Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y-J2HPsokPK8iGS5GO51flH9q9s.roa
File: y-J2HPsokPK8iGS5GO51flH9q9s.roa (raw, json)
Hash identifier: m9olYM9Itgl6nI5IyKfNp1DILJPhAg6dsOcH1UHc5Do=
Subject key identifier: CB:E2:76:1C:FB:28:90:F2:BC:88:64:B9:18:EE:75:7E:51:FD:AB:DB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F5F28EB021BD331B7C40FEB52DD9791A9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y-J2HPsokPK8iGS5GO51flH9q9s.roa
Signing time: Tue 14 Jul 2026 05:45:44 +0000
ROA not before: Tue 14 Jul 2026 05:45:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 5.231.121.0/24 maxlen: 24
94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:28:eb:02:1b:d3:31:b7:c4:0f:eb:52:dd:97:91:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 14 05:45:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbe2761cfb2890f2bc8864b918ee757e51fdabdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:71:cd:a0:46:ed:2b:4a:fc:3a:58:84:d4:
0f:fe:0e:47:a5:19:ba:5f:bf:23:1f:6c:9d:b3:f1:
5c:99:b0:52:bc:1a:4f:7a:76:14:0c:a4:a1:f1:ab:
b2:71:3a:92:c6:b5:02:26:8a:12:b4:71:36:58:7b:
e2:21:91:8f:99:75:8f:ca:81:47:e0:7f:ee:7b:04:
c2:9c:ce:a6:05:f7:57:ed:2f:80:62:a2:a5:88:fa:
77:1e:ec:d5:70:d2:d0:35:d0:62:8a:1f:02:ae:be:
83:d2:2e:07:94:e4:b6:c4:36:5a:12:c8:8a:35:5d:
b6:f7:32:06:28:e2:65:0c:09:fa:c9:dd:31:cf:52:
98:39:d0:ff:5a:82:f5:69:56:52:11:79:e4:cc:e2:
fb:ec:0f:ad:a1:99:b1:a9:59:54:c9:d0:1b:f0:9f:
cd:ae:06:4d:53:06:e0:a3:2e:19:ce:51:33:d5:25:
42:e9:0e:85:9a:47:f7:de:ff:43:6b:d1:ca:d6:bb:
91:d5:55:59:3e:b6:79:37:9f:9d:6c:2e:a6:6c:5b:
3c:b4:1f:36:ff:73:c4:9b:05:32:ce:4e:95:ff:03:
f6:33:56:0c:f8:28:00:ea:23:58:35:4f:b4:ff:e2:
79:42:10:31:1f:61:40:0b:89:76:17:69:e5:9f:56:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:76:1C:FB:28:90:F2:BC:88:64:B9:18:EE:75:7E:51:FD:AB:DB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y-J2HPsokPK8iGS5GO51flH9q9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.121.0/24
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9b:91:44:ea:f9:f7:06:f7:b0:57:9d:2b:b3:89:7c:cc:63:
a5:da:cd:11:6a:82:78:86:d7:e8:a2:5d:38:5b:9e:3a:f6:fa:
58:92:64:9f:0e:9f:fe:f9:6e:a6:38:0d:2d:c3:79:87:7d:d7:
d7:0b:08:20:aa:0f:6f:eb:ec:72:5b:0e:a4:26:e2:a7:2c:25:
50:98:89:66:54:cc:77:a1:5a:84:bc:85:e7:41:65:b8:c3:d9:
89:ff:0f:1f:69:f1:dd:06:66:2f:e5:f0:11:a8:17:60:ef:6e:
a0:c8:6e:b1:52:72:26:81:b5:ba:17:fa:09:7e:71:6f:19:b5:
10:bc:b5:49:56:d1:a9:98:0e:48:97:bb:f3:1e:1b:68:ce:c2:
a1:bd:c4:21:e5:bc:74:f1:2c:fb:dd:d6:c4:35:5f:43:be:48:
6e:b6:5c:79:77:8a:8d:a2:3c:be:03:71:72:b2:8c:ca:fb:e5:
9e:1d:51:1c:7c:27:51:80:4d:d3:26:90:9b:9c:5e:4d:fc:25:
f0:f7:f7:9a:f1:0b:d3:98:c3:2b:0b:c3:be:4b:d6:37:f6:08:
0d:58:77:c3:f3:0a:d1:0b:4a:12:c0:61:7e:86:2e:33:71:33:
68:89:b4:3b:1d:a8:3f:53:25:23:9c:a9:71:e9:4f:1b:e6:b2:
96:bb:7d:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9fKOsCG9Mxt8QP61Ldl5GpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzE0MDU0NTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmUyNzYxY2ZiMjg5MGYyYmM4ODY0YjkxOGVlNzU3ZTUxZmRhYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy5xzaBG7StK/DpYhNQP/g5HpRm6
X78jH2yds/FcmbBSvBpPenYUDKSh8auycTqSxrUCJooStHE2WHviIZGPmXWPyoFH
4H/uewTCnM6mBfdX7S+AYqKliPp3HuzVcNLQNdBiih8Crr6D0i4HlOS2xDZaEsiK
NV229zIGKOJlDAn6yd0xz1KYOdD/WoL1aVZSEXnkzOL77A+toZmxqVlUydAb8J/N
rgZNUwbgoy4ZzlEz1SVC6Q6Fmkf33v9Da9HK1ruR1VVZPrZ5N5+dbC6mbFs8tB82
/3PEmwUyzk6V/wP2M1YM+CgA6iNYNU+0/+J5QhAxH2FAC4l2F2nln1ZOXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMvidhz7KJDyvIhkuRjudX5R/avbMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveS1KMkhQc29rUEs4aUdTNUdPNTFmbEg5cTlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABed5AwQA
XvnsMA0GCSqGSIb3DQEBCwUAA4IBAQA9m5FE6vn3BvewV50rs4l8zGOl2s0RaoJ4
htfool04W5469vpYkmSfDp/++W6mOA0tw3mHfdfXCwggqg9v6+xyWw6kJuKnLCVQ
mIlmVMx3oVqEvIXnQWW4w9mJ/w8fafHdBmYv5fARqBdg726gyG6xUnImgbW6F/oJ
fnFvGbUQvLVJVtGpmA5Il7vzHhtozsKhvcQh5bx08Sz73dbENV9Dvkhutlx5d4qN
ojy+A3FysozK++WeHVEcfCdRgE3TJpCbnF5N/CXw9/ea8QvTmMMrC8O+S9Y39ggN
WHfD8wrRC0oSwGF+hi4zcTNoibQ7Hag/UyUjnKlx6U8b5rKWu31B
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:25 2026 by rpki-client