Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DZehS0DHigUmyJm4kXa3GGlZYsY.roa
File: DZehS0DHigUmyJm4kXa3GGlZYsY.roa (raw, json)
Hash identifier: NgbZv7Fm3R3yowAXaSTORkhQQG6kb8WpApY+dKATnR0=
Subject key identifier: 0D:97:A1:4B:40:C7:8A:05:26:C8:99:B8:91:76:B7:18:69:59:62:C6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019E4FE53998BE3E55A035D9065AD4A54DD4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DZehS0DHigUmyJm4kXa3GGlZYsY.roa
Signing time: Fri 22 May 2026 13:34:43 +0000
ROA not before: Fri 22 May 2026 13:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 31.222.250.0/24 maxlen: 24
45.135.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:e5:39:98:be:3e:55:a0:35:d9:06:5a:d4:a5:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 22 13:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d97a14b40c78a0526c899b89176b718695962c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:cb:2f:a1:13:46:bd:49:16:f8:ab:1d:bd:
16:3e:08:fc:ec:b4:57:bc:37:d1:70:dc:e8:e5:35:
c5:fe:c6:64:71:8c:89:f5:5c:dc:21:1c:aa:dc:d6:
57:84:fa:5d:c1:fe:c6:76:df:09:1e:4f:7d:df:5b:
e9:b6:3c:b0:b7:2d:e7:17:ad:68:95:65:ba:a5:2a:
31:33:8c:39:26:6d:ac:c9:85:33:6d:1f:43:7c:01:
a9:42:d7:ee:17:89:7e:39:dc:20:97:81:21:07:8e:
aa:8f:65:c1:75:b4:4d:36:e7:61:59:a1:e3:74:12:
94:57:4e:e9:34:51:d7:be:a7:f5:80:00:f8:b4:18:
da:72:45:87:b4:ca:fd:32:a5:fb:2f:2a:50:c8:af:
1a:51:48:8d:69:f7:47:3b:f7:2b:64:d9:90:3e:17:
d7:dc:f5:2d:a8:52:b3:b1:8b:23:90:b6:5c:bd:5e:
10:da:4f:a2:13:e0:64:6c:3b:d2:4e:a6:5e:07:5c:
05:7e:fc:c5:54:28:0a:7b:d9:fe:6f:ab:19:0b:f3:
4d:57:09:f1:94:a3:cb:58:3a:1c:0f:e9:6c:cd:2d:
9b:10:a1:ae:27:76:03:03:54:46:eb:59:fc:32:f7:
ef:30:a1:6e:5e:cf:9e:94:f6:eb:f0:0e:0b:f7:79:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:A1:4B:40:C7:8A:05:26:C8:99:B8:91:76:B7:18:69:59:62:C6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DZehS0DHigUmyJm4kXa3GGlZYsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.250.0/24
45.135.12.0/22
Signature Algorithm: sha256WithRSAEncryption
10:ef:19:7f:b3:86:5d:f4:bd:3e:e7:73:ce:19:d6:02:1e:5c:
a8:65:0b:03:66:85:6b:05:1f:8d:19:f0:0f:20:98:56:80:1d:
9f:63:1e:7e:56:a1:d7:8f:94:28:88:16:29:ef:97:bc:0f:63:
92:d1:32:f8:d3:95:d8:bc:98:db:93:f5:9c:6f:02:26:0f:47:
52:9e:32:e7:b9:85:14:42:b6:92:ef:76:4f:af:0b:ce:0e:d8:
32:70:8f:30:46:62:51:e6:85:bd:db:3f:f9:d1:9f:eb:37:1c:
f1:91:63:cd:01:e4:8e:32:9c:6a:49:5d:f2:e1:99:e0:48:7c:
c2:1b:51:d2:da:88:07:6b:d6:13:eb:b1:c3:90:a6:0c:cb:f8:
20:19:47:cf:e5:80:57:97:cb:7d:c6:3d:3e:87:01:7b:13:56:
30:77:f0:36:6c:9a:a8:37:00:a3:a0:54:13:3d:d8:49:5c:29:
ec:33:3e:ea:47:d8:a3:df:9f:3c:85:56:09:fd:a8:63:27:78:
b6:02:6f:50:e4:27:a7:b2:e6:ab:8f:42:dd:0a:9f:72:83:da:
4c:cf:56:32:ea:8f:34:b1:60:7b:12:f9:6c:24:0b:b1:b0:2d:
eb:89:8c:cc:da:92:b2:03:e3:22:70:62:1a:6f:bb:b8:e8:80:
25:63:28:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5P5TmYvj5VoDXZBlrUpU3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwNTIyMTMzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDk3YTE0YjQwYzc4YTA1MjZjODk5Yjg5MTc2YjcxODY5NTk2MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3jLL6ETRr1JFvirHb0WPgj87LRX
vDfRcNzo5TXF/sZkcYyJ9VzcIRyq3NZXhPpdwf7Gdt8JHk9931vptjywty3nF61o
lWW6pSoxM4w5Jm2syYUzbR9DfAGpQtfuF4l+Odwgl4EhB46qj2XBdbRNNudhWaHj
dBKUV07pNFHXvqf1gAD4tBjackWHtMr9MqX7LypQyK8aUUiNafdHO/crZNmQPhfX
3PUtqFKzsYsjkLZcvV4Q2k+iE+BkbDvSTqZeB1wFfvzFVCgKe9n+b6sZC/NNVwnx
lKPLWDocD+lszS2bEKGuJ3YDA1RG61n8MvfvMKFuXs+elPbr8A4L93m+DwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA2XoUtAx4oFJsiZuJF2txhpWWLGMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvRFplaFMwREhpZ1VteUptNGtYYTNHR2xaWXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH976AwQC
LYcMMA0GCSqGSIb3DQEBCwUAA4IBAQAQ7xl/s4Zd9L0+53POGdYCHlyoZQsDZoVr
BR+NGfAPIJhWgB2fYx5+VqHXj5QoiBYp75e8D2OS0TL405XYvJjbk/WcbwImD0dS
njLnuYUUQraS73ZPrwvODtgycI8wRmJR5oW92z/50Z/rNxzxkWPNAeSOMpxqSV3y
4ZngSHzCG1HS2ogHa9YT67HDkKYMy/ggGUfP5YBXl8t9xj0+hwF7E1Ywd/A2bJqo
NwCjoFQTPdhJXCnsMz7qR9ij3588hVYJ/ahjJ3i2Am9Q5Censuarj0LdCp9yg9pM
z1Yy6o80sWB7EvlsJAuxsC3riYzM2pKyA+MicGIab7u46IAlYyjJ
-----END CERTIFICATE-----
Generated at Sat May 23 19:54:18 2026 by rpki-client