Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Su4NaN6c5-LeIFVRSfnx5mG1Y5g.roa
File: Su4NaN6c5-LeIFVRSfnx5mG1Y5g.roa (raw, json)
Hash identifier: pP4yu4pNvCFtkCCY+SvosUdo8B5N6OrVuPQVXricP8o=
Subject key identifier: 4A:EE:0D:68:DE:9C:E7:E2:DE:20:55:51:49:F9:F1:E6:61:B5:63:98
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E39F54AB567B3097CCB11D235F10CBE39
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Su4NaN6c5-LeIFVRSfnx5mG1Y5g.roa
Signing time: Mon 18 May 2026 07:20:37 +0000
ROA not before: Mon 18 May 2026 07:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57271
IP address blocks: 31.24.251.0/24 maxlen: 24
45.90.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:39:f5:4a:b5:67:b3:09:7c:cb:11:d2:35:f1:0c:be:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 18 07:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aee0d68de9ce7e2de20555149f9f1e661b56398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:5a:0e:9f:17:82:28:79:f7:bf:84:57:ce:
8b:2a:b5:11:f9:20:8a:58:d2:fd:e7:cd:48:ff:0b:
53:fa:3b:87:9e:be:bf:1f:21:03:92:d8:a7:f7:82:
1f:d6:4b:b9:34:5d:40:e1:b5:1e:5f:83:90:0f:49:
4e:3c:f8:35:2b:00:bc:53:4b:7e:30:6d:5a:a8:f8:
88:da:39:d5:f8:fc:97:ec:62:31:8d:01:24:70:1a:
1a:f1:c7:d6:ef:3d:aa:13:1f:31:ef:a3:68:92:f7:
e5:16:44:bb:10:7a:df:a7:f7:f3:9b:ad:e0:ed:71:
1c:ef:53:e8:c7:34:2d:f6:53:b9:94:1c:59:f4:fe:
3a:db:d0:dd:ec:24:43:b0:29:30:81:d9:35:d3:87:
2b:87:5f:ed:fa:e8:b1:8c:2a:ee:ee:26:b5:dd:b4:
c1:42:e2:cb:2b:5a:d4:cb:0c:3f:7b:9c:8f:e9:89:
e2:95:39:48:86:a1:d8:85:6d:5e:35:99:51:e6:57:
4a:1c:a7:30:56:e4:ec:32:02:7a:e2:6b:3e:e5:17:
3b:44:9c:4d:88:95:9f:68:4d:f9:4b:f3:47:19:56:
07:20:0d:72:74:25:56:20:90:e2:63:e0:74:d7:3c:
6a:4a:0b:c5:24:70:08:60:a3:85:1d:aa:b4:62:67:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:0D:68:DE:9C:E7:E2:DE:20:55:51:49:F9:F1:E6:61:B5:63:98
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Su4NaN6c5-LeIFVRSfnx5mG1Y5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.251.0/24
45.90.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9a:c0:ab:f7:89:95:8c:44:62:10:d2:ad:fc:1d:2e:57:a0:
4b:b2:12:a6:8c:8d:eb:e3:23:04:ce:f3:82:fe:3e:f5:b7:c5:
72:07:50:1a:ea:85:0e:a3:1a:fd:0a:d6:c6:b0:aa:b2:f8:ca:
b1:66:a5:10:aa:5c:04:0c:28:eb:b9:98:86:aa:b9:79:1c:dc:
10:c2:01:9c:86:4a:9f:6a:12:34:e6:d3:d1:e8:ef:82:2f:d8:
51:27:d8:96:1d:5f:e3:bf:52:4a:fc:4d:06:88:74:38:6f:9c:
a8:10:64:8d:c7:16:6e:58:5d:d6:cd:1e:5f:57:0a:fb:49:35:
32:38:12:cb:f5:92:22:7f:0d:2a:a6:d5:aa:c9:ec:5e:94:7e:
1a:1a:06:95:87:89:16:af:7c:8c:c5:6c:52:1d:d8:27:23:57:
cc:c5:7f:ae:04:61:c3:bd:34:02:06:9a:78:e7:bb:56:a5:ed:
2e:85:aa:7a:82:7b:88:45:69:2a:5b:16:e9:b0:f2:bd:b6:ac:
c3:5f:3b:1b:14:53:c8:e7:ed:24:2d:34:9f:f1:1a:86:4f:3b:
d3:3e:72:b8:77:98:f5:99:0f:01:23:51:80:96:84:b6:c0:df:
6e:16:ae:38:2b:a7:63:72:c1:b5:11:54:9e:34:fd:09:68:6b:
70:b8:ab:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ459Uq1Z7MJfMsR0jXxDL45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNTE4MDcyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWVlMGQ2OGRlOWNlN2UyZGUyMDU1NTE0OWY5ZjFlNjYxYjU2Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFaDp8Xgih597+EV86LKrUR+SCK
WNL9581I/wtT+juHnr6/HyEDktin94If1ku5NF1A4bUeX4OQD0lOPPg1KwC8U0t+
MG1aqPiI2jnV+PyX7GIxjQEkcBoa8cfW7z2qEx8x76NokvflFkS7EHrfp/fzm63g
7XEc71PoxzQt9lO5lBxZ9P4629Dd7CRDsCkwgdk104crh1/t+uixjCru7ia13bTB
QuLLK1rUyww/e5yP6YnilTlIhqHYhW1eNZlR5ldKHKcwVuTsMgJ64ms+5Rc7RJxN
iJWfaE35S/NHGVYHIA1ydCVWIJDiY+B01zxqSgvFJHAIYKOFHaq0YmcgQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEruDWjenOfi3iBVUUn58eZhtWOYMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvU3U0TmFONmM1LUxlSUZWUlNmbng1bUcxWTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHxj7AwQA
LVouMA0GCSqGSIb3DQEBCwUAA4IBAQCFmsCr94mVjERiENKt/B0uV6BLshKmjI3r
4yMEzvOC/j71t8VyB1Aa6oUOoxr9CtbGsKqy+MqxZqUQqlwEDCjruZiGqrl5HNwQ
wgGchkqfahI05tPR6O+CL9hRJ9iWHV/jv1JK/E0GiHQ4b5yoEGSNxxZuWF3WzR5f
Vwr7STUyOBLL9ZIifw0qptWqyexelH4aGgaVh4kWr3yMxWxSHdgnI1fMxX+uBGHD
vTQCBpp457tWpe0uhap6gnuIRWkqWxbpsPK9tqzDXzsbFFPI5+0kLTSf8RqGTzvT
PnK4d5j1mQ8BI1GAloS2wN9uFq44K6djcsG1EVSeNP0JaGtwuKvP
-----END CERTIFICATE-----
Generated at Sun May 31 09:56:58 2026 by rpki-client