Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa
File: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (raw, json)
Hash identifier: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=
Subject key identifier: D1:19:89:D2:85:8D:50:5C:DD:AE:53:6E:D6:39:83:FF:AA:9E:95:3D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019E4635E35E5B6ABC8289F401042374F633
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa
Signing time: Wed 20 May 2026 16:26:37 +0000
ROA not before: Wed 20 May 2026 16:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 212.111.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:35:e3:5e:5b:6a:bc:82:89:f4:01:04:23:74:f6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 20 16:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d11989d2858d505cddae536ed63983ffaa9e953d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:52:56:92:23:0c:87:4c:a4:6f:d0:73:18:
45:1a:69:02:85:61:07:02:54:e9:8f:64:16:3a:58:
a8:e8:a3:08:98:ab:ba:9f:b2:0c:87:4c:9c:8b:89:
cf:75:b3:de:0e:8a:ac:f8:e6:57:55:db:b2:02:ec:
6d:45:d5:6b:c2:65:b9:78:d8:75:e2:70:7b:7d:2f:
36:6c:23:c4:67:d0:05:06:68:f1:ed:9b:f7:94:92:
66:ad:be:59:5e:39:f6:47:bb:de:36:6c:66:d3:3c:
51:ed:7d:45:76:d1:67:6f:1b:b0:e6:f5:d1:82:16:
c3:89:54:58:f3:a3:c4:ac:49:20:75:32:41:a9:3f:
99:33:f3:42:aa:49:55:0f:b0:f5:1a:92:58:bf:c2:
25:bc:a2:c5:79:06:85:53:3e:d6:a6:3a:21:c3:b2:
01:22:d7:ab:a1:f0:ca:f9:ee:36:9d:1b:05:ea:a6:
47:47:8f:e5:2a:f4:b3:cf:27:cf:bb:82:75:c3:50:
d1:27:01:48:bc:3c:20:ac:bf:c4:00:52:55:72:d4:
4d:e4:55:aa:fb:e1:50:e3:9f:b2:20:15:7d:d9:79:
9c:91:7f:c5:d8:2b:3e:a2:f3:c5:30:2f:c0:4d:a9:
a1:41:37:02:1c:54:ed:2e:67:d0:6a:8e:41:ac:00:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:89:D2:85:8D:50:5C:DD:AE:53:6E:D6:39:83:FF:AA:9E:95:3D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3c:32:13:a4:e6:72:a3:0c:9e:2d:9f:6d:4c:d6:0f:e1:43:
57:36:71:53:9f:f6:db:e3:7a:ba:f0:31:da:72:80:2c:bb:40:
32:f0:53:4a:91:e2:20:0d:b7:6f:32:cb:c0:9c:d4:a5:49:67:
b7:a5:e2:b2:36:fa:c5:75:aa:20:5f:bc:07:66:28:e7:55:ac:
f6:54:7f:fd:f7:4f:48:e6:f7:d7:1c:2e:36:74:a2:51:ca:7a:
8b:84:8e:03:ea:90:76:3a:7f:7d:90:da:b5:f3:6d:74:b5:d0:
f5:47:81:cb:dc:01:c1:fa:7b:0a:7c:00:22:65:a8:a1:8c:0f:
11:83:1f:ac:47:1c:70:4a:f0:86:d9:38:ad:3a:78:be:95:87:
58:e6:a7:72:d0:3d:7f:9e:d4:e3:41:3d:c0:a7:64:bb:c6:b4:
0f:7d:84:5b:8c:d6:55:d6:d4:d4:80:a8:aa:c0:d8:13:d7:8f:
6f:c8:02:6e:76:60:bc:1a:ac:3d:ac:d6:f1:a5:08:e4:eb:61:
f4:ba:fb:7b:e6:93:39:0c:23:ff:c7:4d:01:d2:fd:84:7f:e9:
44:7c:d7:b6:5e:0e:ab:36:b8:35:4c:01:d3:95:30:be:c6:8c:
15:8b:eb:28:20:39:0c:1d:27:b7:af:9c:2b:fe:73:f5:86:74:
9b:fe:4c:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5GNeNeW2q8gon0AQQjdPYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjYwNTIwMTYyNjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTE5ODlkMjg1OGQ1MDVjZGRhZTUzNmVkNjM5ODNmZmFhOWU5NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLhSVpIjDIdMpG/QcxhFGmkChWEH
AlTpj2QWOlio6KMImKu6n7IMh0yci4nPdbPeDoqs+OZXVduyAuxtRdVrwmW5eNh1
4nB7fS82bCPEZ9AFBmjx7Zv3lJJmrb5ZXjn2R7veNmxm0zxR7X1FdtFnbxuw5vXR
ghbDiVRY86PErEkgdTJBqT+ZM/NCqklVD7D1GpJYv8IlvKLFeQaFUz7Wpjohw7IB
IterofDK+e42nRsF6qZHR4/lKvSzzyfPu4J1w1DRJwFIvDwgrL/EAFJVctRN5FWq
++FQ45+yIBV92XmckX/F2Cs+ovPFMC/ATamhQTcCHFTtLmfQao5BrAAB3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEZidKFjVBc3a5TbtY5g/+qnpU9MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvMFJtSjBvV05VRnpkcmxOdTFqbURfNnFlbFQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/XMA0G
CSqGSIb3DQEBCwUAA4IBAQAQPDITpOZyowyeLZ9tTNYP4UNXNnFTn/bb43q68DHa
coAsu0Ay8FNKkeIgDbdvMsvAnNSlSWe3peKyNvrFdaogX7wHZijnVaz2VH/9909I
5vfXHC42dKJRynqLhI4D6pB2On99kNq18210tdD1R4HL3AHB+nsKfAAiZaihjA8R
gx+sRxxwSvCG2TitOni+lYdY5qdy0D1/ntTjQT3Ap2S7xrQPfYRbjNZV1tTUgKiq
wNgT149vyAJudmC8Gqw9rNbxpQjk62H0uvt75pM5DCP/x00B0v2Ef+lEfNe2Xg6r
Nrg1TAHTlTC+xowVi+soIDkMHSe3r5wr/nP1hnSb/kxq
-----END CERTIFICATE-----
Generated at Thu May 21 05:28:56 2026 by rpki-client