Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/sELyDHGOUn2uEk5jyHcvKM4ph7c.roa
File: sELyDHGOUn2uEk5jyHcvKM4ph7c.roa (raw, json)
Hash identifier: a9AkZjKjmc0s2iMsrnbmngt1xzafnNNDQyzYyoL3bG8=
Subject key identifier: B0:42:F2:0C:71:8E:52:7D:AE:12:4E:63:C8:77:2F:28:CE:29:87:B7
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A13A670847FDA48F74EAAB8B707D106F84
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/sELyDHGOUn2uEk5jyHcvKM4ph7c.roa
Signing time: Wed 14 Oct 2026 12:33:13 +0000
ROA not before: Wed 14 Oct 2026 12:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 216.162.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:67:08:47:fd:a4:8f:74:ea:ab:8b:70:7d:10:6f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 14 12:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b042f20c718e527dae124e63c8772f28ce2987b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:ab:d2:6c:29:f4:be:eb:2b:25:3c:27:aa:
f4:a8:95:35:23:84:45:a4:cb:64:91:7f:46:98:8b:
79:a5:bc:dc:f1:58:10:67:d1:ab:65:9a:bf:36:a9:
70:97:fc:bb:6f:6c:a0:84:50:a3:b2:08:62:48:e3:
8d:71:cb:e2:cd:cd:03:87:b4:4e:7d:b2:d0:58:1d:
ab:20:70:36:a4:26:09:46:84:04:83:12:9b:76:b2:
e0:a5:3c:01:eb:07:4a:ca:62:cb:3c:6c:a4:5f:b5:
d4:a2:dc:1b:d2:08:4a:5f:16:9d:5a:8e:a8:4e:95:
86:73:e2:e7:26:c9:f7:1c:48:f5:34:df:a9:24:8a:
f7:fb:08:4f:51:e1:65:91:03:5d:24:85:ee:9d:e3:
0a:f9:0a:40:be:d8:7b:63:e2:87:73:32:c9:3c:95:
f6:ed:ee:dc:81:62:10:e1:19:99:c6:a2:13:ee:d0:
91:09:9c:ed:25:9a:e2:50:9e:2e:a0:ef:4d:cd:31:
18:5b:14:1e:2b:e6:da:cb:56:92:48:c2:c5:b7:5f:
bf:79:12:4e:1c:84:18:80:5f:43:ac:a9:4a:31:a1:
c8:22:a7:6d:4a:01:3d:03:a0:ff:60:cc:60:9e:7e:
ed:9c:e0:7c:72:f3:32:ed:11:22:77:c4:41:25:68:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:F2:0C:71:8E:52:7D:AE:12:4E:63:C8:77:2F:28:CE:29:87:B7
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/sELyDHGOUn2uEk5jyHcvKM4ph7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.47.0/24
Signature Algorithm: sha256WithRSAEncryption
00:41:ed:c8:d9:df:63:a0:fd:8f:db:65:2f:de:12:62:ab:ed:
0b:a9:7f:7d:4e:92:9a:5b:04:88:49:b6:b7:b7:42:a1:61:e2:
a3:de:ec:4b:3b:bd:1e:59:fa:e7:8d:a4:8a:e3:15:0a:55:dc:
95:3d:2a:aa:66:98:2c:87:e4:27:b6:fd:5d:4c:15:54:03:28:
2f:4f:10:2b:0a:8d:46:16:81:ac:c0:9b:eb:45:9f:92:9a:20:
d0:64:a6:99:0d:a2:2d:09:2f:1e:57:aa:49:34:d7:a0:52:45:
ab:69:4a:8e:07:82:74:b5:ce:e5:a2:ad:87:92:08:5f:a1:b0:
dc:38:ed:4d:af:b2:b0:ca:fa:76:1a:cf:02:c1:ed:5c:0e:c4:
a8:ad:8d:1f:73:0e:5a:65:c0:a9:50:ea:c6:4b:15:4c:1b:12:
6d:fe:ed:57:f1:db:de:a5:e2:af:c2:3e:78:44:f6:42:e5:6f:
97:13:bf:0e:97:e6:73:5b:3f:a5:4a:dd:df:fe:f4:f7:a5:a4:
3b:e8:56:24:55:ae:08:cc:c3:ee:2b:c1:65:d8:66:c0:b3:6d:
90:75:c6:eb:ef:72:2e:86:b0:cd:15:9c:be:30:19:74:cb:17:
4d:6e:ae:53:b3:6c:17:44:bd:e1:79:79:1c:f2:80:9f:82:c0:
f1:cf:a7:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE6ZwhH/aSPdOqri3B9EG+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYxMDE0MTIzMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDQyZjIwYzcxOGU1MjdkYWUxMjRlNjNjODc3MmYyOGNlMjk4N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVmr0mwp9L7rKyU8J6r0qJU1I4RF
pMtkkX9GmIt5pbzc8VgQZ9GrZZq/Nqlwl/y7b2yghFCjsghiSOONccvizc0Dh7RO
fbLQWB2rIHA2pCYJRoQEgxKbdrLgpTwB6wdKymLLPGykX7XUotwb0ghKXxadWo6o
TpWGc+LnJsn3HEj1NN+pJIr3+whPUeFlkQNdJIXuneMK+QpAvth7Y+KHczLJPJX2
7e7cgWIQ4RmZxqIT7tCRCZztJZriUJ4uoO9NzTEYWxQeK+bay1aSSMLFt1+/eRJO
HIQYgF9DrKlKMaHIIqdtSgE9A6D/YMxgnn7tnOB8cvMy7REid8RBJWiaCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBC8gxxjlJ9rhJOY8h3LyjOKYe3MB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEvc0VMeURIR09VbjJ1RWs1anlIY3ZLTTRwaDdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KIvMA0G
CSqGSIb3DQEBCwUAA4IBAQAAQe3I2d9joP2P22Uv3hJiq+0LqX99TpKaWwSISba3
t0KhYeKj3uxLO70eWfrnjaSK4xUKVdyVPSqqZpgsh+Qntv1dTBVUAygvTxArCo1G
FoGswJvrRZ+SmiDQZKaZDaItCS8eV6pJNNegUkWraUqOB4J0tc7loq2HkghfobDc
OO1Nr7Kwyvp2Gs8Cwe1cDsSorY0fcw5aZcCpUOrGSxVMGxJt/u1X8dvepeKvwj54
RPZC5W+XE78Ol+ZzWz+lSt3f/vT3paQ76FYkVa4IzMPuK8Fl2GbAs22Qdcbr73Iu
hrDNFZy+MBl0yxdNbq5Ts2wXRL3heXkc8oCfgsDxz6e0
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:50 2026 by rpki-client