Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p_t4kM8Yj3uz7A3PfgFOWMQiUj4.roa
File: p_t4kM8Yj3uz7A3PfgFOWMQiUj4.roa (raw, json)
Hash identifier: 2I52PkNsyHNmkQGghLPShdSkuFwWb7Uw7YWKR7hXx1o=
Subject key identifier: A7:FB:78:90:CF:18:8F:7B:B3:EC:0D:CF:7E:01:4E:58:C4:22:52:3E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0517627DCD00968720EFEB8B9FA241E87
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p_t4kM8Yj3uz7A3PfgFOWMQiUj4.roa
Signing time: Sun 30 Aug 2026 06:58:12 +0000
ROA not before: Sun 30 Aug 2026 06:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53850
IP address blocks: 5.83.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:76:27:dc:d0:09:68:72:0e:fe:b8:b9:fa:24:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 30 06:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7fb7890cf188f7bb3ec0dcf7e014e58c422523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:c8:3e:18:5e:32:4f:4b:e9:89:88:2e:d0:
39:5d:50:30:68:a9:ce:da:f9:56:7c:aa:bb:bb:e4:
c5:36:75:a6:49:a3:61:89:77:25:d3:6e:07:91:1d:
be:7e:d2:f3:d0:c7:5e:94:87:08:14:40:e5:62:ac:
dc:a7:7b:4c:7b:c8:5e:81:55:74:e2:e8:75:62:a9:
e0:7e:ca:ac:26:1c:86:9d:81:41:e6:f0:49:39:ba:
ac:40:58:0a:de:e8:49:bd:06:ee:8b:60:0a:c0:0f:
c2:02:77:92:cb:89:30:4a:b1:f0:14:54:61:a0:e4:
a0:bd:22:b4:7b:c1:3b:68:1a:0f:46:fd:4e:fb:39:
0e:c3:90:61:10:d4:4f:cd:0e:19:b7:26:01:16:dc:
17:6e:04:5d:83:47:e5:38:45:36:dd:0b:62:05:98:
1d:35:fa:21:bc:c3:c6:ad:c3:8e:58:c3:29:f8:2b:
43:4b:37:f8:fa:a9:af:c3:75:e9:ea:89:5a:b0:2c:
7b:64:df:c2:1e:71:c7:89:91:5f:49:b9:7b:27:d8:
cc:b8:b4:cf:78:ba:c3:bd:7c:4e:20:e6:73:e4:4e:
6d:39:4f:7c:2e:44:01:8f:57:fa:9c:ff:71:9f:c8:
85:62:b9:bc:a1:17:f5:fa:a6:71:28:82:28:74:c0:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:78:90:CF:18:8F:7B:B3:EC:0D:CF:7E:01:4E:58:C4:22:52:3E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p_t4kM8Yj3uz7A3PfgFOWMQiUj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:13:ac:34:fc:0b:c9:52:3f:20:c4:ac:83:0e:42:14:27:97:
3f:43:21:62:14:10:33:76:53:e8:42:93:1e:02:4c:b0:f3:b4:
3a:a5:41:06:84:45:e0:19:7b:d4:92:e1:9b:e1:f4:a5:6b:87:
84:82:b2:9c:cd:03:f5:81:28:dd:21:d9:4d:1d:34:34:34:ea:
ca:92:78:91:0f:a7:ae:35:9f:fa:72:e0:c8:f0:45:5f:98:12:
63:4f:70:c8:91:40:a5:b8:fe:de:0a:54:a4:9e:46:a1:7b:42:
ef:1f:f0:a9:a8:9a:f0:ea:0e:58:78:fa:31:26:26:a4:97:b8:
5f:58:18:e6:9f:c9:a5:2b:a9:f8:7b:ff:46:15:f6:c6:cb:9d:
cf:45:a3:e0:43:b4:43:6b:dc:3f:3d:05:e4:49:27:7e:ab:5a:
28:51:25:92:6e:25:18:9c:79:60:33:10:d5:2d:88:1a:45:19:
93:62:e7:2f:1d:d2:d4:51:41:e4:f5:d8:f1:7d:95:aa:c8:68:
15:48:87:7b:ce:91:14:1a:96:44:69:2c:93:23:cb:ee:4a:44:
4c:64:97:9e:8f:0f:53:6e:ff:c9:68:2a:f3:48:aa:97:38:53:
2b:c0:9b:0c:1d:17:e7:10:64:22:f0:da:0e:a6:f2:61:98:3a:
13:a6:bc:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBRdifc0Alocg7+uLn6JB6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODMwMDY1ODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2ZiNzg5MGNmMTg4ZjdiYjNlYzBkY2Y3ZTAxNGU1OGM0MjI1MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKHIPhheMk9L6YmILtA5XVAwaKnO
2vlWfKq7u+TFNnWmSaNhiXcl024HkR2+ftLz0MdelIcIFEDlYqzcp3tMe8hegVV0
4uh1YqngfsqsJhyGnYFB5vBJObqsQFgK3uhJvQbui2AKwA/CAneSy4kwSrHwFFRh
oOSgvSK0e8E7aBoPRv1O+zkOw5BhENRPzQ4ZtyYBFtwXbgRdg0flOEU23QtiBZgd
NfohvMPGrcOOWMMp+CtDSzf4+qmvw3Xp6olasCx7ZN/CHnHHiZFfSbl7J9jMuLTP
eLrDvXxOIOZz5E5tOU98LkQBj1f6nP9xn8iFYrm8oRf1+qZxKIIodMCGDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKf7eJDPGI97s+wNz34BTljEIlI+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcF90NGtNOFlqM3V6N0EzUGZnRk9XTVFpVWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOQMA0G
CSqGSIb3DQEBCwUAA4IBAQChE6w0/AvJUj8gxKyDDkIUJ5c/QyFiFBAzdlPoQpMe
Akyw87Q6pUEGhEXgGXvUkuGb4fSla4eEgrKczQP1gSjdIdlNHTQ0NOrKkniRD6eu
NZ/6cuDI8EVfmBJjT3DIkUCluP7eClSknkahe0LvH/CpqJrw6g5YePoxJiakl7hf
WBjmn8mlK6n4e/9GFfbGy53PRaPgQ7RDa9w/PQXkSSd+q1ooUSWSbiUYnHlgMxDV
LYgaRRmTYucvHdLUUUHk9djxfZWqyGgVSId7zpEUGpZEaSyTI8vuSkRMZJeejw9T
bv/JaCrzSKqXOFMrwJsMHRfnEGQi8NoOpvJhmDoTpryT
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:47 2026 by rpki-client