:9a:1d:5a:3b:f5:e7:a9:91:d1:23:
61:d3:ed:89:68:77:af:52:c7:7e:9b:a9:7a:b1:1f:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:BF:B5:9C:89:4A:D0:93:5B:2A:98:96:93:0B:EE:7E:BC:51:24
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eA2_tZyJStCTWyqYlpML7n68USQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.161.0/24
5.231.70.0/24
77.90.22.0/24
IPv6:
2a02:2fc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
90:45:2b:84:76:7e:2e:b5:27:12:47:2e:7c:4b:71:02:94:2a:
3a:51:a2:e0:44:52:4a:d8:51:d4:5d:26:4f:fb:cb:22:a5:c5:
10:db:c3:80:5a:c8:ae:73:c5:f7:00:c0:aa:6a:04:89:fe:33:
2c:fb:df:c7:96:44:95:a9:83:6c:97:07:08:9a:91:77:8c:e8:
a2:98:75:ea:18:28:6c:4b:5d:31:ac:a8:33:9f:2c:0f:80:48:
11:1d:db:33:15:66:43:aa:c8:6f:a6:65:6d:ca:2d:62:6f:f6:
cd:09:af:57:ef:7f:aa:27:7f:20:02:35:c9:e3:e4:12:ce:5a:
58:bf:ef:8b:5a:1e:39:ec:62:8f:7e:6b:9b:aa:f8:f0:cb:fe:
f0:ae:6c:42:ec:a5:96:4a:67:94:08:25:8b:10:52:0b:f2:25:
3c:af:c9:af:a0:e6:17:56:6b:e3:b9:dc:0e:f3:8f:9a:a8:0c:
12:37:1d:30:16:d0:6b:d8:a9:b5:fd:1f:c9:44:12:a1:1e:0e:
22:57:55:65:15:18:75:cb:a1:bf:b2:14:08:08:ef:ec:d8:0b:
5e:2e:07:5c:0b:83:18:24:dd:1c:9e:8e:e2:9a:c9:26:0a:c0:
f8:da:f7:04:05:9e:ad:9c:0b:49:92:a6:c7:8a:43:b1:2c:38:
fb:76:68:62
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ9Z/RLb5RpTLszT0CfT0hJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzEzMDUzOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODBkYmZiNTljODk0YWQwOTM1YjJhOTg5NjkzMGJlZTdlYmM1MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4f9nm2pFO1j3hEDGlnnxVwim6oV
992h7BPr0ev+0+bXt54iAvzsvdUeLUkefT/TrVURm6++AAQEQK4SUze1Op4VzA9L
76ij5zPjMlOeRPPZO4n03sIQ6Hj4e086Xw5XSInjZmyuJH+/qnvepz8LtbqeyDDL
PWikCblYcTR5XyV2FecPs3nLdWTTqYpmHrIfVjPcoPaZZjF2GjTFwES7ZhI+cxB6
oNvXx2paQ+AYvSPJmNaqLiUAm2IVJyzXIVKObSz6Yqc56Td7mYpdBo1kmWzA4Dh3
p/5yZ7zu7rdSXzh19xhPRJodWjv156mR0SNh0+2JaHevUsd+m6l6sR91NwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFHgNv7WciUrQk1sqmJaTC+5+vFEkMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZUEyX3RaeUpTdENUV3lxWWxwTUw3bjY4VVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQABa+hAwQA
BedGAwQATVoWMA8EAgACMAkDBwAqAi/AABkwDQYJKoZIhvcNAQELBQADggEBAJBF
K4R2fi61JxJHLnxLcQKUKjpRouBEUkrYUdRdJk/7yyKlxRDbw4BayK5zxfcAwKpq
BIn+Myz738eWRJWpg2yXBwiakXeM6KKYdeoYKGxLXTGsqDOfLA+ASBEd2zMVZkOq
yG+mZW3KLWJv9s0Jr1fvf6onfyACNcnj5BLOWli/74taHjnsYo9+a5uq+PDL/vCu
bELspZZKZ5QIJYsQUgvyJTyvya+g5hdWa+O53A7zj5qoDBI3HTAW0GvYqbX9H8lE
EqEeDiJXVWUVGHXLob+yFAgI7+zYC14uB1wLgxgk3RyejuKaySYKwPja9wQFnq2c
C0mSpseKQ7EsOPt2aGI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client