Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8F3GND7Y1yj5vYLiT3yUFa4uV-E.roa
File: 8F3GND7Y1yj5vYLiT3yUFa4uV-E.roa (raw, json)
Hash identifier: IV/gng92XdoaSup8b8Fi3FEPn5677kdybfLuMoK3hHI=
Subject key identifier: F0:5D:C6:34:3E:D8:D7:28:F9:BD:82:E2:4F:7C:94:15:AE:2E:57:E1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A136D59CDA5DF22951FDD75D1BA23BBD10
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8F3GND7Y1yj5vYLiT3yUFa4uV-E.roa
Signing time: Tue 13 Oct 2026 19:55:31 +0000
ROA not before: Tue 13 Oct 2026 19:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 5.253.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:d5:9c:da:5d:f2:29:51:fd:d7:5d:1b:a2:3b:bd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 13 19:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f05dc6343ed8d728f9bd82e24f7c9415ae2e57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:4c:0d:aa:be:f1:45:77:99:4d:a4:05:27:
04:bb:4c:f0:44:df:42:a0:6f:52:e4:ab:05:f5:61:
51:82:30:5f:da:80:c9:c2:be:78:c6:fc:47:3f:01:
b2:fd:66:06:4a:98:4a:f0:60:cf:58:be:ee:a0:ed:
79:cc:ed:cc:85:48:d9:25:70:44:d4:be:85:77:80:
ea:f2:9d:93:40:6a:97:0e:7a:c4:3f:14:e8:36:66:
65:2d:c5:91:63:1e:2c:13:eb:5f:86:fd:30:16:98:
14:9a:64:a5:2f:f6:e4:a5:90:d2:88:62:3e:a4:e5:
dc:bf:ef:fd:0f:31:31:a4:93:c0:b2:40:0b:d4:a7:
19:18:2b:bb:62:96:82:e2:dc:bb:77:f6:7e:e4:60:
f8:4b:88:0f:6f:26:f9:b4:b9:3a:b9:ab:74:f8:a1:
99:26:e5:71:67:28:2b:2b:6a:8d:db:78:90:ce:a2:
54:5c:53:63:bb:6c:70:53:68:e5:38:c6:6c:66:6d:
87:fa:b6:dd:e0:31:b0:05:a5:b5:7c:f2:29:b9:5f:
54:41:e6:98:99:52:ab:d4:d8:af:c1:c4:87:bf:ef:
c9:bc:2b:06:31:c4:54:46:e3:b9:de:1d:9f:be:a7:
02:69:f0:1a:2c:a3:65:93:e9:54:66:18:c5:fd:d1:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:C6:34:3E:D8:D7:28:F9:BD:82:E2:4F:7C:94:15:AE:2E:57:E1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8F3GND7Y1yj5vYLiT3yUFa4uV-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.39.0/24
Signature Algorithm: sha256WithRSAEncryption
95:28:8c:a2:96:fd:2d:e1:92:15:d6:11:35:7b:9d:2b:81:02:
6c:cb:3f:4a:08:1f:82:d0:9a:49:e7:3f:8a:bf:1a:c0:30:cb:
d5:61:fc:14:df:a4:95:54:20:93:ad:26:bf:f7:f5:c8:fd:69:
98:94:51:3e:45:51:d3:ae:b1:a3:c3:4d:30:91:31:d9:b9:c6:
b7:dd:6f:41:e8:1d:0d:55:94:2c:aa:df:66:52:22:01:bd:39:
ab:d9:14:17:a3:9b:b7:2f:33:35:aa:47:06:47:cd:8a:3c:80:
35:22:64:40:75:a0:c9:b0:a3:df:ac:ea:ff:36:29:09:c7:94:
92:3a:2c:9f:c7:f6:cf:5a:b5:8d:dd:2b:6c:6e:6d:0c:06:47:
16:ef:7c:12:e5:31:02:4b:3f:cb:00:c2:d0:2d:76:2d:7c:da:
69:80:24:30:f5:53:92:52:72:0a:48:89:87:0c:13:f3:b1:35:
17:8c:5e:fc:e9:71:1d:c4:fd:4a:1f:5c:58:be:67:8e:08:0e:
fa:25:21:9f:e2:69:6f:9a:dd:0f:4f:54:0b:dd:08:a4:2a:7d:
d9:c6:6f:68:7e:58:cf:1a:25:bb:b3:9d:7b:4b:fa:b6:1e:f0:
25:3e:60:4b:c5:79:c8:e1:c7:24:6b:8f:d4:6f:33:01:d1:9d:
a2:ea:7b:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE21ZzaXfIpUf3XXRuiO70QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYxMDEzMTk1NTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDVkYzYzNDNlZDhkNzI4ZjliZDgyZTI0ZjdjOTQxNWFlMmU1N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1axMDaq+8UV3mU2kBScEu0zwRN9C
oG9S5KsF9WFRgjBf2oDJwr54xvxHPwGy/WYGSphK8GDPWL7uoO15zO3MhUjZJXBE
1L6Fd4Dq8p2TQGqXDnrEPxToNmZlLcWRYx4sE+tfhv0wFpgUmmSlL/bkpZDSiGI+
pOXcv+/9DzExpJPAskAL1KcZGCu7YpaC4ty7d/Z+5GD4S4gPbyb5tLk6uat0+KGZ
JuVxZygrK2qN23iQzqJUXFNju2xwU2jlOMZsZm2H+rbd4DGwBaW1fPIpuV9UQeaY
mVKr1NivwcSHv+/JvCsGMcRURuO53h2fvqcCafAaLKNlk+lUZhjF/dEFOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBdxjQ+2Nco+b2C4k98lBWuLlfhMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvOEYzR05EN1kxeWo1dllMaVQzeVVGYTR1Vi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf0nMA0G
CSqGSIb3DQEBCwUAA4IBAQCVKIyilv0t4ZIV1hE1e50rgQJsyz9KCB+C0JpJ5z+K
vxrAMMvVYfwU36SVVCCTrSa/9/XI/WmYlFE+RVHTrrGjw00wkTHZuca33W9B6B0N
VZQsqt9mUiIBvTmr2RQXo5u3LzM1qkcGR82KPIA1ImRAdaDJsKPfrOr/NikJx5SS
Oiyfx/bPWrWN3Stsbm0MBkcW73wS5TECSz/LAMLQLXYtfNppgCQw9VOSUnIKSImH
DBPzsTUXjF786XEdxP1KH1xYvmeOCA76JSGf4mlvmt0PT1QL3QikKn3Zxm9ofljP
GiW7s517S/q2HvAlPmBLxXnI4ccka4/UbzMB0Z2i6nti
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:21 2026 by rpki-client