Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tMnZhdpaDUQMeIDksXgAca-bWIY.roa
File: tMnZhdpaDUQMeIDksXgAca-bWIY.roa (raw, json)
Hash identifier: crKiNLIW98Wmgn1bAmoQBIClWakGj9MQBbZYryPnbHI=
Subject key identifier: B4:C9:D9:85:DA:5A:0D:44:0C:78:80:E4:B1:78:00:71:AF:9B:58:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FF99927CCDE76BE96A865BB266FB8C7F7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tMnZhdpaDUQMeIDksXgAca-bWIY.roa
Signing time: Thu 13 Aug 2026 05:29:51 +0000
ROA not before: Thu 13 Aug 2026 05:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.175.161.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
2a02:2fc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:99:27:cc:de:76:be:96:a8:65:bb:26:6f:b8:c7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 13 05:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4c9d985da5a0d440c7880e4b1780071af9b5886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:21:65:e5:fc:9c:7f:1c:ba:84:48:cc:1f:
f4:46:e3:07:31:e4:97:c9:6a:1a:33:1f:48:4c:71:
6e:07:7a:fb:d4:47:7e:28:14:23:3d:83:93:c4:a9:
57:53:bb:dd:34:ef:f5:4e:06:94:28:92:c0:84:cb:
22:d1:9f:fe:ce:29:94:d7:93:64:ff:9f:73:c2:ba:
94:fe:06:f9:73:aa:9a:4d:0d:eb:1e:47:0f:b6:09:
03:40:82:2e:3d:ac:3a:46:2c:ea:68:0e:2f:e2:48:
6b:c1:3f:57:d9:64:95:0a:46:40:3f:e3:63:d8:41:
80:c9:cc:32:5e:9c:f4:ab:f4:36:e3:f9:34:21:1b:
7e:36:83:82:1a:a9:69:f0:95:a5:a7:58:84:5f:b3:
88:c0:c2:95:a3:0b:a9:52:86:41:e4:33:be:7e:1c:
a0:fc:cd:52:23:94:bc:cb:ee:44:d8:4f:7d:b8:9b:
f5:e0:1a:06:30:4d:87:20:16:8d:1c:c0:f1:fc:2e:
26:93:f5:e5:78:36:23:5c:1c:18:2e:84:fc:23:a2:
0a:26:eb:b8:56:fb:99:51:bf:18:93:d7:f1:ee:40:
ad:72:b2:87:57:2b:9f:15:9f:ec:fd:4e:82:3a:99:
b6:a6:39:64:79:02:08:39:84:bf:99:11:21:de:5d:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:D9:85:DA:5A:0D:44:0C:78:80:E4:B1:78:00:71:AF:9B:58:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tMnZhdpaDUQMeIDksXgAca-bWIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.161.0/24
5.231.70.0/24
77.90.22.0/24
IPv6:
2a02:2fc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
3e:cd:a1:70:c0:8b:9a:5f:71:81:95:a5:1e:67:2f:7e:f7:aa:
ed:63:8c:a6:f7:5f:d6:dc:c4:6d:aa:7d:cb:ad:0d:fc:c2:a1:
cc:f6:72:79:1f:48:4c:79:62:0d:41:bd:a3:bd:cb:14:be:54:
50:30:a9:95:f6:71:48:79:d4:39:24:22:4f:2f:4d:98:e4:d4:
ba:8e:7b:48:0d:77:d9:72:12:6a:9a:fd:5d:29:50:aa:f0:9b:
8d:92:12:9d:29:33:d7:31:56:db:8e:f8:41:b4:bd:6e:75:d7:
93:40:28:e8:3c:fe:f3:2f:a7:40:c7:a5:ad:cf:e5:05:d6:ab:
a0:03:86:cf:4a:11:0f:4e:d6:7e:36:de:9a:18:e0:1e:01:b5:
44:de:7e:b9:ef:79:d3:f7:b7:04:3f:7a:c2:d6:1f:82:46:a7:
29:46:77:57:79:ab:3b:1b:3e:37:6e:0a:5e:ac:79:bf:27:5b:
04:22:7b:41:f0:4f:0a:46:28:41:85:5f:fa:28:20:56:05:47:
81:a6:4d:9f:cf:2c:c2:a0:34:4d:a3:fe:7b:f4:8f:5f:81:f4:
fe:b5:3d:e4:49:b5:f9:9e:0e:10:b0:3a:a7:77:20:5f:73:9a:
58:2b:c1:08:1b:b8:8a:df:b0:4b:18:8e:cb:a7:08:b8:93:33:
98:66:2f:5a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ/5mSfM3na+lqhluyZvuMf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODEzMDUyOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGM5ZDk4NWRhNWEwZDQ0MGM3ODgwZTRiMTc4MDA3MWFmOWI1ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg4hZeX8nH8cuoRIzB/0RuMHMeSX
yWoaMx9ITHFuB3r71Ed+KBQjPYOTxKlXU7vdNO/1TgaUKJLAhMsi0Z/+zimU15Nk
/59zwrqU/gb5c6qaTQ3rHkcPtgkDQIIuPaw6RizqaA4v4khrwT9X2WSVCkZAP+Nj
2EGAycwyXpz0q/Q24/k0IRt+NoOCGqlp8JWlp1iEX7OIwMKVowupUoZB5DO+fhyg
/M1SI5S8y+5E2E99uJv14BoGME2HIBaNHMDx/C4mk/XleDYjXBwYLoT8I6IKJuu4
VvuZUb8Yk9fx7kCtcrKHVyufFZ/s/U6COpm2pjlkeQIIOYS/mREh3l20oQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFLTJ2YXaWg1EDHiA5LF4AHGvm1iGMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdE1uWmhkcGFEVVFNZUlEa3NYZ0FjYS1iV0lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQABa+hAwQA
BedGAwQATVoWMA8EAgACMAkDBwAqAi/AABkwDQYJKoZIhvcNAQELBQADggEBAD7N
oXDAi5pfcYGVpR5nL373qu1jjKb3X9bcxG2qfcutDfzCocz2cnkfSEx5Yg1BvaO9
yxS+VFAwqZX2cUh51DkkIk8vTZjk1LqOe0gNd9lyEmqa/V0pUKrwm42SEp0pM9cx
VtuO+EG0vW5115NAKOg8/vMvp0DHpa3P5QXWq6ADhs9KEQ9O1n423poY4B4BtUTe
frnvedP3twQ/esLWH4JGpylGd1d5qzsbPjduCl6seb8nWwQie0HwTwpGKEGFX/oo
IFYFR4GmTZ/PLMKgNE2j/nv0j1+B9P61PeRJtfmeDhCwOqd3IF9zmlgrwQgbuIrf
sEsYjsunCLiTM5hmL1o=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:39 2026 by rpki-client