Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vuPcTO_vyEkeEXtGuFBjyehl-rQ.roa
File: vuPcTO_vyEkeEXtGuFBjyehl-rQ.roa (raw, json)
Hash identifier: gXPHPfnzWm/j5hnzXuV+tpej25NdKPM+D0ZAdMYtFhQ=
Subject key identifier: BE:E3:DC:4C:EF:EF:C8:49:1E:11:7B:46:B8:50:63:C9:E8:65:FA:B4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E7122D0778A35079B96729C1BE367EE79
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vuPcTO_vyEkeEXtGuFBjyehl-rQ.roa
Signing time: Fri 29 May 2026 00:29:27 +0000
ROA not before: Fri 29 May 2026 00:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198364
IP address blocks: 5.175.137.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:71:22:d0:77:8a:35:07:9b:96:72:9c:1b:e3:67:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 29 00:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bee3dc4cefefc8491e117b46b85063c9e865fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:8b:88:49:b6:c8:97:23:07:e9:1b:55:af:
e8:1a:52:54:67:c9:8b:d9:46:16:d7:aa:25:ae:c1:
ad:b3:15:84:78:12:77:22:30:9d:ec:2b:b6:7a:8f:
2e:f3:2e:a0:1c:fc:24:89:79:91:cd:35:9e:6a:84:
c8:ca:22:aa:09:65:00:ac:6e:13:ed:57:54:8a:d6:
bd:83:49:39:e0:33:83:01:f8:51:2e:1f:d2:02:a2:
4d:a3:35:43:05:30:8e:36:34:40:69:c3:12:d0:5b:
77:df:a4:33:64:35:21:12:d6:01:61:70:ef:76:99:
ac:a1:23:90:47:4b:fa:48:d3:5b:74:c1:57:48:e8:
d6:12:29:70:f0:83:45:86:8c:0c:48:0b:46:2c:d5:
14:a0:88:e1:92:e3:dc:a3:2e:9b:04:09:f2:10:aa:
d0:81:5a:fc:22:36:57:e1:08:61:2f:7f:9d:c9:eb:
b9:42:da:55:a6:79:7e:bd:82:6b:a2:f1:50:2c:d6:
b6:6c:b2:31:2d:37:6d:9f:d0:fb:57:4b:fd:a0:46:
03:20:7a:c9:69:76:e1:47:8c:a5:a7:55:4e:f9:ba:
4d:fd:06:23:95:a5:e0:4e:90:ed:70:22:e3:8e:1a:
6b:bc:0e:ac:8d:7a:b2:9c:1b:71:e2:36:4b:73:92:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:DC:4C:EF:EF:C8:49:1E:11:7B:46:B8:50:63:C9:E8:65:FA:B4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vuPcTO_vyEkeEXtGuFBjyehl-rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.137.0/24
5.175.224.0/24
89.106.72.0/24
Signature Algorithm: sha256WithRSAEncryption
82:97:9c:9d:f4:56:99:79:48:3f:42:cd:69:3a:bd:27:6b:83:
09:05:08:40:6a:59:51:f4:65:0d:69:8a:85:b2:a7:f4:5a:49:
61:33:66:e1:7c:32:40:28:8f:45:f0:28:b6:96:78:ed:c6:fc:
f5:2a:7f:09:c6:74:a6:3a:02:39:49:45:5b:36:48:82:55:46:
ec:14:32:40:85:0b:3b:55:12:15:92:66:a9:08:85:3e:09:2f:
34:34:80:a1:b6:87:e6:38:1c:10:30:b7:2d:81:84:6f:5e:6c:
b2:a0:83:45:1b:6c:9c:43:83:5e:d7:93:94:dc:85:e9:95:a5:
56:d9:27:e5:e4:9f:94:8e:7e:df:b1:13:47:59:8a:3d:39:12:
68:e5:37:80:28:c6:7f:0f:c4:c3:24:c6:f3:69:a7:bb:2f:58:
71:c7:0e:fa:40:3b:5c:b8:5c:9d:6a:d0:fd:d8:09:02:66:7a:
d6:49:30:6d:48:83:32:f3:7b:59:d1:ca:33:98:4a:d7:3c:27:
d2:56:59:f2:bd:38:9d:27:ea:36:be:54:1b:e2:a3:23:db:50:
71:d0:9e:0c:c6:01:7e:9b:cd:46:07:20:6a:68:e8:1f:20:36:
86:e5:2b:e6:1a:d5:ff:5d:45:ba:e1:65:d1:be:73:c7:ed:6d:
5b:88:73:ae
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5xItB3ijUHm5ZynBvjZ+55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNTI5MDAyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWUzZGM0Y2VmZWZjODQ5MWUxMTdiNDZiODUwNjNjOWU4NjVmYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsmLiEm2yJcjB+kbVa/oGlJUZ8mL
2UYW16olrsGtsxWEeBJ3IjCd7Cu2eo8u8y6gHPwkiXmRzTWeaoTIyiKqCWUArG4T
7VdUita9g0k54DODAfhRLh/SAqJNozVDBTCONjRAacMS0Ft336QzZDUhEtYBYXDv
dpmsoSOQR0v6SNNbdMFXSOjWEilw8INFhowMSAtGLNUUoIjhkuPcoy6bBAnyEKrQ
gVr8IjZX4QhhL3+dyeu5QtpVpnl+vYJrovFQLNa2bLIxLTdtn9D7V0v9oEYDIHrJ
aXbhR4ylp1VO+bpN/QYjlaXgTpDtcCLjjhprvA6sjXqynBtx4jZLc5LgmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL7j3Ezv78hJHhF7RrhQY8noZfq0MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdnVQY1RPX3Z5RWtlRVh0R3VGQmp5ZWhsLXJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa+JAwQA
Ba/gAwQAWWpIMA0GCSqGSIb3DQEBCwUAA4IBAQCCl5yd9FaZeUg/Qs1pOr0na4MJ
BQhAallR9GUNaYqFsqf0WklhM2bhfDJAKI9F8Ci2lnjtxvz1Kn8JxnSmOgI5SUVb
NkiCVUbsFDJAhQs7VRIVkmapCIU+CS80NIChtofmOBwQMLctgYRvXmyyoINFG2yc
Q4Ne15OU3IXplaVW2Sfl5J+Ujn7fsRNHWYo9ORJo5TeAKMZ/D8TDJMbzaae7L1hx
xw76QDtcuFydatD92AkCZnrWSTBtSIMy83tZ0cozmErXPCfSVlnyvTidJ+o2vlQb
4qMj21Bx0J4MxgF+m81GByBqaOgfIDaG5SvmGtX/XUW64WXRvnPH7W1biHOu
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:27 2026 by rpki-client