Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ALO3Qlxx-v5_rVC3KZ4QsZ2p3Q4.roa
File: ALO3Qlxx-v5_rVC3KZ4QsZ2p3Q4.roa (raw, json)
Hash identifier: YjDYNJEAbu31/bNPzefu/2Oydl8evmmZTBFRwvp1e8Q=
Subject key identifier: 00:B3:B7:42:5C:71:FA:FE:7F:AD:50:B7:29:9E:10:B1:9D:A9:DD:0E
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 01A033B7EFFA62A5C96881F4768D3C8A0BFE
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ALO3Qlxx-v5_rVC3KZ4QsZ2p3Q4.roa
Signing time: Mon 24 Aug 2026 12:21:27 +0000
ROA not before: Mon 24 Aug 2026 12:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59729
IP address blocks: 62.171.231.0/24 maxlen: 24
93.188.155.0/24 maxlen: 24
185.162.10.0/24 maxlen: 24
185.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:b7:ef:fa:62:a5:c9:68:81:f4:76:8d:3c:8a:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Aug 24 12:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00b3b7425c71fafe7fad50b7299e10b19da9dd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:44:25:b8:52:f6:91:68:09:91:97:65:5c:
b5:5d:13:c3:5b:c7:0a:08:eb:b1:cd:68:76:33:36:
ab:c2:e6:96:05:91:ae:f1:54:1f:56:96:04:56:4a:
96:f1:99:30:2b:5c:c6:68:2e:a0:e4:a2:71:9f:c6:
d0:ab:e1:a0:02:69:ba:f2:b5:8d:d9:29:9d:6d:38:
f2:ed:0d:22:75:e5:03:f0:2f:ef:a2:f5:3e:3f:c8:
15:ae:fa:d8:eb:02:11:b0:39:46:2a:52:01:11:88:
29:da:94:78:db:7e:c2:52:15:89:b0:13:36:73:70:
c9:50:86:54:d0:9f:97:0f:43:60:06:b5:f3:65:01:
50:ac:4f:95:a6:d1:50:95:4d:c8:2e:dc:79:fd:4d:
9f:e4:e2:44:18:cd:57:49:07:a2:71:6c:b7:70:db:
d9:ed:2e:7e:e1:66:cc:d4:84:b1:04:3b:0b:76:57:
f5:83:67:90:35:b9:90:74:91:0b:cb:ce:25:4e:46:
aa:35:58:53:fb:6f:e0:78:ef:ac:e7:07:b6:de:e5:
1c:f7:50:d7:69:0c:d5:bf:56:c7:b5:9d:07:5c:6d:
44:92:9c:c4:87:c0:7e:ab:69:1c:2d:a8:b0:da:2e:
75:0f:fc:18:9e:89:6c:f1:e8:6b:fd:f9:c4:7f:63:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:B7:42:5C:71:FA:FE:7F:AD:50:B7:29:9E:10:B1:9D:A9:DD:0E
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ALO3Qlxx-v5_rVC3KZ4QsZ2p3Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.231.0/24
93.188.155.0/24
185.162.10.0/24
185.204.53.0/24
Signature Algorithm: sha256WithRSAEncryption
12:88:98:fa:55:69:14:6e:27:d2:4b:f7:bf:32:00:05:a2:38:
61:6b:07:5d:db:7d:1e:30:c4:f3:06:56:b9:3a:5b:3a:e6:6f:
a6:9a:ab:b2:bd:a6:4e:fc:3b:03:3b:d0:5c:6f:44:59:ee:5b:
80:fe:08:38:b7:e1:61:9f:a3:f1:d3:32:30:e7:96:c1:b4:55:
42:c8:df:72:67:dd:01:f4:31:b8:99:60:23:f4:ff:ca:9f:9a:
bc:cb:00:29:07:7c:df:82:a3:ac:de:ba:79:2e:4f:8e:54:0d:
d0:f5:8a:85:d9:2c:f4:54:22:ed:28:72:eb:22:81:58:07:db:
ba:4d:d6:a6:22:0e:bf:e8:3d:d2:31:d0:38:5e:40:d9:85:46:
de:fa:c3:04:62:7d:57:6d:ff:6b:c8:3f:2c:32:f5:ee:82:85:
42:63:b2:c3:00:6e:d8:87:67:22:29:e9:09:20:a9:35:f0:4e:
4f:73:ac:ff:1d:85:38:30:a9:7c:ab:6e:1f:d2:f1:b0:e4:88:
11:2c:b1:f5:94:11:f4:e7:0d:16:de:4b:17:95:fb:de:f2:69:
49:61:3f:e0:b4:02:89:34:9a:40:fc:4c:04:13:9a:8d:4a:70:
e2:37:10:17:f5:a9:1c:9f:20:76:b6:3d:8d:b6:16:73:d5:7c:
5b:d4:b5:36
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaAzt+/6YqXJaIH0do08igv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjYwODI0MTIyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGIzYjc0MjVjNzFmYWZlN2ZhZDUwYjcyOTllMTBiMTlkYTlkZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xJEJbhS9pFoCZGXZVy1XRPDW8cK
COuxzWh2MzarwuaWBZGu8VQfVpYEVkqW8ZkwK1zGaC6g5KJxn8bQq+GgAmm68rWN
2SmdbTjy7Q0ideUD8C/vovU+P8gVrvrY6wIRsDlGKlIBEYgp2pR4237CUhWJsBM2
c3DJUIZU0J+XD0NgBrXzZQFQrE+VptFQlU3ILtx5/U2f5OJEGM1XSQeicWy3cNvZ
7S5+4WbM1ISxBDsLdlf1g2eQNbmQdJELy84lTkaqNVhT+2/geO+s5we23uUc91DX
aQzVv1bHtZ0HXG1EkpzEh8B+q2kcLaiw2i51D/wYnols8ehr/fnEf2OMLwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFACzt0Jccfr+f61QtymeELGdqd0OMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvQUxPM1FseHgtdjVfclZDM0taNFFzWjJwM1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPqvnAwQA
XbybAwQAuaIKAwQAucw1MA0GCSqGSIb3DQEBCwUAA4IBAQASiJj6VWkUbifSS/e/
MgAFojhhawdd230eMMTzBla5Ols65m+mmquyvaZO/DsDO9Bcb0RZ7luA/gg4t+Fh
n6Px0zIw55bBtFVCyN9yZ90B9DG4mWAj9P/Kn5q8ywApB3zfgqOs3rp5Lk+OVA3Q
9YqF2Sz0VCLtKHLrIoFYB9u6TdamIg6/6D3SMdA4XkDZhUbe+sMEYn1Xbf9ryD8s
MvXugoVCY7LDAG7Yh2ciKekJIKk18E5Pc6z/HYU4MKl8q24f0vGw5IgRLLH1lBH0
5w0W3ksXlfve8mlJYT/gtAKJNJpA/EwEE5qNSnDiNxAX9akcnyB2tj2NthZz1Xxb
1LU2
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:43 2026 by rpki-client