Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/v_6CUL2qwChs3nLogQY3kxGVYPA.roa
File: v_6CUL2qwChs3nLogQY3kxGVYPA.roa (raw, json)
Hash identifier: jDPjt449FW2cKEjyTYSujYn++20Xz+QiaBZOsykN2xc=
Subject key identifier: BF:FE:82:50:BD:AA:C0:28:6C:DE:72:E8:81:06:37:93:11:95:60:F0
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A129EC9EC0F6468031E1A9989E076F4B92
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/v_6CUL2qwChs3nLogQY3kxGVYPA.roa
Signing time: Sun 11 Oct 2026 07:45:35 +0000
ROA not before: Sun 11 Oct 2026 07:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402799
IP address blocks: 187.52.40.0/24 maxlen: 24
187.52.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:ec:9e:c0:f6:46:80:31:e1:a9:98:9e:07:6f:4b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 11 07:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bffe8250bdaac0286cde72e881063793119560f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:14:43:dd:4d:68:c2:9d:b7:82:e5:a6:3b:
fd:c1:0f:d6:08:79:9a:44:46:fb:40:d8:36:5f:23:
d1:03:9f:33:04:a3:b3:02:26:aa:40:8d:51:42:11:
c9:cb:05:30:0a:61:b3:d9:9b:d3:08:9b:5f:13:d4:
c7:3b:6e:5a:2e:b8:8c:70:8c:65:ae:b1:41:ca:9c:
0b:47:ac:4c:49:70:6a:3a:25:0b:7f:06:96:2f:f5:
be:b6:52:72:51:40:8a:1d:ef:ce:a9:5f:a8:3d:ff:
1e:72:48:7f:d3:fa:aa:fe:53:47:4f:ab:2a:47:ca:
9a:97:fa:a0:35:30:2c:6f:50:40:83:ce:bf:cf:30:
4b:0b:9e:23:6d:f9:fe:56:7b:9b:a9:7e:6b:2d:27:
6a:79:6c:d0:bf:53:1d:ea:65:3b:0c:2b:98:cc:eb:
f0:cc:a7:31:98:2d:fb:56:60:52:8a:1f:c3:c7:db:
d9:f4:c1:7c:9c:b7:06:4a:15:6e:d8:9c:cd:bc:8c:
eb:fc:fc:ad:7a:60:d6:6a:db:e5:3f:bd:61:ff:2d:
94:a1:0f:1a:22:ee:a6:d8:8e:95:9b:c0:63:55:19:
ff:ce:6c:e7:bf:dd:09:1b:bf:6f:9a:c9:3f:a5:68:
72:ee:ce:3f:a2:b7:32:50:81:46:58:1a:ec:6b:a7:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:82:50:BD:AA:C0:28:6C:DE:72:E8:81:06:37:93:11:95:60:F0
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/v_6CUL2qwChs3nLogQY3kxGVYPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.52.40.0/24
187.52.42.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:b9:38:cd:9e:2c:1a:97:6e:02:15:7c:db:f2:88:67:02:
c7:34:b7:6d:5f:68:7f:c2:31:79:2b:d7:a6:a8:4d:18:f0:01:
ca:7e:25:ae:cd:c6:ab:26:76:a2:ba:ad:30:8d:49:92:2b:d8:
25:c9:fd:fb:ae:cb:cb:dd:25:dd:e4:cd:ea:6e:04:24:2d:0d:
29:bd:e8:53:03:60:01:2e:b3:45:2e:f3:58:e6:03:35:c4:71:
e2:64:3d:f4:33:4d:20:2d:34:75:64:b4:22:02:a4:b2:ec:0e:
0e:f9:1c:7d:06:46:a7:47:7d:80:fd:ff:fe:f3:af:f9:03:ca:
6c:6e:55:99:e9:94:83:c4:08:87:9e:ce:dc:c2:f9:a6:2b:bc:
b0:a9:78:50:26:6b:90:62:0a:b7:cd:d2:5c:0a:4c:c9:34:ec:
85:9c:b2:4e:44:75:48:46:7e:1e:93:46:e9:82:5f:e2:d8:8b:
15:38:32:02:9f:d8:ac:7d:9c:36:38:f9:3c:40:8f:20:00:90:
f1:fa:84:65:6a:73:64:57:f7:47:bc:5c:40:2f:e9:94:22:a9:
1b:b8:78:87:41:53:da:11:6d:94:0b:e1:2e:2f:12:47:b8:f5:
6f:ad:06:4e:0d:df:58:00:17:1a:50:0f:ca:37:b8:ce:54:31:
ed:13:e9:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEp7J7A9kaAMeGpmJ4Hb0uSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYxMDExMDc0NTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmZlODI1MGJkYWFjMDI4NmNkZTcyZTg4MTA2Mzc5MzExOTU2MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z8UQ91NaMKdt4Llpjv9wQ/WCHma
REb7QNg2XyPRA58zBKOzAiaqQI1RQhHJywUwCmGz2ZvTCJtfE9THO25aLriMcIxl
rrFBypwLR6xMSXBqOiULfwaWL/W+tlJyUUCKHe/OqV+oPf8eckh/0/qq/lNHT6sq
R8qal/qgNTAsb1BAg86/zzBLC54jbfn+VnubqX5rLSdqeWzQv1Md6mU7DCuYzOvw
zKcxmC37VmBSih/Dx9vZ9MF8nLcGShVu2JzNvIzr/PytemDWatvlP71h/y2UoQ8a
Iu6m2I6Vm8BjVRn/zmznv90JG79vmsk/pWhy7s4/orcyUIFGWBrsa6cbaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL/+glC9qsAobN5y6IEGN5MRlWDwMB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvdl82Q1VMMnF3Q2hzM25Mb2dRWTNreEdWWVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuzQoAwQA
uzQqMA0GCSqGSIb3DQEBCwUAA4IBAQCT1Lk4zZ4sGpduAhV82/KIZwLHNLdtX2h/
wjF5K9emqE0Y8AHKfiWuzcarJnaiuq0wjUmSK9glyf37rsvL3SXd5M3qbgQkLQ0p
vehTA2ABLrNFLvNY5gM1xHHiZD30M00gLTR1ZLQiAqSy7A4O+Rx9BkanR32A/f/+
86/5A8psblWZ6ZSDxAiHns7cwvmmK7ywqXhQJmuQYgq3zdJcCkzJNOyFnLJORHVI
Rn4ek0bpgl/i2IsVODICn9isfZw2OPk8QI8gAJDx+oRlanNkV/dHvFxAL+mUIqkb
uHiHQVPaEW2UC+EuLxJHuPVvrQZODd9YABcaUA/KN7jOVDHtE+k6
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:13:12 2026 by rpki-client